Edit tour

Windows Analysis Report
https://cex.io/buy-bitcoins

Overview

General Information

Sample URL:	https://cex.io/buy-bitcoins
Analysis ID:	1417519
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 7008 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://cex.io/buy-bitcoins MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5632 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1880,i,98147228044675047,16913516860262030291,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: about:blank	HTTP Parser: No favicon
Source: about:blank	HTTP Parser: No favicon
Source: about:blank	HTTP Parser: No favicon
Source: https://tr.snapchat.com/cm/i?pid=4d52341b-7196-4dc9-a490-6fe981c45213&u_scsid=a27a48c3-42e1-4aba-be5f-d5e80ef0be4b&u_sclid=3b5c3bf8-9419-47f4-bbf5-efbbc5a641a6	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49871 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.16:49880 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.16:49882 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49897 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203

Source: global traffic	HTTP traffic detected: GET /buy-bitcoins HTTP/1.1Host: cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /landings/css/SeoBuyBitcoinForUsd.css?v=1.8.83 HTTP/1.1Host: static.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /landings/ui-components.js?v=1.8.83 HTTP/1.1Host: static.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /landings/SeoBuyBitcoinForUsd.js?v=1.8.83 HTTP/1.1Host: static.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /landings/css/ui-components.css?v=1.8.83 HTTP/1.1Host: static.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /is-user-logged-in HTTP/1.1Host: cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/buy-bitcoinsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins
Source: global traffic	HTTP traffic detected: GET /bundles/scripts/bundleWidgetLoader.js HTTP/1.1Host: static.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins
Source: global traffic	HTTP traffic detected: GET /static/resources/fonts/OpenSans-Bold.woff2 HTTP/1.1Host: profile.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://cex.iosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/resources/fonts/OpenSans-Regular.woff2 HTTP/1.1Host: profile.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://cex.iosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/resources/content/header.json HTTP/1.1Host: profile.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/resources/media/chevron-right.svg HTTP/1.1Host: profile.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/resources/media/cex-full-logo.svg HTTP/1.1Host: profile.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/resources/content/footer.json HTTP/1.1Host: profile.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/profile HTTP/1.1Host: contact-center.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins
Source: global traffic	HTTP traffic detected: GET /client_data/9022a6a83360995949fccfed/script.js HTTP/1.1Host: cdn-cookieyes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /is-user-logged-in HTTP/1.1Host: cex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As
Source: global traffic	HTTP traffic detected: GET /single-bundle-widget?forPage=/buy-bitcoins&originator=cex HTTP/1.1Host: cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/buy-bitcoinsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As
Source: global traffic	HTTP traffic detected: GET /scripts/currencyProfileForWidget/ HTTP/1.1Host: cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cex.io/buy-bitcoinsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As
Source: global traffic	HTTP traffic detected: GET /client_data/9022a6a83360995949fccfed/banner.js HTTP/1.1Host: cdn-cookieyes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/resources/media/chevron-right.svg HTTP/1.1Host: profile.cex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins
Source: global traffic	HTTP traffic detected: GET /static/resources/media/cex-full-logo.svg HTTP/1.1Host: profile.cex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins
Source: global traffic	HTTP traffic detected: GET /static/resources/content/header.json HTTP/1.1Host: profile.cex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:
Source: global traffic	HTTP traffic detected: GET /static/resources/fonts/OpenSans-SemiBold.woff2 HTTP/1.1Host: profile.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://cex.iosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/resources/media/grid.svg HTTP/1.1Host: profile.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/resources/media/chevron-down.svg HTTP/1.1Host: profile.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/resources/content/footer.json HTTP/1.1Host: profile.cex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fis-user-logged-in
Source: global traffic	HTTP traffic detected: GET /static/resources/media/exchange.svg HTTP/1.1Host: profile.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/resources/media/chip.svg HTTP/1.1Host: profile.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/resources/media/arrow-up-and-right.svg HTTP/1.1Host: profile.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /single-bundle-widget?forPage=/buy-bitcoins&originator=cex HTTP/1.1Host: cex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fis-user-logged-in
Source: global traffic	HTTP traffic detected: GET /single-bundle-widget-get-config?forPage=/buy-bitcoins&originator=cex&widgetSymbols=BTC&widgetPairsForSymbols=USD,EUR,GBP,RUB HTTP/1.1Host: cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/buy-bitcoinsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fis-user-logged-in
Source: global traffic	HTTP traffic detected: GET /static/resources/media/briefcase.svg HTTP/1.1Host: profile.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/resources/media/grid.svg HTTP/1.1Host: profile.cex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fis-user-logged-in
Source: global traffic	HTTP traffic detected: GET /static/resources/media/data.svg HTTP/1.1Host: profile.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/resources/media/chevron-down.svg HTTP/1.1Host: profile.cex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fis-user-logged-in
Source: global traffic	HTTP traffic detected: GET /static/resources/media/credit-card.svg HTTP/1.1Host: profile.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/resources/media/exchange.svg HTTP/1.1Host: profile.cex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fis-user-logged-in
Source: global traffic	HTTP traffic detected: GET /static/resources/media/transfer.svg HTTP/1.1Host: profile.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/resources/media/cex.svg HTTP/1.1Host: profile.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client_data/9022a6a83360995949fccfed/CnaQzp8F.json HTTP/1.1Host: cdn-cookieyes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/favicon/favicon.ico HTTP/1.1Host: cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cex.io/buy-bitcoinsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fis-user-logged-in
Source: global traffic	HTTP traffic detected: GET /static/resources/media/chip.svg HTTP/1.1Host: profile.cex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fis-user-logged-in
Source: global traffic	HTTP traffic detected: GET /static/resources/media/phone.svg HTTP/1.1Host: profile.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/resources/media/arrow-up-and-right.svg HTTP/1.1Host: profile.cex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fis-user-logged-in
Source: global traffic	HTTP traffic detected: GET /static/resources/media/groups.svg HTTP/1.1Host: profile.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/resources/media/briefcase.svg HTTP/1.1Host: profile.cex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex
Source: global traffic	HTTP traffic detected: GET /static/resources/media/shield.svg HTTP/1.1Host: profile.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/resources/media/message.svg HTTP/1.1Host: profile.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /single-bundle-widget-get-config?forPage=/buy-bitcoins&originator=cex&widgetSymbols=BTC&widgetPairsForSymbols=USD,EUR,GBP,RUB HTTP/1.1Host: cex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex
Source: global traffic	HTTP traffic detected: GET /bundles/scripts/singleBundleFlowWidget.js HTTP/1.1Host: static.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex
Source: global traffic	HTTP traffic detected: GET /static/resources/media/file.svg HTTP/1.1Host: profile.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/resources/media/logo-guidelines.svg HTTP/1.1Host: profile.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client_data/9022a6a83360995949fccfed/CnaQzp8F.json HTTP/1.1Host: cdn-cookieyes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/resources/media/user-circle.svg HTTP/1.1Host: profile.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/resources/media/data.svg HTTP/1.1Host: profile.cex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex
Source: global traffic	HTTP traffic detected: GET /static/resources/media/credit-card.svg HTTP/1.1Host: profile.cex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex
Source: global traffic	HTTP traffic detected: GET /static/resources/media/transfer.svg HTTP/1.1Host: profile.cex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex
Source: global traffic	HTTP traffic detected: GET /static/resources/media/cex.svg HTTP/1.1Host: profile.cex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex
Source: global traffic	HTTP traffic detected: GET /img/favicon/favicon.ico HTTP/1.1Host: cex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex
Source: global traffic	HTTP traffic detected: GET /static/resources/media/phone.svg HTTP/1.1Host: profile.cex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex
Source: global traffic	HTTP traffic detected: GET /static/resources/media/twitter.svg HTTP/1.1Host: profile.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/resources/media/telegram.svg HTTP/1.1Host: profile.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/resources/media/facebook.svg HTTP/1.1Host: profile.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/resources/media/linkedIn.svg HTTP/1.1Host: profile.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/ip HTTP/1.1Host: directory.cookieyes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/resources/media/ua.svg HTTP/1.1Host: profile.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/resources/media/groups.svg HTTP/1.1Host: profile.cex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex
Source: global traffic	HTTP traffic detected: GET /static/resources/media/visa.svg HTTP/1.1Host: profile.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget/q22gd2x3 HTTP/1.1Host: widget.intercom.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/resources/media/mastercard.svg HTTP/1.1Host: profile.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/resources/media/pci.svg HTTP/1.1Host: profile.cex.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client_data/9022a6a83360995949fccfed/audit-table/rCg5unVB.json HTTP/1.1Host: cdn-cookieyes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ws/ HTTP/1.1Host: cex.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yesSec-WebSocket-Key: qu32MW7dY5pNcyxaIqQv5Q==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /static/resources/media/shield.svg HTTP/1.1Host: profile.cex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex
Source: global traffic	HTTP traffic detected: GET /static/resources/media/message.svg HTTP/1.1Host: profile.cex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex
Source: global traffic	HTTP traffic detected: GET /c/hotjar-1666385.js?sv=6 HTTP/1.1Host: static.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1.1/rudder-analytics.min.js HTTP/1.1Host: cdn.rudderlabs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j/7UKK4UJQK5H4LI4OCBFPWX/roundtrip.js HTTP/1.1Host: s.adroll.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scevent.min.js HTTP/1.1Host: sc-static.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/resources/media/logo-guidelines.svg HTTP/1.1Host: profile.cex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex
Source: global traffic	HTTP traffic detected: GET /static/resources/media/user-circle.svg HTTP/1.1Host: profile.cex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/ip HTTP/1.1Host: directory.cookieyes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /frame-modern.0c18727c.js HTTP/1.1Host: js.intercomcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client_data/9022a6a83360995949fccfed/audit-table/rCg5unVB.json HTTP/1.1Host: cdn-cookieyes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendor-modern.9921b73c.js HTTP/1.1Host: js.intercomcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/resources/media/file.svg HTTP/1.1Host: profile.cex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB
Source: global traffic	HTTP traffic detected: GET /static/resources/media/twitter.svg HTTP/1.1Host: profile.cex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=576ea13c-93d9-4bc1-9cd1-aa5a7db7a594&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f18fa5bd-cf7a-4a85-8819-2f2353b1741d&tw_document_href=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4a8l&type=javascript&version=2.3.29 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=576ea13c-93d9-4bc1-9cd1-aa5a7db7a594&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f18fa5bd-cf7a-4a85-8819-2f2353b1741d&tw_document_href=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4a8l&type=javascript&version=2.3.29 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/resources/media/telegram.svg HTTP/1.1Host: profile.cex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB
Source: global traffic	HTTP traffic detected: GET /static/resources/media/facebook.svg HTTP/1.1Host: profile.cex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB
Source: global traffic	HTTP traffic detected: GET /cm/i?pid=4d52341b-7196-4dc9-a490-6fe981c45213&u_scsid=a27a48c3-42e1-4aba-be5f-d5e80ef0be4b&u_sclid=3b5c3bf8-9419-47f4-bbf5-efbbc5a641a6 HTTP/1.1Host: tr.snapchat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/resources/media/linkedIn.svg HTTP/1.1Host: profile.cex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes
Source: global traffic	HTTP traffic detected: GET /static/resources/media/ua.svg HTTP/1.1Host: profile.cex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes
Source: global traffic	HTTP traffic detected: GET /modules.ad6500eebe72fe1c39dd.js HTTP/1.1Host: script.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/pixel.js HTTP/1.1Host: www.redditstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sourceConfig/?p=cdn&v=2.48.6&writeKey=20k74eNX2JyWtp0UKQ9VlhB2Xgz HTTP/1.1Host: api.rudderstack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0Authorization: Basic MjBrNzRlTlgySnlXdHAwVUtROVZsaEIyWGd6Og==User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /config/io/4d52341b-7196-4dc9-a490-6fe981c45213.js?v=3.12.0-2402271815 HTTP/1.1Host: tr.snapchat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://cex.iosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/971878938/?random=1711719898597&cv=11&fst=1711719898597&bg=ffffff&guid=ON&async=1&gtm=45be43r0v9117519134za200&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&hn=www.googleadservices.com&frm=0&tiba=Buy%20Bitcoin%20with%20Credit%20or%20Debit%20Card%20Instantly%20-%20CEX.IO&npa=0&pscdl=noapi&auid=1182918140.1711719899&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=576ea13c-93d9-4bc1-9cd1-aa5a7db7a594&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f18fa5bd-cf7a-4a85-8819-2f2353b1741d&tw_document_href=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4a8l&type=javascript&version=2.3.29 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=2934452f-75be-4322-8587-6e259dd8d5bb
Source: global traffic	HTTP traffic detected: GET /td/rul/971878938?random=1711719898597&cv=11&fst=1711719898597&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43r0v9117519134za200&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&hn=www.googleadservices.com&frm=0&tiba=Buy%20Bitcoin%20with%20Credit%20or%20Debit%20Card%20Instantly%20-%20CEX.IO&npa=0&pscdl=noapi&auid=1182918140.1711719899&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/resources/media/visa.svg HTTP/1.1Host: profile.cex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes
Source: global traffic	HTTP traffic detected: GET /scevent.min.js HTTP/1.1Host: sc-static.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tr.snapchat.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-AB=b9bd00ec73544025b937f4253ff9de4c
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=576ea13c-93d9-4bc1-9cd1-aa5a7db7a594&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f18fa5bd-cf7a-4a85-8819-2f2353b1741d&tw_document_href=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4a8l&type=javascript&version=2.3.29 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_mIwiL/VRiw7nRNZdQorkoQ=="
Source: global traffic	HTTP traffic detected: GET /static/resources/media/mastercard.svg HTTP/1.1Host: profile.cex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes
Source: global traffic	HTTP traffic detected: GET /static/resources/media/pci.svg HTTP/1.1Host: profile.cex.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes
Source: global traffic	HTTP traffic detected: GET /ws/ HTTP/1.1Host: cex.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_session=RudderEncrypt%3AU2FsdGVkX19abZEkW8YE%2BF05b7BbB7afHsHv2MjnudSIt48PK%2BOJmR5pjtIXA6UrDtM3kf%2B0RfzAtkKZCj1tgMtPGwNrVuQgAHDlkwypck5xKK2NLMsZiLFQIUwbVoGqChNt%2BHwoz2CDp%2ByBkZ9T5A%3D%3D; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199fSec-WebSocket-Key: Y9swCLtBkAA0FdUxASPXzA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1711719899067&id=t2_fngyx&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=586ad4c0-3fa0-43ef-b6b6-cef72ecf199f&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/971878938/?random=1711719898597&cv=11&fst=1711717200000&bg=ffffff&guid=ON&async=1&gtm=45be43r0v9117519134za200&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&frm=0&tiba=Buy%20Bitcoin%20with%20Credit%20or%20Debit%20Card%20Instantly%20-%20CEX.IO&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqVCQy0JY0P1O6wr6K7J3AbHYoU2DdgA&random=4210822442&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /sourceConfig/?p=cdn&v=2.48.6&writeKey=20k74eNX2JyWtp0UKQ9VlhB2Xgz HTTP/1.1Host: api.rudderstack.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/landing?gcs=G111&gcd=13n3n3n3n5&rnd=1742360597.1711719899&url=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&dma=0&npa=0&gtm=45be43r0v9117519134za200&auid=1182918140.1711719899 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /messenger/web/ping HTTP/1.1Host: api-iam.intercom.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/o/475519/eabaa4fa79044587e479220a/41bec6986704a574349426a752d128dc.png HTTP/1.1Host: downloads.intercomcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1711719899067&id=t2_fngyx&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=586ad4c0-3fa0-43ef-b6b6-cef72ecf199f&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pubsub/5-DxZC9UqoJ1EljK_xOC3b99xy4F3BEj9YmFgJHaX3ipfQTWiIVeaimn-kfD1lSniz_d6d82XsjfFmM7bTX0yaSnBGTqiWgRi9CEfu?X-Nexus-New-Client=true&X-Nexus-Version=0.12.12&user_role=visitor HTTP/1.1Host: nexus-websocket-a.intercom.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: 1lGA1JYaF6ZVz13rf9AzWQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /consent/check/7UKK4UJQK5H4LI4OCBFPWX?flg=1&pv=49777442137.35138&arrfrr=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&_s=36c55156726abe6f7f2d67d9d7d78dcb&_b=2 HTTP/1.1Host: d.adroll.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/971878938/?random=1711719898597&cv=11&fst=1711717200000&bg=ffffff&guid=ON&async=1&gtm=45be43r0v9117519134za200&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&frm=0&tiba=Buy%20Bitcoin%20with%20Credit%20or%20Debit%20Card%20Instantly%20-%20CEX.IO&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqVCQy0JY0P1O6wr6K7J3AbHYoU2DdgA&random=4210822442&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /segment/7UKK4UJQK5H4LI4OCBFPWX/XKCKCYA7EZE6PKEKRI2LRJ?adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103&flg=1&pv=49777442137.35138&arrfrr=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&cookie=&adroll_s_ref=&keyw=&p0=6919&adroll_external_data=&xa4=1&adroll_version=2.0 HTTP/1.1Host: d.adroll.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __adroll=62c35a870d87e29d4af69c72e46c38b4-a_1711719901; receive-cookie-deprecation=1; receive-cookie-deprecation=1; __adroll_shared=62c35a870d87e29d4af69c72e46c38b4-a_1711719901
Source: global traffic	HTTP traffic detected: GET /cm/g/out?adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103&flg=1&pv=49777442137.35138&arrfrr=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&advertisable=7UKK4UJQK5H4LI4OCBFPWX HTTP/1.1Host: d.adroll.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __adroll=62c35a870d87e29d4af69c72e46c38b4-a_1711719901; receive-cookie-deprecation=1; receive-cookie-deprecation=1; __adroll_shared=62c35a870d87e29d4af69c72e46c38b4-a_1711719901
Source: global traffic	HTTP traffic detected: GET /cm/x,b,index,l,o,outbrain,pubmatic,n,taboola,triplelift,r/out?adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103&flg=1&pv=49777442137.35138&arrfrr=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&advertisable=7UKK4UJQK5H4LI4OCBFPWX HTTP/1.1Host: d.adroll.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __adroll=62c35a870d87e29d4af69c72e46c38b4-a_1711719901; receive-cookie-deprecation=1; receive-cookie-deprecation=1; __adroll_shared=62c35a870d87e29d4af69c72e46c38b4-a_1711719901
Source: global traffic	HTTP traffic detected: GET /ads/conversions-config/v1/pixel/config/t2_fngyx_telemetry HTTP/1.1Host: www.redditstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cex.ioSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/page HTTP/1.1Host: cex-dataplane.rudderstack.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/o/475519/eabaa4fa79044587e479220a/41bec6986704a574349426a752d128dc.png HTTP/1.1Host: downloads.intercomcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pxl/iframe_content.html?adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103&flg=1&pv=49777442137.35138&arrfrr=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&advertisable=7UKK4UJQK5H4LI4OCBFPWX HTTP/1.1Host: x.adroll.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; __adroll_shared=62c35a870d87e29d4af69c72e46c38b4-a_1711719901
Source: global traffic	HTTP traffic detected: GET /cm/s?bt=1d53c387&pnid=140&cb=1711719900298&u_scsid=a639c1c8-03a4-45d7-9034-2e124368a363&u_sclid=8f6ba538-e1d1-4ce5-a228-8569c78df020 HTTP/1.1Host: tr.snapchat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://tr.snapchat.com/cm/i?pid=4d52341b-7196-4dc9-a490-6fe981c45213&u_scsid=a27a48c3-42e1-4aba-be5f-d5e80ef0be4b&u_sclid=3b5c3bf8-9419-47f4-bbf5-efbbc5a641a6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sc_at=v2\|H4sIAAAAAAAAAA3CgQkAIAgEwIkERUN/HMucwuHruHNKu8KpWkGWmRRXkpbxCrBv5Z4Rlx8BDD+iG1R9MgAAAA==
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=105&external_user_id=NjJjMzVhODcwZDg3ZTI5ZDRhZjY5YzcyZTQ2YzM4YjQ&expiration=1743255901 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /igs?advertisable=7UKK4UJQK5H4LI4OCBFPWX&fpc=9c2a3d2e2673c4382dbf8e1b819a358e HTTP/1.1Host: x.adroll.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://x.adroll.com/pxl/iframe_content.html?adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103&flg=1&pv=49777442137.35138&arrfrr=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&advertisable=7UKK4UJQK5H4LI4OCBFPWXAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; __adroll_shared=62c35a870d87e29d4af69c72e46c38b4-a_1711719901
Source: global traffic	HTTP traffic detected: GET /pixel?google_sc&google_nid=artb&google_hm=YsNahw2H4p1K9pxy5Gw4tA HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnTASOlliXdwzfwcaXUWiFp7BaWbu9uF5xcpBbwg6Xg2t8GC9Wwtm0GE_Cz
Source: global traffic	HTTP traffic detected: GET /segment/7UKK4UJQK5H4LI4OCBFPWX/XKCKCYA7EZE6PKEKRI2LRJ?adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103&flg=1&pv=49777442137.35138&arrfrr=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&cookie=&adroll_s_ref=&keyw=&p0=6919&adroll_external_data=&xa4=1&adroll_version=2.0 HTTP/1.1Host: d.adroll.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __adroll=62c35a870d87e29d4af69c72e46c38b4-a_1711719901; __adroll_shared=62c35a870d87e29d4af69c72e46c38b4-a_1711719901
Source: global traffic	HTTP traffic detected: GET /attribution/trigger?fpc=9c2a3d2e2673c4382dbf8e1b819a358e&advertisable_eid=7UKK4UJQK5H4LI4OCBFPWX&conversion_type=PageView&conversion_value=0.0&pv=49777442137.35138 HTTP/1.1Host: x.adroll.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; __adroll_shared=62c35a870d87e29d4af69c72e46c38b4-a_1711719901
Source: global traffic	HTTP traffic detected: GET /ws/ HTTP/1.1Host: cex.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1Sec-WebSocket-Key: zN3QC6WeOtngGuPlYNMuAw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /ads/conversions-config/v1/pixel/config/t2_fngyx_telemetry HTTP/1.1Host: www.redditstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idsync/ex/push?partner_id=2884&partner_url=https%3A%2F%2Ftr.snapchat.com%2Fcm%2Fp%3Frand%3D1711487619952%26pnid%3D140%26pcid%3D%24%7BTA_DEVICE_ID%7D HTTP/1.1Host: pixel.tapad.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://tr.snapchat.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm/g/in HTTP/1.1Host: d.adroll.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __adroll=62c35a870d87e29d4af69c72e46c38b4-a_1711719901; receive-cookie-deprecation=1; receive-cookie-deprecation=1; __adroll_shared=62c35a870d87e29d4af69c72e46c38b4-a_1711719901
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=105&external_user_id=NjJjMzVhODcwZDg3ZTI5ZDRhZjY5YzcyZTQ2YzM4YjQ&expiration=1743255901&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZgbF3sAoJUQAACRtAEC30AAA; CMPS=2807; CMPRO=2807
Source: global traffic	HTTP traffic detected: GET /igs?advertisable=7UKK4UJQK5H4LI4OCBFPWX&fpc=9c2a3d2e2673c4382dbf8e1b819a358e HTTP/1.1Host: x.adroll.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __adroll_shared=62c35a870d87e29d4af69c72e46c38b4-a_1711719901; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /attribution/trigger?fpc=9c2a3d2e2673c4382dbf8e1b819a358e&advertisable_eid=7UKK4UJQK5H4LI4OCBFPWX&conversion_type=PageView&conversion_value=0.0&pv=49777442137.35138 HTTP/1.1Host: x.adroll.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; __adroll_shared=62c35a870d87e29d4af69c72e46c38b4-a_1711719901; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /cm/g/in HTTP/1.1Host: d.adroll.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; receive-cookie-deprecation=1; __adroll=62c35a870d87e29d4af69c72e46c38b4-g_1711719902-a_1711719901; __adroll_shared=62c35a870d87e29d4af69c72e46c38b4-g_1711719902-a_1711719901
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=105&external_user_id=NjJjMzVhODcwZDg3ZTI5ZDRhZjY5YzcyZTQ2YzM4YjQ&expiration=1743255901&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZgbF3sAoJUQAACRtAEC30AAA; CMPS=2807; CMPRO=2807
Source: global traffic	HTTP traffic detected: GET /idsync/ex/push/check?partner_id=2884&partner_url=https%3A%2F%2Ftr.snapchat.com%2Fcm%2Fp%3Frand%3D1711487619952%26pnid%3D140%26pcid%3D%24%7BTA_DEVICE_ID%7D HTTP/1.1Host: pixel.tapad.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://tr.snapchat.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1711719902643; TapAd_DID=9ee927f0-b5f7-49af-92b3-17f3470650eb
Source: global traffic	HTTP traffic detected: GET /cm/p?rand=1711487619952&pnid=140&pcid=9ee927f0-b5f7-49af-92b3-17f3470650eb HTTP/1.1Host: tr.snapchat.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://tr.snapchat.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sc_at=v2\|H4sIAAAAAAAAAE3GwQ2AQAgEwIpIdgMXwG7wkCqueH2azGP2bp0Olx5NsaqSeFiyDCsSfivm0HDR+ckEz694AUCsawRAAAAA
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=bk5L8yGwVrbbZXG&MD=oTsnWUMA HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ws/ HTTP/1.1Host: cex.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1Sec-WebSocket-Key: EcPrdnroHuecs1EET6VHCQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /ws/ HTTP/1.1Host: cex.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000Sec-WebSocket-Key: NICmN2aeKm9rGjXgpFqFfA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /vendors~app~tooltips-modern.77e8d419.js HTTP/1.1Host: js.intercomcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendors~app-modern.3733d47a.js HTTP/1.1Host: js.intercomcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app~tooltips-modern.d78e4d48.js HTTP/1.1Host: js.intercomcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ws/ HTTP/1.1Host: cex.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000Sec-WebSocket-Key: aUuUMmbmNvbJYneN/wEkOw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /app-modern.ef7a291f.js HTTP/1.1Host: js.intercomcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /launcher-discovery-modern.374890f2.js HTTP/1.1Host: js.intercomcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ws/ HTTP/1.1Host: cex.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000Sec-WebSocket-Key: Us5H7rSYXDYln7gPyQLb6Q==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /ws/ HTTP/1.1Host: cex.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000Sec-WebSocket-Key: hiBOJ5DL+UfkYlRxZr3aZg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /ws/ HTTP/1.1Host: cex.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000Sec-WebSocket-Key: oMPX9p8AA3glPEtcsf5zrw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /ws/ HTTP/1.1Host: cex.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000Sec-WebSocket-Key: FtWZH8nsTOtz7HYnAjPCRA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /ws/ HTTP/1.1Host: cex.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000Sec-WebSocket-Key: mce43x6XdZw7jr2pkdzang==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /ws/ HTTP/1.1Host: cex.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000Sec-WebSocket-Key: R6Si6TrXvMJ4ZscXqo9r4w==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /ws/ HTTP/1.1Host: cex.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000Sec-WebSocket-Key: yoPM8HfyKSIqZ0Mnt/gdYw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /ws/ HTTP/1.1Host: cex.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000Sec-WebSocket-Key: Qf7D3yru5HnwybbpBTqpWg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /ws/ HTTP/1.1Host: cex.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000Sec-WebSocket-Key: Ldfxpwy4EffqGI+AO/DPig==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /messenger/web/metrics HTTP/1.1Host: api-iam.intercom.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ws/ HTTP/1.1Host: cex.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000Sec-WebSocket-Key: Yh5C0/mRMj0qVWsp+JKIoA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /ws/ HTTP/1.1Host: cex.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000Sec-WebSocket-Key: gMnRkOhVLJ83qEOJEvs0xw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=bk5L8yGwVrbbZXG&MD=oTsnWUMA HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ws/ HTTP/1.1Host: cex.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000Sec-WebSocket-Key: C1Aqh/0hXLMIGOLZERNWMQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /ws/ HTTP/1.1Host: cex.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000Sec-WebSocket-Key: eLeSYosoM6TRqSS3ggfVQw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /ws/ HTTP/1.1Host: cex.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000Sec-WebSocket-Key: NlP9cisLLFTUFaJa8fCDhA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /ws/ HTTP/1.1Host: cex.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000Sec-WebSocket-Key: aCZAkdWrnbB56axmIcibTQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /pubsub/5-DxZC9UqoJ1EljK_xOC3b99xy4F3BEj9YmFgJHaX3ipfQTWiIVeaimn-kfD1lSniz_d6d82XsjfFmM7bTX0yaSnBGTqiWgRi9CEfu?X-Nexus-New-Client=true&X-Nexus-Version=0.12.12&user_role=visitor HTTP/1.1Host: nexus-websocket-a.intercom.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: S6xKjq1w+kxl50WaBDR6Dw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /ws/ HTTP/1.1Host: cex.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000Sec-WebSocket-Key: wRzaniQHxvRiV0A+NbS2Rw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /ws/ HTTP/1.1Host: cex.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000Sec-WebSocket-Key: ngZSTe3C+ZxHzZYlt9WR+A==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /ws/ HTTP/1.1Host: cex.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000Sec-WebSocket-Key: 6MZ/Zf4D3BqPeK3qvFwwBg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /ws/ HTTP/1.1Host: cex.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000Sec-WebSocket-Key: guJwKaxc0s5AAw+2BmGN7g==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /ws/ HTTP/1.1Host: cex.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000Sec-WebSocket-Key: PWTx8Q+5WQsP3HAVua7kbw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /ws/ HTTP/1.1Host: cex.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000Sec-WebSocket-Key: Z85Y7YQdVTBlYEism3+KfQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /ws/ HTTP/1.1Host: cex.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000Sec-WebSocket-Key: qkU8zrcLjrFjNyCd45R4uQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /ws/ HTTP/1.1Host: cex.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000Sec-WebSocket-Key: X0PzfHX/kA4lL+z71PIQng==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /pubsub/5-DxZC9UqoJ1EljK_xOC3b99xy4F3BEj9YmFgJHaX3ipfQTWiIVeaimn-kfD1lSniz_d6d82XsjfFmM7bTX0yaSnBGTqiWgRi9CEfu?X-Nexus-New-Client=true&X-Nexus-Version=0.12.12&user_role=visitor HTTP/1.1Host: nexus-websocket-a.intercom.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: mHs9bzME/VOMvv2SxnTDTQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /ws/ HTTP/1.1Host: cex.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000Sec-WebSocket-Key: YQojfAbZ2syqMpdSqo25UA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /ws/ HTTP/1.1Host: cex.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000Sec-WebSocket-Key: Ng/OetLrSOPuIBJNAsLDCg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /ws/ HTTP/1.1Host: cex.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000Sec-WebSocket-Key: 6sSp2ms+7wytr2dNyTVUdA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /ws/ HTTP/1.1Host: cex.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cex.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000Sec-WebSocket-Key: kmZ/wzJ3G04sF9jzMaVprA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits

Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: "link": "https://www.facebook.com/pages/CEXIO/420149274752615?fref=ts", equals www.facebook.com (Facebook)
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: "link": "https://www.linkedin.com/company/cex-io", equals www.linkedin.com (Linkedin)
Source: chromecache_230.1.dr	String found in binary or memory: "https://www.facebook.com/pages/CEXIO/420149274752615", equals www.facebook.com (Facebook)
Source: chromecache_134.1.dr, chromecache_171.1.dr, chromecache_183.1.dr	String found in binary or memory: return b}sC.D="internal.enableAutoEventOnTimer";var Dc=ia(["data-gtm-yt-inspected-"]),uC=["www.youtube.com","www.youtube-nocookie.com"],vC,wC=!1; equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: cex.io

Source: unknown

HTTP traffic detected: POST /api/v1/log HTTP/1.1Host: log.cookieyes.comConnection: keep-aliveContent-Length: 556sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryRoGcWJo04bQwJLGkAccept: */*Origin: https://cex.ioSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://cex.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_212.1.dr	String found in binary or memory: http://a.adroll.com
Source: chromecache_163.1.dr, chromecache_155.1.dr	String found in binary or memory: http://api.jqueryui.com/category/ui-core/
Source: chromecache_225.1.dr	String found in binary or memory: http://blockchain.info/tx/
Source: chromecache_225.1.dr	String found in binary or memory: http://chainz.cryptoid.info/drk/block.dws?
Source: chromecache_225.1.dr	String found in binary or memory: http://etherscan.io/tx/
Source: chromecache_163.1.dr	String found in binary or memory: http://fusejs.io)
Source: chromecache_163.1.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_163.1.dr, chromecache_155.1.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_163.1.dr, chromecache_155.1.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_163.1.dr	String found in binary or memory: http://kiro.me)
Source: chromecache_130.1.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_209.1.dr	String found in binary or memory: http://requirejs.org/docs/errors.html#
Source: chromecache_230.1.dr	String found in binary or memory: http://schema.org
Source: chromecache_163.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_209.1.dr	String found in binary or memory: http://www.ecma-international.org/ecma-262/5.1/#sec-C
Source: chromecache_134.1.dr, chromecache_171.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_134.1.dr, chromecache_171.1.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://app.cex.io
Source: chromecache_230.1.dr	String found in binary or memory: https://auth.cex.io/auth/auth?client_id=cex&response_type=code&redirect_uri=https%3A%2F%2Fcex.io%2Fa
Source: chromecache_230.1.dr	String found in binary or memory: https://auth.cex.io/auth/session/end
Source: chromecache_225.1.dr	String found in binary or memory: https://blockchain.info/block-index/
Source: chromecache_225.1.dr	String found in binary or memory: https://blockchair.com/bitcoin-cash/block/
Source: chromecache_225.1.dr	String found in binary or memory: https://blockchair.com/bitcoin-cash/transaction/
Source: chromecache_162.1.dr, chromecache_206.1.dr, chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://blog.cex.io/
Source: chromecache_225.1.dr	String found in binary or memory: https://btgexplorer.com/block/
Source: chromecache_225.1.dr	String found in binary or memory: https://btgexplorer.com/tx/
Source: chromecache_134.1.dr, chromecache_171.1.dr, chromecache_183.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_230.1.dr, chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io
Source: chromecache_223.1.dr, chromecache_162.1.dr, chromecache_206.1.dr, chromecache_230.1.dr, chromecache_155.1.dr	String found in binary or memory: https://cex.io/
Source: chromecache_230.1.dr	String found in binary or memory: https://cex.io//buy-bitcoins
Source: chromecache_162.1.dr, chromecache_206.1.dr, chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/about
Source: chromecache_162.1.dr, chromecache_206.1.dr, chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/affiliate-program
Source: chromecache_162.1.dr, chromecache_206.1.dr	String found in binary or memory: https://cex.io/audit/logs
Source: chromecache_162.1.dr, chromecache_206.1.dr	String found in binary or memory: https://cex.io/auth/login
Source: chromecache_162.1.dr, chromecache_206.1.dr	String found in binary or memory: https://cex.io/auth/register
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/bitcoin-calculator
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/bitcoin-halving
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/bitcoin-price-widget
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/btc-usd
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/buy-binance-coin-bnb
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/buy-bitcoin-cash
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/buy-bitcoin-with-apple-pay
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/buy-bitcoin-with-bank-account
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/buy-bitcoin-with-google-pay
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/buy-bitcoin-with-paypal
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/buy-bitcoin-with-prepaid-card
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/buy-bitcoin-with-skrill
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/buy-bitcoins
Source: chromecache_230.1.dr	String found in binary or memory: https://cex.io/buy-bitcoins/
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/buy-dogecoin-doge
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/buy-ethereum
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/buy-internet-computer-coin-icp
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/buy-litecoin
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/buy-ripple
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/buy-shiba-inu-shib
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/buy-solana-sol
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/buy-tether-usdt
Source: chromecache_162.1.dr, chromecache_206.1.dr	String found in binary or memory: https://cex.io/buysell
Source: chromecache_230.1.dr	String found in binary or memory: https://cex.io/ca/buy-bitcoins/
Source: chromecache_162.1.dr, chromecache_206.1.dr, chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/cex-api
Source: chromecache_162.1.dr, chromecache_206.1.dr, chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/contacts
Source: chromecache_230.1.dr	String found in binary or memory: https://cex.io/da/buy-bitcoins/
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/donate-to-ukraine
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/fee-schedule
Source: chromecache_162.1.dr, chromecache_206.1.dr	String found in binary or memory: https://cex.io/getmydebitcard
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/giveaway
Source: chromecache_230.1.dr	String found in binary or memory: https://cex.io/img/cex.svg
Source: chromecache_185.1.dr	String found in binary or memory: https://cex.io/legal-security
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/legal-security/us
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/limits-commissions
Source: chromecache_162.1.dr, chromecache_206.1.dr	String found in binary or memory: https://cex.io/logo-guidelines
Source: chromecache_162.1.dr, chromecache_206.1.dr, chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/press
Source: chromecache_162.1.dr, chromecache_206.1.dr	String found in binary or memory: https://cex.io/prices
Source: chromecache_162.1.dr, chromecache_206.1.dr	String found in binary or memory: https://cex.io/processing-alerts
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/refund-policy
Source: chromecache_230.1.dr	String found in binary or memory: https://cex.io/ru/buy-bitcoins/
Source: chromecache_230.1.dr	String found in binary or memory: https://cex.io/se/buy-bitcoins/
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/sell-bitcoins
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/sell-tether
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/sitemap
Source: chromecache_162.1.dr, chromecache_206.1.dr, chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/team
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cex.io/terms
Source: chromecache_230.1.dr	String found in binary or memory: https://cex.io/tr/buy-bitcoins/
Source: chromecache_162.1.dr, chromecache_206.1.dr	String found in binary or memory: https://cex.io/we-are-hiring
Source: chromecache_225.1.dr	String found in binary or memory: https://cexbro.com
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://cexio.statuspage.io/
Source: chromecache_212.1.dr	String found in binary or memory: https://d.adroll.com/p
Source: chromecache_130.1.dr	String found in binary or memory: https://daneden.github.io/animate.css/
Source: chromecache_225.1.dr	String found in binary or memory: https://dogechain.info/block/
Source: chromecache_225.1.dr	String found in binary or memory: https://dogechain.info/tx/
Source: chromecache_162.1.dr, chromecache_206.1.dr	String found in binary or memory: https://earn.cex.io
Source: chromecache_209.1.dr	String found in binary or memory: https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p
Source: chromecache_203.1.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_203.1.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.22.5/LICENSE
Source: chromecache_134.1.dr	String found in binary or memory: https://google.com
Source: chromecache_134.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://kyte.global/pcis/18473_cex-io-ltd-dba-cex-io/
Source: chromecache_212.1.dr	String found in binary or memory: https://lex.33across.com/ps/v1/pubtoken/?pid=115&event=rtg&us_privacy=&rnd=
Source: chromecache_225.1.dr	String found in binary or memory: https://live.blockcypher.com/ltc/block/
Source: chromecache_225.1.dr	String found in binary or memory: https://live.blockcypher.com/ltc/tx/
Source: chromecache_134.1.dr, chromecache_171.1.dr, chromecache_183.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_134.1.dr, chromecache_171.1.dr, chromecache_183.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_162.1.dr, chromecache_206.1.dr	String found in binary or memory: https://prime.cex.io/
Source: chromecache_230.1.dr	String found in binary or memory: https://profile.cex.io
Source: chromecache_162.1.dr, chromecache_206.1.dr	String found in binary or memory: https://profile.cex.io/
Source: chromecache_162.1.dr, chromecache_206.1.dr	String found in binary or memory: https://profile.cex.io/logout
Source: chromecache_162.1.dr, chromecache_206.1.dr	String found in binary or memory: https://profile.cex.io/security
Source: chromecache_162.1.dr, chromecache_206.1.dr	String found in binary or memory: https://profile.cex.io/verification
Source: chromecache_212.1.dr	String found in binary or memory: https://s.adroll.com
Source: chromecache_212.1.dr	String found in binary or memory: https://s.adroll.com/j/nrpa.js
Source: chromecache_212.1.dr	String found in binary or memory: https://s.adroll.com/j/pre/
Source: chromecache_119.1.dr	String found in binary or memory: https://sc-static.net/scevent.min.js
Source: chromecache_230.1.dr	String found in binary or memory: https://static.cex.io
Source: chromecache_223.1.dr	String found in binary or memory: https://static.cex.io/
Source: chromecache_230.1.dr	String found in binary or memory: https://static.cex.io/img/landing-img/buy-bitcoins.png
Source: chromecache_230.1.dr, chromecache_155.1.dr	String found in binary or memory: https://static.cex.io/img/legal/pci.pdf
Source: chromecache_230.1.dr	String found in binary or memory: https://static.cex.io/landings/SeoBuyBitcoinForUsd.js?v=1.8.83
Source: chromecache_230.1.dr	String found in binary or memory: https://static.cex.io/landings/css/SeoBuyBitcoinForUsd.css?v=1.8.83
Source: chromecache_230.1.dr	String found in binary or memory: https://static.cex.io/landings/css/ui-components.css?v=1.8.83
Source: chromecache_230.1.dr	String found in binary or memory: https://static.cex.io/landings/media/1x-buy-now.webp
Source: chromecache_230.1.dr	String found in binary or memory: https://static.cex.io/landings/media/1x-buy-sell-image.webp
Source: chromecache_230.1.dr	String found in binary or memory: https://static.cex.io/landings/media/2x-buy-now.webp
Source: chromecache_230.1.dr	String found in binary or memory: https://static.cex.io/landings/media/2x-buy-sell-image.webp
Source: chromecache_230.1.dr	String found in binary or memory: https://static.cex.io/landings/ui-components.js?v=1.8.83
Source: chromecache_171.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_171.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://support.cex.io/en/
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://support.cex.io/en/articles/4383395-identity-verification-on-cex-io
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://support.cex.io/en/articles/4383397-getting-started
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://support.cex.io/en/articles/4383448-payment-card-verification-guide
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://support.cex.io/en/articles/4383479-how-to-buy-crypto-instantly-with-your-debit-credit-card
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://support.cex.io/en/articles/5373268-recovering-incorrect-crypto-deposits
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://support.cex.io/en/articles/5568530-bank-transfer-withdrawal-investigation
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://t.me/CEX_IO
Source: chromecache_134.1.dr, chromecache_171.1.dr, chromecache_183.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_209.1.dr	String found in binary or memory: https://tools.ietf.org/html/rfc6455
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://trade.cex.io/competition
Source: chromecache_162.1.dr, chromecache_206.1.dr	String found in binary or memory: https://trade.cex.io/spot?source=cexplus-products-header
Source: chromecache_230.1.dr, chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://twitter.com/cex_io
Source: chromecache_162.1.dr, chromecache_206.1.dr, chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://university.cex.io/
Source: chromecache_162.1.dr, chromecache_206.1.dr, chromecache_230.1.dr, chromecache_155.1.dr	String found in binary or memory: https://wallet.cex.io/
Source: chromecache_225.1.dr	String found in binary or memory: https://www.etherchain.org/block/
Source: chromecache_230.1.dr, chromecache_155.1.dr	String found in binary or memory: https://www.fincen.gov/msb-registrant-search
Source: chromecache_134.1.dr, chromecache_171.1.dr, chromecache_183.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_160.1.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/971878938/?random
Source: chromecache_134.1.dr, chromecache_171.1.dr, chromecache_183.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_134.1.dr, chromecache_171.1.dr, chromecache_183.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_134.1.dr, chromecache_171.1.dr, chromecache_183.1.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_230.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_230.1.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-593TDDD
Source: chromecache_183.1.dr	String found in binary or memory: https://www.googletagmanager.com/static/exp/keys.json
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://www.linkedin.com/company/cex-io
Source: chromecache_171.1.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_145.1.dr, chromecache_185.1.dr	String found in binary or memory: https://www.nmlsconsumeraccess.org/EntityDetails.aspx/COMPANY/1804170
Source: chromecache_166.1.dr, chromecache_233.1.dr	String found in binary or memory: https://www.redditstatic.com/ads/581d359d/pixel.js
Source: chromecache_212.1.dr	String found in binary or memory: https://x.adroll.com/pxl/iframe_content.html?advertisable=

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49871 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.16:49880 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.16:49882 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49897 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@17/212@118/42

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://cex.io/buy-bitcoins
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1880,i,98147228044675047,16913516860262030291,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1880,i,98147228044675047,16913516860262030291,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://cex.io/buy-bitcoins	0%	Avira URL Cloud	safe
https://cex.io/buy-bitcoins	0%	Virustotal		Browse

Source	Detection	Scanner	Link
platform.twitter.map.fastly.net	0%	Virustotal	Browse
cdn-cookieyes.com	0%	Virustotal	Browse
api.rudderstack.com	0%	Virustotal	Browse
gcp.api.sc-gw.com	0%	Virustotal	Browse
log.cookieyes.com	0%	Virustotal	Browse
usc1-gcp-v61.api.sc-gw.com	0%	Virustotal	Browse
reddit.map.fastly.net	0%	Virustotal	Browse
sc-static.net	0%	Virustotal	Browse
static.ads-twitter.com	0%	Virustotal	Browse
dualstack.reddit.map.fastly.net	0%	Virustotal	Browse
cex-dataplane.rudderstack.com	0%	Virustotal	Browse
cdn.rudderlabs.com	0%	Virustotal	Browse
directory.cookieyes.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://sc-static.net/scevent.min.js	0%	URL Reputation	safe
https://log.cookieyes.com/api/v1/log	0%	URL Reputation	safe
about:blank	0%	Avira URL Cloud	safe
https://cexbro.com	0%	Avira URL Cloud	safe
http://fusejs.io)	0%	Avira URL Cloud	safe
https://kyte.global/pcis/18473_cex-io-ltd-dba-cex-io/	0%	Avira URL Cloud	safe
https://cex-dataplane.rudderstack.com/v1/page	0%	Avira URL Cloud	safe
https://cexbro.com	0%	Virustotal		Browse
https://cex-dataplane.rudderstack.com/v1/page	0%	Virustotal		Browse
https://kyte.global/pcis/18473_cex-io-ltd-dba-cex-io/	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
d330tt87tgwpr0.cloudfront.net	3.162.103.76	true	false		high
sludge-sludge-production-86464678.us-east-1.elb.amazonaws.com	35.175.89.38	true	false		high
cex.io	104.20.0.37	true	false		high
event-log-producer-alb-1487800978.eu-west-1.elb.amazonaws.com	54.229.44.173	true	false		high
cdn-cookieyes.com	172.67.20.8	true	false	0%, Virustotal, Browse	unknown
platform.twitter.map.fastly.net	146.75.28.157	true	false	0%, Virustotal, Browse	unknown
stats.g.doubleclick.net	142.250.31.155	true	false		high
api.rudderstack.com	52.85.151.23	true	false	0%, Virustotal, Browse	unknown
profile.cex.io	104.20.0.37	true	false		high
t.co	104.244.42.69	true	false		high
script.hotjar.com	18.160.18.77	true	false		high
downloads.intercomcdn.com	3.33.152.127	true	false		high
cm.g.doubleclick.net	142.251.179.157	true	false		high
www.google.com	142.251.167.103	true	false		high
gcp.api.sc-gw.com	35.190.43.134	true	false	0%, Virustotal, Browse	unknown
nexus-websocket-a.intercom.io	35.174.127.31	true	false		high
static-cdn.hotjar.com	18.160.41.53	true	false		high
js.intercomcdn.com	18.154.227.129	true	false		high
pixel.tapad.com	34.111.113.62	true	false		high
d1qug1xf2dk5z6.cloudfront.net	3.162.103.56	true	false		high
s.twitter.com	104.244.42.67	true	false		high
widget.intercom.io	108.138.64.17	true	false		high
sc-static.net	3.162.129.245	true	false	0%, Virustotal, Browse	unknown
api-iam.intercom.io	3.225.23.81	true	false		high
adserver-vpc-alb-0-2072243822.us-east-1.elb.amazonaws.com	3.208.209.20	true	false		high
cex-dataplane.rudderstack.com	52.22.248.30	true	false	0%, Virustotal, Browse	unknown
adserver-vpc-alb-3-917510562.us-east-1.elb.amazonaws.com	34.197.113.183	true	false		high
contact-center.cex.io	104.20.0.37	true	false		high
dualstack.reddit.map.fastly.net	151.101.129.140	true	false	0%, Virustotal, Browse	unknown
googleads.g.doubleclick.net	142.251.179.157	true	false		high
reddit.map.fastly.net	151.101.65.140	true	false	0%, Virustotal, Browse	unknown
dsum-sec.casalemedia.com	172.64.151.101	true	false		high
analytics.google.com	172.253.62.101	true	false		high
td.doubleclick.net	142.251.16.157	true	false		high
static.cex.io	104.20.0.37	true	false		high
log.cookieyes.com	54.229.44.173	true	false	0%, Virustotal, Browse	unknown
usc1-gcp-v61.api.sc-gw.com	35.190.43.134	true	false	0%, Virustotal, Browse	unknown
alb.reddit.com	unknown	unknown	false		high
static.ads-twitter.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
d.adroll.com	unknown	unknown	false		high
tr.snapchat.com	unknown	unknown	false		high
w3-reporting-nel.reddit.com	unknown	unknown	false		high
static.hotjar.com	unknown	unknown	false		high
www.redditstatic.com	unknown	unknown	false		high
s.adroll.com	unknown	unknown	false		high
analytics.twitter.com	unknown	unknown	false		high
directory.cookieyes.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
x.adroll.com	unknown	unknown	false		high
tr6.snapchat.com	unknown	unknown	false		high
cdn.rudderlabs.com	unknown	unknown	false	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://profile.cex.io/static/resources/media/user-circle.svg	false		high
https://cex.io/single-bundle-widget-get-config?forPage=/buy-bitcoins&originator=cex&widgetSymbols=BTC&widgetPairsForSymbols=USD,EUR,GBP,RUB	false		high
https://cex.io/img/favicon/favicon.ico	false		high
https://www.redditstatic.com/ads/pixel.js	false		high
https://alb.reddit.com/rp.gif?ts=1711719899067&id=t2_fngyx&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=586ad4c0-3fa0-43ef-b6b6-cef72ecf199f&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc=	false		high
https://profile.cex.io/static/resources/media/briefcase.svg	false		high
https://s.adroll.com/j/7UKK4UJQK5H4LI4OCBFPWX/roundtrip.js	false		high
https://profile.cex.io/static/resources/media/pci.svg	false		high
https://w3-reporting-nel.reddit.com/reports	false		high
about:blank	false	Avira URL Cloud: safe	low
https://profile.cex.io/static/resources/media/visa.svg	false		high
https://x.adroll.com/pxl/iframe_content.html?adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103&flg=1&pv=49777442137.35138&arrfrr=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&advertisable=7UKK4UJQK5H4LI4OCBFPWX	false		high
https://d.adroll.com/consent/check/7UKK4UJQK5H4LI4OCBFPWX?flg=1&pv=49777442137.35138&arrfrr=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&_s=36c55156726abe6f7f2d67d9d7d78dcb&_b=2	false		high
https://js.intercomcdn.com/vendors~app~tooltips-modern.77e8d419.js	false		high
https://profile.cex.io/static/resources/media/credit-card.svg	false		high
https://cm.g.doubleclick.net/pixel?google_sc&google_nid=artb&google_hm=YsNahw2H4p1K9pxy5Gw4tA	false		high
https://profile.cex.io/static/resources/media/transfer.svg	false		high
https://tr6.snapchat.com/p	false		high
https://profile.cex.io/static/resources/media/logo-guidelines.svg	false		high
https://analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=576ea13c-93d9-4bc1-9cd1-aa5a7db7a594&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f18fa5bd-cf7a-4a85-8819-2f2353b1741d&tw_document_href=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4a8l&type=javascript&version=2.3.29	false		high
https://t.co/i/adsct?bci=3&eci=2&event_id=576ea13c-93d9-4bc1-9cd1-aa5a7db7a594&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f18fa5bd-cf7a-4a85-8819-2f2353b1741d&tw_document_href=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4a8l&type=javascript&version=2.3.29	false		high
https://api-iam.intercom.io/messenger/web/ping	false		high
https://tr.snapchat.com/p	false		high
https://profile.cex.io/static/resources/media/twitter.svg	false		high
https://www.google.com/pagead/1p-user-list/971878938/?random=1711719898597&cv=11&fst=1711717200000&bg=ffffff&guid=ON&async=1&gtm=45be43r0v9117519134za200&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&frm=0&tiba=Buy%20Bitcoin%20with%20Credit%20or%20Debit%20Card%20Instantly%20-%20CEX.IO&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqVCQy0JY0P1O6wr6K7J3AbHYoU2DdgA&random=4210822442&rmt_tld=0&ipr=y	false		high
https://sc-static.net/scevent.min.js	false	URL Reputation: safe	unknown
https://profile.cex.io/static/resources/media/message.svg	false		high
https://pixel.tapad.com/idsync/ex/push?partner_id=2884&partner_url=https%3A%2F%2Ftr.snapchat.com%2Fcm%2Fp%3Frand%3D1711487619952%26pnid%3D140%26pcid%3D%24%7BTA_DEVICE_ID%7D	false		high
https://js.intercomcdn.com/launcher-discovery-modern.374890f2.js	false		high
https://profile.cex.io/static/resources/media/shield.svg	false		high
https://static.cex.io/landings/css/SeoBuyBitcoinForUsd.css?v=1.8.83	false		high
https://profile.cex.io/static/resources/media/grid.svg	false		high
https://profile.cex.io/static/resources/media/exchange.svg	false		high
https://profile.cex.io/static/resources/media/facebook.svg	false		high
https://profile.cex.io/static/resources/media/cex-full-logo.svg	false		high
https://log.cookieyes.com/api/v1/log	false	URL Reputation: safe	unknown
https://cex.io/buy-bitcoins	false		high
https://cex.io/is-user-logged-in	false		high
https://profile.cex.io/static/resources/media/chip.svg	false		high
https://downloads.intercomcdn.com/i/o/475519/eabaa4fa79044587e479220a/41bec6986704a574349426a752d128dc.png	false		high
https://profile.cex.io/static/resources/fonts/OpenSans-Bold.woff2	false		high
https://cex-dataplane.rudderstack.com/v1/page	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://tr.snapchat.com/cm/i?pid=4d52341b-7196-4dc9-a490-6fe981c45213&u_scsid=a27a48c3-42e1-4aba-be5f-d5e80ef0be4b&u_sclid=3b5c3bf8-9419-47f4-bbf5-efbbc5a641a6	false		high
https://profile.cex.io/static/resources/media/data.svg	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://cex.io/limits-commissions	chromecache_145.1.dr, chromecache_185.1.dr	false		high
https://stats.g.doubleclick.net/g/collect	chromecache_171.1.dr	false		high
http://requirejs.org/docs/errors.html#	chromecache_209.1.dr	false		high
https://cex.io/affiliate-program	chromecache_162.1.dr, chromecache_206.1.dr, chromecache_145.1.dr, chromecache_185.1.dr	false		high
https://profile.cex.io/security	chromecache_162.1.dr, chromecache_206.1.dr	false		high
https://www.linkedin.com/company/cex-io	chromecache_145.1.dr, chromecache_185.1.dr	false		high
https://github.com/zloirock/core-js	chromecache_203.1.dr	false		high
https://live.blockcypher.com/ltc/tx/	chromecache_225.1.dr	false		high
https://cex.io/processing-alerts	chromecache_162.1.dr, chromecache_206.1.dr	false		high
https://www.fincen.gov/msb-registrant-search	chromecache_230.1.dr, chromecache_155.1.dr	false		high
https://cex.io/auth/register	chromecache_162.1.dr, chromecache_206.1.dr	false		high
https://cex.io/we-are-hiring	chromecache_162.1.dr, chromecache_206.1.dr	false		high
https://s.adroll.com	chromecache_212.1.dr	false		high
https://cex.io/se/buy-bitcoins/	chromecache_230.1.dr	false		high
https://cex.io/buysell	chromecache_162.1.dr, chromecache_206.1.dr	false		high
https://support.cex.io/en/articles/4383479-how-to-buy-crypto-instantly-with-your-debit-credit-card	chromecache_145.1.dr, chromecache_185.1.dr	false		high
https://cex.io//buy-bitcoins	chromecache_230.1.dr	false		high
https://www.redditstatic.com/ads/581d359d/pixel.js	chromecache_166.1.dr, chromecache_233.1.dr	false		high
https://cex.io/bitcoin-price-widget	chromecache_145.1.dr, chromecache_185.1.dr	false		high
https://cexbro.com	chromecache_225.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://profile.cex.io	chromecache_230.1.dr	false		high
https://cex.io/da/buy-bitcoins/	chromecache_230.1.dr	false		high
http://etherscan.io/tx/	chromecache_225.1.dr	false		high
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p	chromecache_209.1.dr	false		high
https://cex.io/buy-bitcoins/	chromecache_230.1.dr	false		high
https://cex.io/img/cex.svg	chromecache_230.1.dr	false		high
https://cex.io/bitcoin-calculator	chromecache_145.1.dr, chromecache_185.1.dr	false		high
http://api.jqueryui.com/category/ui-core/	chromecache_163.1.dr, chromecache_155.1.dr	false		high
https://tools.ietf.org/html/rfc6455	chromecache_209.1.dr	false		high
https://cex.io/ru/buy-bitcoins/	chromecache_230.1.dr	false		high
https://support.cex.io/en/articles/5568530-bank-transfer-withdrawal-investigation	chromecache_145.1.dr, chromecache_185.1.dr	false		high
https://cex.io/buy-ethereum	chromecache_145.1.dr, chromecache_185.1.dr	false		high
https://cex.io/btc-usd	chromecache_145.1.dr, chromecache_185.1.dr	false		high
https://cex.io/legal-security/us	chromecache_145.1.dr, chromecache_185.1.dr	false		high
https://university.cex.io/	chromecache_162.1.dr, chromecache_206.1.dr, chromecache_145.1.dr, chromecache_185.1.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_171.1.dr	false		high
https://blockchair.com/bitcoin-cash/block/	chromecache_225.1.dr	false		high
http://fusejs.io)	chromecache_163.1.dr	false	Avira URL Cloud: safe	low
https://kyte.global/pcis/18473_cex-io-ltd-dba-cex-io/	chromecache_145.1.dr, chromecache_185.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://static.cex.io/landings/media/2x-buy-sell-image.webp	chromecache_230.1.dr	false		high
https://support.cex.io/en/articles/4383395-identity-verification-on-cex-io	chromecache_145.1.dr, chromecache_185.1.dr	false		high
https://earn.cex.io	chromecache_162.1.dr, chromecache_206.1.dr	false		high
https://twitter.com/cex_io	chromecache_230.1.dr, chromecache_145.1.dr, chromecache_185.1.dr	false		high
https://cex.io/sell-tether	chromecache_145.1.dr, chromecache_185.1.dr	false		high
https://cex.io	chromecache_230.1.dr, chromecache_145.1.dr, chromecache_185.1.dr	false		high
https://cex.io/bitcoin-halving	chromecache_145.1.dr, chromecache_185.1.dr	false		high
https://app.cex.io	chromecache_145.1.dr, chromecache_185.1.dr	false		high
http://schema.org	chromecache_230.1.dr	false		high
https://cex.io/contacts	chromecache_162.1.dr, chromecache_206.1.dr, chromecache_145.1.dr, chromecache_185.1.dr	false		high
https://cex.io/buy-bitcoin-with-prepaid-card	chromecache_145.1.dr, chromecache_185.1.dr	false		high
https://static.cex.io	chromecache_230.1.dr	false		high
https://prime.cex.io/	chromecache_162.1.dr, chromecache_206.1.dr	false		high
https://cex.io/logo-guidelines	chromecache_162.1.dr, chromecache_206.1.dr	false		high
https://cex.io/buy-binance-coin-bnb	chromecache_145.1.dr, chromecache_185.1.dr	false		high
https://cex.io/about	chromecache_162.1.dr, chromecache_206.1.dr, chromecache_145.1.dr, chromecache_185.1.dr	false		high
https://cex.io/fee-schedule	chromecache_145.1.dr, chromecache_185.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
146.75.28.157	platform.twitter.map.fastly.net	Sweden	30051	SCCGOVUS	false
35.174.127.31	nexus-websocket-a.intercom.io	United States	14618	AMAZON-AESUS	false
3.225.23.81	api-iam.intercom.io	United States	14618	AMAZON-AESUS	false
54.229.44.173	event-log-producer-alb-1487800978.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
34.237.73.95	unknown	United States	14618	AMAZON-AESUS	false
151.101.65.140	reddit.map.fastly.net	United States	54113	FASTLYUS	false
172.67.20.8	cdn-cookieyes.com	United States	13335	CLOUDFLARENETUS	false
172.253.62.104	unknown	United States	15169	GOOGLEUS	false
172.253.62.101	analytics.google.com	United States	15169	GOOGLEUS	false
142.251.16.106	unknown	United States	15169	GOOGLEUS	false
34.197.113.183	adserver-vpc-alb-3-917510562.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
18.160.18.77	script.hotjar.com	United States	3	MIT-GATEWAYSUS	false
3.162.103.76	d330tt87tgwpr0.cloudfront.net	United States	16509	AMAZON-02US	false
3.162.129.245	sc-static.net	United States	16509	AMAZON-02US	false
52.85.151.82	unknown	United States	16509	AMAZON-02US	false
35.175.89.38	sludge-sludge-production-86464678.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
142.251.167.103	www.google.com	United States	15169	GOOGLEUS	false
172.64.151.101	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
142.251.16.157	td.doubleclick.net	United States	15169	GOOGLEUS	false
54.204.205.163	unknown	United States	14618	AMAZON-AESUS	false
18.160.41.53	static-cdn.hotjar.com	United States	3	MIT-GATEWAYSUS	false
52.22.248.30	cex-dataplane.rudderstack.com	United States	14618	AMAZON-AESUS	false
18.154.227.129	js.intercomcdn.com	United States	16509	AMAZON-02US	false
3.225.95.250	unknown	United States	14618	AMAZON-AESUS	false
104.22.58.91	unknown	United States	13335	CLOUDFLARENETUS	false
104.244.42.69	t.co	United States	13414	TWITTERUS	false
142.250.31.155	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
104.244.42.67	s.twitter.com	United States	13414	TWITTERUS	false
35.190.43.134	gcp.api.sc-gw.com	United States	15169	GOOGLEUS	false
3.33.152.127	downloads.intercomcdn.com	United States	8987	AMAZONEXPANSIONGB	false
151.101.1.140	unknown	United States	54113	FASTLYUS	false
104.244.42.5	unknown	United States	13414	TWITTERUS	false
34.111.113.62	pixel.tapad.com	United States	15169	GOOGLEUS	false
108.138.64.17	widget.intercom.io	United States	16509	AMAZON-02US	false
3.162.103.56	d1qug1xf2dk5z6.cloudfront.net	United States	16509	AMAZON-02US	false
52.85.151.23	api.rudderstack.com	United States	16509	AMAZON-02US	false
3.208.209.20	adserver-vpc-alb-0-2072243822.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
151.101.129.140	dualstack.reddit.map.fastly.net	United States	54113	FASTLYUS	false
142.251.179.157	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
104.20.0.37	cex.io	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1417519
Start date and time:	2024-03-29 14:44:25 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 45s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://cex.io/buy-bitcoins
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@17/212@118/42
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.31.94, 172.253.63.138, 172.253.63.100, 172.253.63.113, 172.253.63.102, 172.253.63.139, 172.253.63.101, 172.253.63.84, 34.104.35.123, 172.253.115.97, 142.251.111.95, 142.251.167.95, 142.250.31.95, 172.253.63.95, 172.253.62.95, 172.253.115.95, 172.253.122.95, 142.251.16.95, 142.251.163.95, 142.251.167.94, 172.253.122.113, 172.253.122.101, 172.253.122.138, 172.253.122.139, 172.253.122.100, 172.253.122.102
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, clients2.google.com, accounts.google.com, edgedl.me.gvt1.com, content-autofill.googleapis.com, slscr.update.microsoft.com, www.googletagmanager.com, update.googleapis.com, clientservices.googleapis.com, clients.l.google.com, fe3cr.delivery.mp.microsoft.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Mar 29 12:44:53 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9842063141959168
Encrypted:	false
SSDEEP:	48:8ro8dXTPr6HDidAKZdA1FehwiZUklqeh1y+3:8ro8/Wyy
MD5:	E49E6B806B61935E536B9194FDFE01B0
SHA1:	C4110DAC6CD72FA41C4BA8C52C926982F9D8B707
SHA-256:	004EE62522A9D38C6D6EAAD7B84A43E231B3FA323E25257B78F4F06468ED623E
SHA-512:	F8D60C3ACB187A178D580C8297D33FB3146EBE90CFF25D7E08CDE35756C112F05880FDFF03DAB7B7218DA6399CC042CC5841E124076F56121F33FDC362A6B592
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......%G...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I}X.m....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V}X.m....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V}X.m....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V}X.m..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V}X.m...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............}.C.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Mar 29 12:44:53 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9984608512617728
Encrypted:	false
SSDEEP:	48:8z8dXTPr6HDidAKZdA1seh/iZUkAQkqehiy+2:8z8/w9Qvy
MD5:	C6495DEF59FB7AAE1683C6821926F031
SHA1:	DE56AF615BA1598A099BE0938EDAA2EAAF11CEC7
SHA-256:	EB3F5ED4CB114844E7864A6D12AAC95B0BFBA45A3E39D3EB6FE9020A28BCD00F
SHA-512:	43632EE935121F3840BE717571F4387C2803796DF0F623022C65B10156F5E05887FA3E20E08385B26CE71EA4AD8B3CA50456F4AD0132CE9868E3E175E64AE804
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....N.G...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I}X.m....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V}X.m....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V}X.m....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V}X.m..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V}X.m...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............}.C.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.007619583846214
Encrypted:	false
SSDEEP:	48:8/8dXTPrAHDidAKZdA14meh7sFiZUkmgqeh7s8y+BX:8/8/eney
MD5:	48354307A8089F66EB616F156F2C45C5
SHA1:	30424DFEEB22B8BB97E05E701D1C52700C6AF0FB
SHA-256:	A823A1C0F695E3BA3D178E1FBE96426AC6ACDCACDBF9BA18291ABB2501573F63
SHA-512:	48BFC76A8D3830858A8A7451647CE83C3ABF79CF661F72D30ED349D94FD8B27690C90B936C13C6150E8B081C961C38228850A36425BF527254F9BAD78EFF6B6F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I}X.m....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V}X.m....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V}X.m....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V}X.m..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............}.C.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Mar 29 12:44:53 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9972450069924306
Encrypted:	false
SSDEEP:	48:8C8dXTPr6HDidAKZdA1TehDiZUkwqehWy+R:8C8/rUy
MD5:	1972808AC4732D151EF8BD44BDC2765D
SHA1:	6EDB5DA366568A2B3DA08F874B16455F590C0F62
SHA-256:	2A4E5886C4E0BF7DB742404371588F95FF27581FF4AAE36074074B532FEFD456
SHA-512:	9FA8F05ECCC543C04B70BA2985F277BBE5FCB205CAB676A7CC57D0A4DF4C2CAAEF12BA4B213C88AD31E501B6EED8E39A3670EA1F77AC65BA3E95E8EB74031E21
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......G...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I}X.m....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V}X.m....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V}X.m....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V}X.m..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V}X.m...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............}.C.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Mar 29 12:44:53 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.983760406332302
Encrypted:	false
SSDEEP:	48:8U8dXTPr6HDidAKZdA1dehBiZUk1W1qehYy+C:8U8/L94y
MD5:	CB69E65836FD1C560BC7640B5B1C932B
SHA1:	6E64783BF7C0ED05F6C06B67609F8C853D381279
SHA-256:	547483B161844E89575475AB0531594F83D568761B61CB09A16C75BF06AAEDD4
SHA-512:	C609F51F73BBD54B96C12799880DF74408E94D104FC34D16E0D430FCE2B72A1F9E158D65EA3787025B7188484C32E883D9C85B93D58EF8A690BA70F5BA059ED8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...... G...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I}X.m....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V}X.m....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V}X.m....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V}X.m..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V}X.m...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............}.C.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Mar 29 12:44:53 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9972541318791106
Encrypted:	false
SSDEEP:	48:878dXTPr6HDidAKZdA1duTeehOuTbbiZUk5OjqehOuTbey+yT+:878/PTfTbxWOvTbey7T
MD5:	88DC93EE8334D7A5E66AC5E27681929F
SHA1:	774636B8F9F400D9CED3B6A69FFA4219103D5D31
SHA-256:	E3CD621B608ED84C873A3BDDD0C01043C70CC5764D1421FA0F7966DB5F956330
SHA-512:	8A11E2ABBDF9DFD8419E475BF995ED5EC30CC3B5E0250B130D88317513C28449D7935E0DB9F9C3E3207E731F2B2D76EBB9990B787699A69BA9108BE4C2873C44
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....[..G...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I}X.m....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V}X.m....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V}X.m....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V}X.m..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V}X.m...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............}.C.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	774
Entropy (8bit):	4.348141739202541
Encrypted:	false
SSDEEP:	24:tVu45uYFQcwqemUhfzENuSld9czGHkwltW:RnFQc/qf4TlAzl
MD5:	49EA2EF00B5CD1D19E596EF9BC1CBA76
SHA1:	E292E281DD1191C5B5C372D3FB9D7D5F8C2DA067
SHA-256:	AC3D0552371D219F6FF140401F026BEB83FCFEAE5B05A3FDCC7E32B789BF7EA0
SHA-512:	68BC71296C35C678A4FEB91BB774E7B56777B3909EA4A3F1198B3623CED979ECD3C0D4C12EB79BD975236673A9AF023DDA3CDD88D03FBBC4F796985BE542A75A
Malicious:	false
Reputation:	low
URL:	https://profile.cex.io/static/resources/media/facebook.svg
Preview:	<svg width="16" height="29" viewBox="0 0 16 29" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M15.3975 0.00603394L11.5598 0C7.24832 0 4.46205 2.80125 4.46205 7.13694V10.4275H0.603437C0.270007 10.4275 0 10.6924 0 11.0192V15.7869C0 16.1136 0.270315 16.3782 0.603437 16.3782H4.46205V28.4087C4.46205 28.7354 4.73205 29 5.06548 29H10.0999C10.4333 29 10.7033 28.7351 10.7033 28.4087V16.3782H15.2149C15.5483 16.3782 15.8184 16.1136 15.8184 15.7869L15.8202 11.0192C15.8202 10.8623 15.7565 10.712 15.6435 10.601C15.5305 10.49 15.3766 10.4275 15.2165 10.4275H10.7033V7.63806C10.7033 6.29732 11.0293 5.61669 12.8116 5.61669L15.3969 5.61578C15.73 5.61578 16 5.35089 16 5.02446V0.59736C16 0.271225 15.7303 0.00663733 15.3975 0.00603394Z". fill="#0C87F2"/>.</svg>.

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 44648, version 1.0
Category:	downloaded
Size (bytes):	44648
Entropy (8bit):	7.99495806036843
Encrypted:	true
SSDEEP:	768:7ESLSqrPIhokLu2h1I+UloDbrQ1vFtuL7f0R8mHVNxeBBbWqrLV5DzO9SQslF0eY:jEfhfITlIguL78RB1NxcF7y2lqeLNJgH
MD5:	5D5735E57127DB2F7A2AD879FC6056B8
SHA1:	1E55DBE4E381353B147BF963E97BB60A43B0F28C
SHA-256:	408FE165DFF48EB2F8CB3A2FCBC1DD92B94D56B4AB11813BE55C776871C691CF
SHA-512:	2B777359EF42E42554688227D03DE7B0D571D17E59808FA5389BB51A86ACE9AC4821E2D741C6625FDB0A81BA80D5D6D91ACB47119403763F4070CF605E687245
Malicious:	false
Reputation:	low
URL:	https://profile.cex.io/static/resources/fonts/OpenSans-Regular.woff2
Preview:	wOF2.......h....................................?FFTM.... ....`..n.."..4.....x..U..X..6.$..$. ..-......[OQ.....-TH.m....7 ..[..)%.......B..........d!cz...\|.....T..6.\..%......Ar.6D.0N.@........3.^...3.A.{.ywr\0^.a.j+.@.q...-.nI...X.C....z..9.0.q/..L...{..........xN...1.QSN...J?a...8".....z.1...u.!.0......f.....l.....U+...).Y....b.jN~.H..%r...]..<....}$..../.@f5.....6....m...<..>..l%..U:..]MW.......N...9...3J..CF@..f..u0e..o....c.C.Xu.%.ri..k9....!....K..MQP...mB.E0(Q...m.,00.....3.=.1.ns.\.}Q.O._.k.>]..`n..2..I.(m....6*...QJ.! ...5..5..cE..V@/)....Y..T..o..f..q......4..,m.0....fJ....t...At.r.....k.).....a...a.^CE..y.<....6.Wl.....%T>c..\.]E.2...1.^%\|.'.\.....3>e.~.L.f..}B.>..0c...O5...P./...A.n..r.3.:..c.D.t.xlxNO..\|.;2.....7U.NM.@....(.....1...1.._....%.P.g..!.:.N...2..<0.4.....>.0li....$.E......c....z...g...Bc...8.._)...9qG..........R..t....).'..J..p%\)Oiu.p...I..f...w.x@.........n.qCJ.CL......?di...F}n..S......I.....b....n.~......6H..Oe...=,...M.

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	17391
Entropy (8bit):	4.791019793044514
Encrypted:	false
SSDEEP:	384:ZQFW6hTHjGIw3orWrg6RaSn65rm6/6tMwPNZesz5J3+h1zTTKQ2969VRYPkpUeK0:ZQFWSTDGIw3CW10HNPytMwPDesz5J3+j
MD5:	B412F3CEBB5A114B1A84AAEF5FC59B2F
SHA1:	5A17640585E76AFF3E7346C162215C0FCA78FA28
SHA-256:	EC5D400FE973D37575134B1BDE1AAE0AF3F5EA5E3F46A86381342417FA71799B
SHA-512:	1488AA1CE7C849A3387A6566B579012FF7061041CC380C938596FD27E18CFAFA7B0A3EEB924CC77E4185C2B8CA3B296C61887B5393FF0393E5FBFE34397AB0E0
Malicious:	false
Reputation:	low
Preview:	{"cookies":{"ls.session":{"cookie_id":"ls.session","duration":"7 days","description":"<p>This cookie is needed to authorize users.</p>"},"gtm_id":{"cookie_id":"gtm_id","duration":"1 year","description":"<table>\n<tbody>\n<tr>\n<td>\n<p>Tracks how to interact with Intercom websites and ensures you are seeing page states that are relevant to your experience..<br />https://www.intercom.com/legal/cookie-policy</p>\n</td>\n</tr>\n</tbody>\n</table>"},"intercom-id-":{"cookie_id":"intercom-id-","duration":"8 months 26 days 1 hour","description":"Intercom sets this cookie that allows visitors to see any conversations they've had on Intercom websites."},"intercom-session-":{"cookie_id":"intercom-session-","duration":"7 days","description":"Intercom sets this cookie that allows visitors to see any conversations they've had on Intercom websites."},"intercom-device-id-":{"cookie_id":"intercom-device-id-","duration":"8 months 26 days 1 hour","description":"Intercom sets this cookie that allo

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	686
Entropy (8bit):	4.412552364777488
Encrypted:	false
SSDEEP:	12:trwdU/gKuipQYjNmVcR+HdBbbQTBGc2RzdpG+NMFshly4jdbYpXMvfEK0:tYU/duQ9OcR+DbCizCm7yidoXMX50
MD5:	DEA02086B3DFD317BA00F14D9A32AD04
SHA1:	FBD3EB614818291A4132BC65245C37589C0C63D8
SHA-256:	D757868DA0C469C306117811831AB2B5C06D4FB46E5998CFECD425CB26F6D108
SHA-512:	4D8F4EC2F4CCF04840E9F17A6B4F10EC2DF08384F6DF313BDA617C8EB07B11BFADC5DDD0EEFF3AD8F3F2B144A7ED7D9B4FBBBDC8DEB154C079750BBCD2320688
Malicious:	false
Reputation:	low
URL:	https://profile.cex.io/static/resources/media/message.svg
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M8 22C7.86864 22.0001 7.73855 21.9744 7.61716 21.9241C7.49578 21.8739 7.38548 21.8003 7.2926 21.7074C7.19971 21.6145 7.12606 21.5042 7.07585 21.3828C7.02564 21.2615 6.99987 21.1314 7 21V17H4C2.897 17 2 16.103 2 15V6C2 4.897 2.897 4 4 4H20C21.103 4 22 4.897 22 6V15C22 16.103 21.103 17 20 17H13.414L8.707 21.707C8.51951 21.8946 8.26519 21.9999 8 22ZM4 6V15H8C8.26522 15 8.51957 15.1054 8.70711 15.2929C8.89464 15.4804 9 15.7348 9 16V18.586L12.293 15.293C12.3857 15.2 12.4959 15.1262 12.6172 15.0759C12.7386 15.0256 12.8687 14.9998 13 15H20V6H4Z". fill="black"/>.</svg>.

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1356
Entropy (8bit):	4.260386478062559
Encrypted:	false
SSDEEP:	24:tHtXTu3MMG9L+MgRCXiPMwOLVGMoyxNQeYf//zt8acPh91TceF5acR3SXkpfzbsK:lhvqMgRCXiP1zyNQtJcJceF3hpHsK
MD5:	698142F6D41E24AAC664374FE404328E
SHA1:	608A38621108D85B154C9BD3EB2A9C6006BECAB4
SHA-256:	83A31653061BC451E16475624698D1FE300D9A81F7CE9C27D524BA2BB625C7FD
SHA-512:	54301CD7114B457484C920E48A6C9AC0D29F79967D8F549F8DD25A90C05763E258C409B4F9C1646AC13EBDE837856D0716A4CFA588F583D10120CED787087F36
Malicious:	false
Reputation:	low
URL:	https://profile.cex.io/static/resources/media/linkedIn.svg
Preview:	<svg width="27" height="27" viewBox="0 0 27 27" fill="none" xmlns="http://www.w3.org/2000/svg">. <path fill-rule="evenodd" clip-rule="evenodd". d="M1.29239 1.72491C1.88657 1.16565 2.6622 0.885742 3.61945 0.885742C4.57675 0.885742 5.34406 1.16541 5.92056 1.72491C6.49713 2.28436 6.79144 2.99066 6.80298 3.8443C6.81442 4.6864 6.52322 5.38995 5.92929 5.95502C5.33536 6.52032 4.55377 6.8028 3.58478 6.8028H3.55017C2.60437 6.8028 1.84299 6.52008 1.26645 5.95502C0.689697 5.38995 0.401367 4.68616 0.401367 3.8443C0.401367 2.9906 0.698242 2.28436 1.29239 1.72491ZM25.1771 10.7073C23.9777 9.39813 22.3914 8.74341 20.4192 8.74341C19.6925 8.74341 19.032 8.83282 18.4379 9.01166C17.8439 9.19043 17.3423 9.44128 16.9327 9.76428C16.5233 10.0873 16.1973 10.3871 15.9553 10.6638C15.7251 10.9267 15.5 11.2328 15.2804 11.5792V9.14105H9.58789L9.60535 9.97168C9.61703 10.5255 9.6228 12.2325 9.6228 15.0929C9.6228 17.9536 9.61127 21.6849 9.58813 26.2872H15.2804V16.7191C15.2804 16.131 15.3435 15.6639 15.4706

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3502
Entropy (8bit):	4.220657976699538
Encrypted:	false
SSDEEP:	96:2mURimFp6iGw2AKMLQjSLNXvlmxP+ij7FexG4QM8TV0Ja:SVf6iGw5KMLQjuNXvw0ijBeEA8TyJa
MD5:	4988D4CEF43B78AE7E7BC00D1F4CBCB6
SHA1:	CE7FF0254F357034B916A471317519489752A53F
SHA-256:	223EE307721B275863060AACFE94D596D977F0739B16CEF8DF3C85FAD66ACFBC
SHA-512:	88F040D52C5F66C3D3E41305507524316817B13656C3DA62C31D84199680CFD18349C3ECCB79D4F26C8865DC4B4CA0DAB980997100EB0BC6C6811FAD96055224
Malicious:	false
Reputation:	low
Preview:	<svg width="139" height="40" viewBox="0 0 139 40" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M19.8572 22.2047H34.7936L37.1664 19.8345L34.7936 17.4644H19.8572C18.5459 17.4644 17.4844 18.5247 17.4844 19.8345C17.4844 21.1443 18.5459 22.2047 19.8572 22.2047Z". fill="#00CCCC"/>. <path d="M19.8571 8.73193C13.7251 8.73193 8.74219 13.7093 8.74219 19.8342C8.74219 25.9592 13.7251 30.9366 19.8571 30.9366H26.0514L30.7971 26.1963H19.8571C16.3478 26.1963 13.4879 23.3396 13.4879 19.8342C13.4879 16.3289 16.3478 13.4722 19.8571 13.4722H30.7971L26.0514 8.73193H19.8571Z". fill="#00CCCC"/>. <path d="M39.7139 30.9366V26.1963H36.1422L31.3965 30.9366H39.7139Z" fill="#00CCCC"/>. <path d="M5.8197 5.81312C2.06062 9.55548 0 14.5328 0 19.8345C0 25.1361 2.06062 30.1135 5.8197 33.8558C9.56629 37.5982 14.5617 39.6689 19.8569 39.6689H39.7138V34.9286H19.8569C15.8231 34.9286 12.0265 33.3568 9.16665 30.5127C6.31924 27.656 4.74568 23.8637 4.74568 19.8345C4.74568 15.8052 6.3192

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	786
Entropy (8bit):	4.509756326107144
Encrypted:	false
SSDEEP:	24:tYRUyKuHCzE2sHhgY1siM5WOuTIB4+7Du1kJjWEJb0:gxV2suni0WZIaYDoEK
MD5:	FB3690EFFE93F63238CCCDD4623CF40B
SHA1:	E3798D9DD352803A0F8A5AC331B4FB66CC6D761D
SHA-256:	6DD6D9917E775628FB11E7EE4EE901D8CA821D585C6383221C289CB9A5342CCE
SHA-512:	0CC5D70B3BC9036A0250065D688A0B8D7F40E2CFD57E33E417BDF45D850257B97F33C389A269E539127CCC31217552BA5CF88E381F76371853A47BC4E727046C
Malicious:	false
Reputation:	low
URL:	https://profile.cex.io/static/resources/media/exchange.svg
Preview:	<svg width="24" height="25" viewBox="0 0 24 25" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M4.64961 22.0498C4.01628 22.0498 3.47461 21.829 3.02461 21.3873C2.57461 20.9456 2.34961 20.4081 2.34961 19.7748V5.2498C2.34961 4.61647 2.57461 4.0748 3.02461 3.6248C3.47461 3.1748 4.01628 2.9498 4.64961 2.9498H14.0746V5.2498H4.64961V19.7748H19.1746V10.3248H21.4496V19.7748C21.4496 20.4081 21.2204 20.9456 20.7621 21.3873C20.3038 21.829 19.7746 22.0498 19.1746 22.0498H4.64961ZM17.7496 8.9998V6.6998H15.4246V4.9748H17.7246V2.6748H19.4496V4.9498H21.7496V6.6748H19.4496V8.9998H17.7496Z" fill="black"/>. <path d="M5.29688 16.3459L6.45099 17.5L9.84118 14.1338L12.0051 16.2978L17.1746 11.1043L16.0205 9.9502L12.0051 13.9655L9.84118 11.8016L5.29688 16.3459Z" fill="black"/>.</svg>.

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	672
Entropy (8bit):	4.88738061447812
Encrypted:	false
SSDEEP:	12:hYYLVKwFHCIaI1ByLc2VfTgDAM7QBDM75DM7hkgaPAxRW09eXM7yarBBxNtsbRz+:hYeU4iIaI1UDrCQB050AARW09dDrBnzj
MD5:	67B95267FEC9BF5EE45786BEF9D2B01A
SHA1:	346659BA1E68F661B9A0D897D15B9B38A3C1331D
SHA-256:	6501140033C3BB20DA4B5AC73C90F687BA8A2053C4BA37C4B6F5275166DB7FA6
SHA-512:	F5BECF4F2345D6E382665F700AFB5558AAA3CFD6B7A1336FA0592C303607AAD95FD724E8A3C5D52BB5FD37A8CB60AF31D20582C7B3FC5FEBC8BF9BB0F93A9C3E
Malicious:	false
Reputation:	low
URL:	https://tr.snapchat.com/cm/i?pid=4d52341b-7196-4dc9-a490-6fe981c45213&u_scsid=a27a48c3-42e1-4aba-be5f-d5e80ef0be4b&u_sclid=3b5c3bf8-9419-47f4-bbf5-efbbc5a641a6
Preview:	<!DOCTYPE html>.<html>.<head>. <script>. (function(win, doc, sdk_url){. if(win.snaptr) return;. var tr=win.snaptr=function(){. tr.handleRequest? tr.handleRequest.apply(tr, arguments):tr.queue.push(arguments);. };. tr.queue = [];. var s='script';. var new_script_section=doc.createElement(s);. new_script_section.async=!0;. new_script_section.src=sdk_url;. var insert_pos=doc.getElementsByTagName(s)[0];. insert_pos.parentNode.insertBefore(new_script_section, insert_pos);. })(window, document, 'https://sc-static.net/scevent.min.js');. snaptr('cm', { 'sync_modes': [140] });. </script>.</head>.</html>.

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	124591
Entropy (8bit):	5.412417994564779
Encrypted:	false
SSDEEP:	3072:0KTc31BK745VUwezkVWV156bDEQuvUrPVe6A:Ox5VUwIU06A
MD5:	AB8A3F86A1092C63760BA3761EBE6A53
SHA1:	2BC27295A41EE10F3F3A95598F9979815A32D9E1
SHA-256:	AB14404E254181E5A8C4D56B09EA5A07AA200D8B50E3859283601B6402AE465D
SHA-512:	2995F503BB0A6DA920C3E4774CEB9482DB395B14BF8F3D1676D343FEE02A0F6BD12A6F01D10988FE867798A211B2869B9700AE40ED75745C37957B2695005290
Malicious:	false
Reputation:	low
URL:	https://cdn.rudderlabs.com/v1.1/rudder-analytics.min.js
Preview:	var rudderanalytics=function(e){"use strict";function t(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function n(e){for(var n=1;n<arguments.length;n++){var r=null!=arguments[n]?arguments[n]:{};n%2?t(Object(r),!0).forEach((function(t){u(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):t(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function r(e){var t=function(e,t){if("object"!=typeof e\|\|!e)return e;var n=e[Symbol.toPrimitive];if(void 0!==n){var r=n.call(e,t\|\|"default");if("object"!=typeof r)return r;throw new TypeError("@@toPrimitive must return a primitive value.")}return("string"===t?String:Number)(e)}(e,"string");return"symbol"==typeof t?t:String(t)}function i(e){return i="function"==typeof Symbol&&"s

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1105
Entropy (8bit):	4.136122864044135
Encrypted:	false
SSDEEP:	24:t8j8DuPfATaLtmIHl3sh/6h4sMhgRPGLaUFq4UBelDHYEqTefvlrW:pyfxl3sN6h4sMONeRFqpBqDNA
MD5:	BEDC39FEE545864AB0711A172D04EE34
SHA1:	3E198C37F1875CB9F5372DFA8FB24D2CEC14DEB5
SHA-256:	9C76B1644ACF8902B1B83BE2CCFFF403B4C9695771B296252C23D41E825F55A0
SHA-512:	700B37EF81FDB7504382F8AB6618F40F5E11ED3049392F81CEA7754DF25F6182F71C9EAC9E949008CF6B7F6E009C799F51D77912760F8CD249CCE027887CCFFF
Malicious:	false
Reputation:	low
URL:	https://profile.cex.io/static/resources/media/twitter.svg
Preview:	<svg width="33" height="26" viewBox="0 0 33 26" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M33 3.078C31.7862 3.59981 30.4805 3.95274 29.1112 4.11036C30.5093 3.29828 31.5822 2.01333 32.0886 0.479714C30.7804 1.23208 29.3308 1.77788 27.7893 2.07207C26.5543 0.796913 24.7947 0 22.8462 0C19.1079 0 16.0759 2.93947 16.0759 6.56376C16.0759 7.07823 16.136 7.57899 16.2521 8.05968C10.6254 7.78605 5.63633 5.17308 2.29684 1.20075C1.71417 2.16997 1.37992 3.29828 1.37992 4.50099C1.37992 6.77767 2.57606 8.78757 4.39172 9.96434C3.28243 9.93057 2.23777 9.6354 1.32539 9.14247C1.32489 9.17037 1.32489 9.19827 1.32489 9.22568C1.32489 12.406 3.6596 15.0586 6.75622 15.6612C6.1887 15.812 5.58937 15.8917 4.97287 15.8917C4.53562 15.8917 4.112 15.8511 3.69898 15.7748C4.56036 18.3819 7.06018 20.2797 10.0235 20.333C7.70596 22.0938 4.78706 23.1428 1.6142 23.1428C1.0689 23.1428 0.528642 23.1119 0 23.0507C2.99463 24.9138 6.55425 26 10.3774 26C22.8306 26 29.6408 15.9985 29.6408 7.32396C29.6408 7.03956

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=105&external_user_id=NjJjMzVhODcwZDg3ZTI5ZDRhZjY5YzcyZTQ2YzM4YjQ&expiration=1743255901&C=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	371
Entropy (8bit):	4.786989145390087
Encrypted:	false
SSDEEP:	6:tnrwdhC/gKumc4slZRIh0GaXK+RXpc2JXZVx/GCf+0l3MFrJMRzeU1KK52:trwdU/gKuiaGaE23S0lIQ6U1KK0
MD5:	1118332E807A42EA3B2B833A685D6173
SHA1:	D201ECCC95B256311634325F0528F9E76F7C81B3
SHA-256:	91ACA37240222E2D0DF0C815FB0A4BB5FF7777828A558A65F4AA535E7B510A7E
SHA-512:	354C2FF869CD8858E0BBA306D769615033F91A097D75D9089E8395ECD07583552C9E78846168B67E4A3D1BE11A3FED5B93BAB43201F0531671B92AF36E3D0ECC
Malicious:	false
Reputation:	low
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M20 6H17V4C17 2.897 16.103 2 15 2H9C7.897 2 7 2.897 7 4V6H4C2.897 6 2 6.897 2 8V18C2 19.103 2.897 20 4 20H20C21.103 20 22 19.103 22 18V8C22 6.897 21.103 6 20 6ZM15 4V6H9V4H15ZM8 8H20V11H4V8H8ZM4 18V13H10V15H14V13H20L20.001 18H4Z". fill="black"/>.</svg>.

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	238
Entropy (8bit):	4.850581800515803
Encrypted:	false
SSDEEP:	6:tnrwdhC/gKumc4slZRI7Ur0uyjGFMRQFfAonwK52:trwdU/gKui7UYrKFfFfLwK0
MD5:	D218793B513D2685E487A9E0955DFE1A
SHA1:	353BC5763EB8FD57B003AE9AEB48C82A7B1D9C91
SHA-256:	D1FCDF939DDA66CF16E71740CF581A81D7A95BD41EE678DBAEE36A32E2201DA5
SHA-512:	EA0D63BA55D0E82611F9046B1193114CF87DDA81D5D6ACCCEAD4168397CF9104C0ACB8D87A6E54D3E1AAB59A68A6FA8DA2B242BDC9CDAFCB24880FFE4DA95BEB
Malicious:	false
Reputation:	low
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M10.707 17.707L16.414 12L10.707 6.29297L9.29297 7.70697L13.586 12L9.29297 16.293L10.707 17.707Z". fill="black"/>.</svg>.

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1604
Entropy (8bit):	4.179763477297218
Encrypted:	false
SSDEEP:	48:n/2oDilSwI7CR8OB3E+ebL+sMFDjqlLqoGh58UTCOk9kX:nUl9IF63Pev+s4DjqsoGhXGOk9kX
MD5:	16F714734F5D26C5615C7BE427CFB01A
SHA1:	316FBEAFFC3ED32E0F5013F1DEE67DD748F13B2A
SHA-256:	934021C6D7EE6C328709453C189DDF6B27AE90BA537E585E175A603E5A8576BE
SHA-512:	55355B24A971FA7B15624628F17937A89DB8340259F173721DEE3D4EC3B7C2BB9EC99E84E432C33435B8AAC799C9C23C7DC6CDF623EC039599CDC0FDC4890E3F
Malicious:	false
Reputation:	low
URL:	https://profile.cex.io/static/resources/media/groups.svg
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M16.6002 12.0157C16.4038 12.3148 16.179 12.5935 15.9297 12.848C16.6217 13.1074 17.2475 13.5021 17.7749 14H18C19.6569 14 21 15.3431 21 17V18H23V17C23 14.2386 20.7614 12 18 12H17C16.8654 12 16.7321 12.0053 16.6002 12.0157ZM17.1325 10.9809C17.2533 10.9935 17.3759 11 17.5 11C19.433 11 21 9.433 21 7.5C21 5.567 19.433 4 17.5 4C16.7188 4 15.9975 4.25591 15.4151 4.68846C15.9441 5.10801 16.3941 5.62286 16.7391 6.20705C16.9622 6.07548 17.2223 6 17.5 6C18.3284 6 19 6.67157 19 7.5C19 8.32843 18.3284 9 17.5 9C17.5 9.69836 17.3698 10.3663 17.1325 10.9809ZM8.58489 4.68846C8.00253 4.25591 7.28115 4 6.5 4C4.567 4 3 5.567 3 7.5C3 9.433 4.567 11 6.5 11C6.62413 11 6.74674 10.9935 6.86753 10.9809C6.63016 10.3663 6.5 9.69836 6.5 9C5.67157 9 5 8.32843 5 7.5C5 6.67157 5.67157 6 6.5 6C6.77773 6 7.03783 6.07548 7.26091 6.20705C7.60594 5.62286 8.05591 5.10801 8.58489 4.

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	880
Entropy (8bit):	4.637623701366797
Encrypted:	false
SSDEEP:	24:twdmluIdARFcl/JV+UJr9MRaFL/MMxBoAV:68++/O8Da2
MD5:	3AFD14A996A67DE7207AE6A6B9640395
SHA1:	995FE850D0E4F9FD0AD544EEA1FCE698407B8B5C
SHA-256:	01AC21702217CE65714076E7EC940C5C384AF1A00A43421088C7FD121339E060
SHA-512:	CF37FAECF736D90DB4A9A8FBE690CD122A88C20A107FEFCAE79AEA4A25ADFEA73626524B898095CD73E862659435A955875B75BA1D34E661CFF93356CD14D876
Malicious:	false
Reputation:	low
URL:	https://profile.cex.io/static/resources/media/logo-guidelines.svg
Preview:	<svg width="20" height="20" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M2.54462 15.6398C2.54462 16.559 3.29212 17.3065 4.21128 17.3065H5.87795V15.6398H4.21128V13.9731H2.54462V15.6398ZM15.8779 5.63981C15.8779 4.72064 15.1304 3.97314 14.2113 3.97314H12.5446V5.63981H14.2113V7.30648H15.8779V5.63981ZM4.21128 5.63981H5.87795V3.97314H4.21128C3.29212 3.97314 2.54462 4.72064 2.54462 5.63981V7.30648H4.21128V5.63981ZM2.54462 8.97314H4.21128V12.3065H2.54462V8.97314ZM14.2113 8.97314H15.8779V10.6398H14.2113V8.97314ZM7.54462 3.97314H10.8779V5.63981H7.54462V3.97314ZM7.54462 15.6398H9.21128V17.3065H7.54462V15.6398Z". fill="#26374C"/>. <path fill-rule="evenodd" clip-rule="evenodd". d="M16.424 12.3065L17.5446 13.1391L13.648 17.3065L10.8779 15.2495L11.8238 14.238L13.4731 15.4637L16.424 12.3065Z". fill="#26374C"/>.</svg>.

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	341
Entropy (8bit):	4.8345686799038115
Encrypted:	false
SSDEEP:	6:tnrwdhC/gKumc4slZRIhC2jGwsAGCf+/F8/1mqpBK5lqRIv652:trwdU/gKuihC2jG/nW3BK7DC0
MD5:	4083314AEDD6D439BEE2BB9682066257
SHA1:	2404036F44B279E19AE2CF387724F325FE25FEE5
SHA-256:	69558900819EB6EB54364B7CF06804F520876CB86E3C6667D8BEE6AE7F144594
SHA-512:	67D1DE3DFED4D5CDD616E3A910454701F87C23EEC199C7993FEE5A2906A78ED545768D5896B7E875F1B51B66E2F441D4030F879A1B13C52E60F77B67AF054904
Malicious:	false
Reputation:	low
URL:	https://profile.cex.io/static/resources/media/credit-card.svg
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M20 4H4C2.897 4 2 4.897 2 6V18C2 19.103 2.897 20 4 20H20C21.103 20 22 19.103 22 18V6C22 4.897 21.103 4 20 4ZM20 6V8H4V6H20ZM4 18V12H20.001L20.002 18H4Z". fill="black"/>. <path d="M6 14H12V16H6V14Z" fill="black"/>.</svg>.

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	22491
Entropy (8bit):	4.427058183774322
Encrypted:	false
SSDEEP:	192:RfX7cD6ZrLwnsijGz+Edbo8h5v8zux6S0FzhA5qKzb:6D6hYjG7b7h5v85S0ZhA5Xv
MD5:	A02690ABD5935B5FED318C73064CA575
SHA1:	F0DB8671A258F4248F70F0BFABEEB510B055BE60
SHA-256:	B71A670E344C5879714463056A9E5983B33F8627648CBEF1ABACB2FC8255C37B
SHA-512:	062A2A887651C4611C81A1A47DD0C41D29D43205F1673555F03E8D645BB8C74EFC7BAF997C0E75ADD969263E844EF4AEA59EDB63D1A12E101CBADC36A31DC061
Malicious:	false
Reputation:	low
URL:	"https://cex.io/single-bundle-widget-get-config?forPage=/buy-bitcoins&originator=cex&widgetSymbols=BTC&widgetPairsForSymbols=USD,EUR,GBP,RUB"
Preview:	{"bundlesConfig":{"symbols":[["BTC",["USD","EUR","GBP"]]],"limits":{"BTC":{"min":90000,"minSell":90000},"ETH":{"min":5000,"minSell":5000},"BCH":{"min":5000000,"minSell":5000000},"DASH":{"min":16000000,"minSell":16000000},"LTC":{"min":20000000,"minSell":20000000},"XRP":{"min":25000000,"minSell":25000000},"XLM":{"min":800000000,"minSell":800000000},"USD":{"min":2000,"max":1000000,"minSell":2000,"maxSell":1000000},"EUR":{"min":2000,"max":1000000,"minSell":2000,"maxSell":1000000},"GBP":{"min":2000,"max":750000,"minSell":2000,"maxSell":750000},"TRX":{"min":200000000,"minSell":200000000},"BTT":{"min":4503490000,"minSell":4503490000},"MHC":{"min":1839926000,"minSell":1839926000},"ONT":{"min":30000000,"minSell":30000000},"ONG":{"min":16390000,"minSell":16390000},"NEO":{"min":800000,"minSell":800000},"GAS":{"min":1868000,"minSell":1868000},"ADA":{"min":7237000,"minSell":7237000},"ATOM":{"min":810000,"minSell":810000},"BAT":{"min":23645000,"minSell":23645000},"XTZ":{"min":6000000,"minSell":60000

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	99221
Entropy (8bit):	5.362569601994958
Encrypted:	false
SSDEEP:	1536:AVVuXyj+viNUC0b5McsLl8Z4LuPpDpQiz:AVVuy5Sb5NBuLqpDFz
MD5:	1656EAF11FC4343AC193D519CAD1199F
SHA1:	64F23D0B76B6A0606064497F946D9006AAFC7615
SHA-256:	CE78844FB7FC788CAD5F369C46A6B89B81B025949F8A93922097A2D7ADAEC283
SHA-512:	FC2A6158C105F086057248D81F68A6521AEDF8E90EA1D7354316B90E856B78C8802C82E9034046B63DD1F622052686E03D3AB744DC8FE0F5959C605BAAA06C55
Malicious:	false
Reputation:	low
URL:	https://cdn-cookieyes.com/client_data/9022a6a83360995949fccfed/banner.js
Preview:	!function(){var t={9662:function(t,e,n){var r=n(7854),o=n(614),i=n(6330),c=r.TypeError;t.exports=function(t){if(o(t))return t;throw c(i(t)+" is not a function")}},9483:function(t,e,n){var r=n(7854),o=n(4411),i=n(6330),c=r.TypeError;t.exports=function(t){if(o(t))return t;throw c(i(t)+" is not a constructor")}},6077:function(t,e,n){var r=n(7854),o=n(614),i=r.String,c=r.TypeError;t.exports=function(t){if("object"==typeof t\|\|o(t))return t;throw c("Can't set "+i(t)+" as a prototype")}},1223:function(t,e,n){var r=n(5112),o=n(30),i=n(3070),c=r("unscopables"),a=Array.prototype;null==a[c]&&i.f(a,c,{configurable:!0,value:o(null)}),t.exports=function(t){a[c][t]=!0}},1530:function(t,e,n){"use strict";var r=n(8710).charAt;t.exports=function(t,e,n){return e+(n?r(t,e).length:1)}},5787:function(t,e,n){var r=n(7854),o=n(7976),i=r.TypeError;t.exports=function(t,e){if(o(e,t))return t;throw i("Incorrect invocation")}},9670:function(t,e,n){var r=n(7854),o=n(111),i=r.String,c=r.TypeError;t.exports=function(

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (63329)
Category:	downloaded
Size (bytes):	65330
Entropy (8bit):	5.189871613820619
Encrypted:	false
SSDEEP:	1536:ZYkZqWlw61SAvkWDT36yo5prSeI0ITq6j3rwzlr2mVZMsL4BJz2:CkZFw61SAvkWDT36yo5prSeI0ITAVgY
MD5:	83402B1BAC409994011A3580AC0CB879
SHA1:	9A396C06B075783958EE5F3218281C2CC1A75E41
SHA-256:	48A6A905AA7076AC5A5DE162B0FCE6B80A05B2B6F910A7451F3FB87A34DF0293
SHA-512:	9CE82F59C1777D9E599CE515AE71FF2A904976EC157C673094B8B760F27E016F5FA96A61C33CF261E93A08FAA4B6841BAD902B165C378BC4F0EB10C590266425
Malicious:	false
Reputation:	low
URL:	https://static.cex.io/landings/css/SeoBuyBitcoinForUsd.css?v=1.8.83
Preview:	html,body,div,span,applet,object,iframe,h1,h2,h3,h4,h5,h6,p,blockquote,pre,a,abbr,acronym,address,big,cite,code,del,dfn,img,ins,kbd,q,s,samp,small,strike,sub,sup,tt,var,b,u,i,center,dl,dt,dd,ol,ul,li,fieldset,form,label,legend,table,caption,tbody,tfoot,thead,tr,th,td,article,aside,canvas,details,embed,figure,figcaption,footer,header,hgroup,menu,nav,output,ruby,section,summary,time,mark,audio,video,button{margin:0;padding:0;border:0;font-size:100%;font:inherit;vertical-align:baseline}article,aside,details,figcaption,figure,footer,header,hgroup,menu,nav,section{display:block}body{line-height:1}ol,ul{list-style:none}blockquote,q{quotes:none}blockquote:before,blockquote:after,q:before,q:after{content:"";content:none}table{border-collapse:collapse;border-spacing:0}#app{position:relative;width:100%;height:100%;font-family:var(--font-main);font-size:var(--font-size-m);line-height:var(--line-height-main);color:var(--text-color-main)}main{display:block;overflow-x:hidden}:root{--bg-color-white:

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9279)
Category:	downloaded
Size (bytes):	17061
Entropy (8bit):	5.1852392658133235
Encrypted:	false
SSDEEP:	384:K63YvbDOHYUg3Y4q3SmC3eF5HYeZbvcuPseSelvzgbrB5S3:pYvbOYUwY4GSm+eF5YeOfehzgbf0
MD5:	88871E1D10AE94386BE43101B9E37ADE
SHA1:	E422C6092CABBC03ED38251446A3B6A6D550207B
SHA-256:	B86829478B5BA12D59B29377ADB7DF6D360B62C66FCDA77F3F952AA8517B2460
SHA-512:	FE983090D1F2FE2E3A6839E1C6023215635291C1CCA86B5E35E35A12E163A887C1961A3C394EAB5F4CC7E082F3B1F5FBA3E52887FEC2B78FCEA1DCC6892F8F7B
Malicious:	false
Reputation:	low
URL:	https://static.hotjar.com/c/hotjar-1666385.js?sv=6
Preview:	window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":1666385,"r":0.4571596780908606,"rec_value":0.19663311864185576,"state_change_listen_mode":"automatic_with_fragments","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":false,"session_capture_console_consent":true,"anonymize_digits":true,"anonymize_emails":true,"suppress_all":false,"suppress_all_on_specific_pages":[],"suppress_text":false,"suppress_location":false,"user_attributes_enabled":true,"legal_name":"","privacy_policy_url":"https://cex.io/privacy","deferred_page_contents":[],"record_targeting_rules":[],"feedback_widgets":[{"id":465843,"created_epoch_time":1696330853,"effective_show_branding":false,"skin":"light","background":"#1BB6C1","position":"middle_left","content":{"initial":"Help us improve by sharing your feedback.","emotion":"How would you rate your experience?","thankyou":"Thank you for sharing your feedback with us!","email":"We may wish to follow up. Enter your email if you're happ

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1141
Entropy (8bit):	4.3052641307943205
Encrypted:	false
SSDEEP:	24:tjoqrDuEPyNhX4JhW8n2cqQUX0KyLNcoXmAMrvAIjV:qqrfPyNhXOhW8n27QOjeXmnrx
MD5:	C6118ABB780F7901636525AEC3E0CAA3
SHA1:	58557851859CA90FD4DBB15BC673459D1D8CC06A
SHA-256:	CF5FC043E2926C87BE7634A2D0A237479C0487B5AA1F6966C323C97CD40E1723
SHA-512:	B36764279A5E027522F347EB018DDA98598EB2F3FBF46269125164C217D80DDE6615E35317EBD74F9B4686E9E60C4409DA50EEE1C8597A9AC1A39CF165E2E206
Malicious:	false
Reputation:	low
Preview:	<svg width="21" height="21" viewBox="0 0 21 21" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M16.9637 7.79449C16.9242 7.70404 16.8689 7.62136 16.8004 7.55032L11.8004 2.55032C11.7294 2.4818 11.6467 2.4265 11.5562 2.38699C11.5312 2.37532 11.5046 2.36865 11.4779 2.35949C11.4082 2.33576 11.3356 2.32146 11.2621 2.31699C11.2446 2.31532 11.2287 2.30615 11.2112 2.30615H5.37791C4.45874 2.30615 3.71124 3.05365 3.71124 3.97282V17.3062C3.71124 18.2253 4.45874 18.9728 5.37791 18.9728H15.3779C16.2971 18.9728 17.0446 18.2253 17.0446 17.3062V8.13949C17.0446 8.12199 17.0354 8.10615 17.0337 8.08782C17.0297 8.01425 17.0154 7.94161 16.9912 7.87199C16.9829 7.84532 16.9754 7.81949 16.9637 7.79449ZM14.1996 7.30615H12.0446V5.15115L14.1996 7.30615ZM5.37791 17.3062V3.97282H10.3779V8.13949C10.3779 8.3605 10.4657 8.57246 10.622 8.72874C10.7783 8.88502 10.9902 8.97282 11.2112 8.97282H15.3779L15.3796 17.3062H5.37791Z". fill="#26374C"/>. <path d="M7.04456 10.6395H13.7112V12.3062H7.04456V1

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	231092
Entropy (8bit):	5.546170423518939
Encrypted:	false
SSDEEP:	3072:OvAF5QU3Zw2yM/2sy58UVzPQYEFy68aLBO1ggey0enLHWIWEkXqDVwVI/:MADw1M8nP9CE1ggey0enLHfWEkXqpwV2
MD5:	15CC139E29AA50CF5C193CF7D5EE874D
SHA1:	C7341CFD3C397380BD2E3EAA46E8E786654880A9
SHA-256:	3023E638062FFCAFC615F389EEF72390BB8D4DE113086E3ED5AA54E20CCBB3C6
SHA-512:	F9C138386B46DBB61C257CDB98FA396DCCDA7CB9755A6817E57C2CC47552E6E2CA737F4BB0527CC02C99804880C43BD4B40A731B8347EE6BC6B4020F77C9F7A6
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-971878938&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":14,"vtp_instanceDestinationId":"AW-971878938","tag_id":8},{"function":"__ogt_1p_data_v2","priority":4,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":4},{"function":"__ccd_ads_first","priority":3,"vtp_instanceDestinationId":"AW-971878938","tag_id":9},{"function":"__ccd_pre_auto_pii","priority":1,"vtp_instanceDestinationId":"AW-971878938","tag_id":7},{"function":"__rep","vtp_containerId":"AW-971878938","vtp_remoteConfig":["map","enhanced_conversions",["map","iWvWCOjnlN8CEJrkts8D",["map","enhanced_conversions_mode","off","enhanced_conversions_automatic_settings",["map"]],"f01UCM6_lt8

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 505979
Category:	downloaded
Size (bytes):	136493
Entropy (8bit):	7.997550761213488
Encrypted:	true
SSDEEP:	3072:T/B10vIImcQJ/lkNgRCRIJKM2TQsqeIt/Yom3USk+xdt1:TZew5KNCCRNpUsqeIHf+7
MD5:	A05D47F6C60754A17B845C79523A5872
SHA1:	6483B2493407820EE1EEEA777B573FF104AC80E3
SHA-256:	B5AA241E064F2D49B344EEDD74488940ABBFC26FBAD6BDDB3F498EDDF96EB65E
SHA-512:	05370B3A90686AAD3C9ADF7A9F98CA255C1C45D96285AE6A8F8105BE30FC5C0B61AEE0FFF0B33C3A57DA23EF63B9885F624D42B5989A121A87B754306A8208FA
Malicious:	false
Reputation:	low
URL:	https://js.intercomcdn.com/app-modern.ef7a291f.js
Preview:	............r.I. .+d...<.f.B..4.MQRIURIG.JU..C%..."..e&x).f.<f;6.0f..f..o....)......q...R..9=;s.K`fd.G.....[d\|#..h.{...49..o'Q.\.y8.8.,.(.y:Lf.....Mno?\|..".4>\|.t.;..........,.....`....Q...E..MV~.2L7.A...=hw..0..\|#.t.,.4.,..n...zl...9.{.?.^..I.[..Q...M/..Q....?....Z..y...U4.'.V........&.x.o.....e..K...3oc3..4...$.<]..a...O.8..(.{.t...e.._..!\|......OP..V#>L..?..6=.....?N.\|;.~.V.Z.W.......4I. .x. .0z....wv...uD..d.F....l.sk..v.;M.E.sww...a..g....~uvww.\|....h....Y..v.....(.H.....aM.).6.%...2..x..,..'y..^..Q..r.,.....>.....^......8....O.8......,.fQ..gS..2@.!.$S.7b.G.\|.3..I.....a..$..'...Kb.Uo.....\|5....d..S./...5L9..d.g0.F..1=#..{~.0Q........;..e...j.a../.3..{...q.,............!..t.......S..\|....4..Rhr:Jx...$.8...r~."..R....(.....4...;X.+...o6...l.V..l..a...`....O...V.+.}.u./.] 9...N...`J_......"...l...%f....>.a....rp....E....../.I.@h.A....H..1..<>.'...C....~.!..W...Q...r.@.<.=.&a..*.u.i~...T5b..[[..!.8..?.J..Wl..s@...:.#.+=.....E.w.o2.C?.7.. ..'

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	4.861201309122559
Encrypted:	false
SSDEEP:	384:ilKl+lIluldoFoOobojofoHo8oKoso1odoXoEoOoboIo5o0oAo7o+o6opovosoR2:iEgmMnsvS6aS1nlck2xjWZo9xCPTYulF
MD5:	14EF8306279B4D635557686F14E3CDAE
SHA1:	B63AA8E23F7DB1B09A341B04CBBC21A83385B862
SHA-256:	5CF8B27F16E6F4B8BDB2BD8AF5C63B8767DF04706280F68A86D3C3855E576268
SHA-512:	49C2C0CB916DB3A127EDA535D1241C512D3F46F9ECC3398EC5D7DB5DB4CDA1C1D650299AA38B2D3B1DF4646CCFA5FE1D18F6AD9F3E09B9AA25C6F261E10D6B14
Malicious:	false
Reputation:	low
Preview:	[{"targetBanner":1192903,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode IS 'GA'"},{"targetBanner":1192903,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode IS 'CA'"},{"targetBanner":1192903,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode IS 'CO'"},{"targetBanner":1192903,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode IS 'NV'"},{"targetBanner":1192903,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode IS 'VA'"},{"targetBanner":1192904,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode IS 'AL'"},{"targetBanner":1192904,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode IS 'AK'"},{"targetBanner":1192904,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode IS 'AZ'"},{"targetBanner":1192904,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode IS 'AR'"},{"targetBanner":1192904,"condition":"regionName IS 'NA

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 703827
Category:	downloaded
Size (bytes):	162751
Entropy (8bit):	7.9975139996022016
Encrypted:	true
SSDEEP:	3072:WK4wYKAsGJebyEgmSj9JK8bOlUGBHoyXypDz7t74vmoyYW1bCDa8omKae:WK4KmsbSJ1ql90Df2Xy1b+aIKR
MD5:	BBF9FE5C44467ED294A5EF62E7106FDC
SHA1:	69E44FEAC55674D8E20FF32C8F3008AEEDFBEA56
SHA-256:	47EE3486FF7868529F03909A65FCD028FBB9750AA39A2BD9D8E33697BE9AD560
SHA-512:	45E96DAF27E6D83C3DA044F34E05BDC69CAF9A182CDD25A964A886E0CB78C73D01D730A4EF04F86BEF204DC05B0816FF4B1485F22876D0C7DC48C5C1E42B6C0E
Malicious:	false
Reputation:	low
URL:	https://js.intercomcdn.com/vendors~app~tooltips-modern.77e8d419.js
Preview:	............s.G./....../......6(H..)K6..D.n..N.(.e.(.P E............3.e..n..n..J7.1.^.}..;'..P !OOG../..bUfV.'3..;.Y...z".(E......Q.'K..,..(... ...Qy..)J......E.%.^_.[t.'....g......z.r.;)q.C9._O._.l....r._\>......s..\.#.Ctg\|...Y.....y....{g.;}...S..a3.V.[.....H.,...(.9..Q....<E..<N......v..[.a.`...Q..\.u.(._.D.d.#!.,..p>.[..B\6/C\..........STTd={..36....%.xW.U.#M.."...S.....zq3....]....K...$.@.L.......x...v.y.."....<.,\|..\v!.Rj..3..N..3..,.O........W......9$.+.:9.+..d1.I.m..OF..9=?.b....'.."$.a.\@S..eZ.Of.V.~.^.?....[....v.F..)..n...+)W..Rn..h..1.....K.$Zh..~..g..N..'.;a.2E.l.tq.\.....f..../...}..9;o..$.....Y..L.=.C...hSu.f...%...9.t.x.,X.,.PQ1."V-.r.-.H.+.M..H....'x...Yf.^.}..".K.A.....Au.}.~g.s...e5..d.'......m.`.3o.z...)W..e\.y..7...Ip.r2T..$F3].#.....Kj........>JJN.HKz...87.....v..8.K...\..<..h.LQr..dN...2...I.y=#%5.z....I7.S..x..H.o@..9.#..a6d......}.Xd..."...[..Am.?.....-'....~.,..W....K..Iq..G..DBQQ.q..Y

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 28503
Category:	downloaded
Size (bytes):	8702
Entropy (8bit):	7.977891652767339
Encrypted:	false
SSDEEP:	192:3/lrnDwZkhhO12YDBhSGhyOYgEOIxk+VrvZQOJgFKDUs4j:9DDdfO1KYHghVWOGFeUs4j
MD5:	9A680C8C475D8BBA600D4D87B4FA7EE5
SHA1:	032D074B386A4AA2EB03352ABF7F368BBD1470AE
SHA-256:	35DCE7F030321690BDD9E9D021037F9CCF5BC2FA83D11C11E6FEC4AC8CA3A7B2
SHA-512:	00A0685DE36A61C3991A01330E260DB76EE6E5997CDFD5D7F8BCEE0811E920120AFFA5C3CF48ED8D12E80AC6ABF21E9B2B76E6E470BDFA10B80D104705F1A1FF
Malicious:	false
Reputation:	low
URL:	https://www.redditstatic.com/ads/pixel.js
Preview:	...........;ks.....N8.......).8fcc..g.\,%K.(..G.q\|A....F2N...\|.U.A3.........M.$^.."...%.V..........7eO.>}...ci.U...q..y)...x....C.......d..%...T.2..s.>G..V..J.(.#]..A.&.....U.n\|\..V..?5..,..d.N.bK...N.{...xv~=.t5d....".[[.}.FI..i..pW........ $..#c.%.u.[..E...2R.F..1....p..t....6/1..j.;KL...d...#..b..%...]&$_..8[c..m:E..`..c.....0.Ga....$a..".+Yz......q....,..I.+;Y.M.b.%vy.Q4....h..D....\f.&C..u.`....B.}.<........"c.\...y.2..y.R..._-.P.}.=.T=.8O!.3"....(4..q.W.)]cc.H.;q.:. )..k#.l"<.A.U?H.P..r..q.[.5.8a.om..c.(.{1tR.&^....Qd?.5.4.I.C..%..1..M............B..R..v.}...TN....._.....[....qIlWb.J.fu.#.,....`....v.....RJ.9.D.....K.xsO.....\Ga..).p...B{.Th..}.NS.@...Ig.{.V.$.....c....Jk.........`dU......5..y.........K;.~.n.p...Q..K4.\&.M2....d....P.Q1..x..(..k..J..h.Y..jdj....V\|..DXe...l.....8."..n.4....9E&$.RD.U.).....Z.......^a.YRp....E`sj.;urje.....<Y.I.y.B.DM1..s$G.0...OFA."a`.qi.>..K....lL.X`o.F}.$.`ecK........M....4..,1\|/...C....)..e,q@

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	20480
Entropy (8bit):	4.861201309122559
Encrypted:	false
SSDEEP:	384:ilKl+lIluldoFoOobojofoHo8oKoso1odoXoEoOoboIo5o0oAo7o+o6opovosoR2:iEgmMnsvS6aS1nlck2xjWZo9xCPTYulF
MD5:	14EF8306279B4D635557686F14E3CDAE
SHA1:	B63AA8E23F7DB1B09A341B04CBBC21A83385B862
SHA-256:	5CF8B27F16E6F4B8BDB2BD8AF5C63B8767DF04706280F68A86D3C3855E576268
SHA-512:	49C2C0CB916DB3A127EDA535D1241C512D3F46F9ECC3398EC5D7DB5DB4CDA1C1D650299AA38B2D3B1DF4646CCFA5FE1D18F6AD9F3E09B9AA25C6F261E10D6B14
Malicious:	false
Reputation:	low
URL:	https://cdn-cookieyes.com/client_data/9022a6a83360995949fccfed/CnaQzp8F.json
Preview:	[{"targetBanner":1192903,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode IS 'GA'"},{"targetBanner":1192903,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode IS 'CA'"},{"targetBanner":1192903,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode IS 'CO'"},{"targetBanner":1192903,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode IS 'NV'"},{"targetBanner":1192903,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode IS 'VA'"},{"targetBanner":1192904,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode IS 'AL'"},{"targetBanner":1192904,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode IS 'AK'"},{"targetBanner":1192904,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode IS 'AZ'"},{"targetBanner":1192904,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode IS 'AR'"},{"targetBanner":1192904,"condition":"regionName IS 'NA

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1477
Entropy (8bit):	4.111514775950966
Encrypted:	false
SSDEEP:	24:tYU/duwMWmggzSFsj53ZwANEVnXwuZp8cS/dbKWx2LgJaxA6/NXBUk2I58OKIZ0V:n/U3w8Ay8gCGz2kJLiFBbH8OKIyM41
MD5:	511723E172F14E532E560BF8CCD67690
SHA1:	F817308ACD010167B9E548FA7FD887792100164C
SHA-256:	E7C7901F756F168A03A7C0C597518EF504E0A5302A7BB1D18C570E2AF88B801F
SHA-512:	EB6CD758C5692796253CFFC8AC5FBA70A66E1CE43E7298DFC59EF7F729A0FAF220FFB09EDED7AB0D49FE77B44B6AA793D9111B616D91F4707B7FE0B95AAA04DC
Malicious:	false
Reputation:	low
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M10 3H4C3.73478 3 3.48043 3.10536 3.29289 3.29289C3.10536 3.48043 3 3.73478 3 4V10C3 10.2652 3.10536 10.5196 3.29289 10.7071C3.48043 10.8946 3.73478 11 4 11H10C10.2652 11 10.5196 10.8946 10.7071 10.7071C10.8946 10.5196 11 10.2652 11 10V4C11 3.73478 10.8946 3.48043 10.7071 3.29289C10.5196 3.10536 10.2652 3 10 3ZM9 9H5V5H9V9ZM14 11H20C20.2652 11 20.5196 10.8946 20.7071 10.7071C20.8946 10.5196 21 10.2652 21 10V4C21 3.73478 20.8946 3.48043 20.7071 3.29289C20.5196 3.10536 20.2652 3 20 3H14C13.7348 3 13.4804 3.10536 13.2929 3.29289C13.1054 3.48043 13 3.73478 13 4V10C13 10.2652 13.1054 10.5196 13.2929 10.7071C13.4804 10.8946 13.7348 11 14 11ZM15 5H19V9H15V5ZM3 20C3 20.2652 3.10536 20.5196 3.29289 20.7071C3.48043 20.8946 3.73478 21 4 21H10C10.2652 21 10.5196 20.8946 10.7071 20.7071C10.8946 20.5196 11 20.2652 11 20V14C11 13.7348 10.8946 13.4804 10.7071 13.2929C10.5196 13.1054 10.2652 13

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	8250
Entropy (8bit):	3.9988926667633464
Encrypted:	false
SSDEEP:	192:gdpfPso9qDeEb+5GZMFQhNHg5ix21djwe33j:8R9RMEG6FQY5+21Fwk3j
MD5:	6BE2C1115F8B8BEC305DA2438842CE2C
SHA1:	C6DCE0720C1DC307AC3701252AFF132778FF8EFD
SHA-256:	769EDC9AF4CFE8E1E93F339BB7D05F7EC08A8098D81A659D26BBDB70D7F323FA
SHA-512:	26172CE184A7E8D30FB206617BC7250104D28FEB29B61D2C4F5A9D8C31A9BC4923CA33AE43D5CD8E71F26DFB272473446297990CB50A51627F640963E8630AC8
Malicious:	false
Reputation:	low
Preview:	<svg width="82" height="28" viewBox="0 0 82 28" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M5.87988 17.7537V26.7712H0.606445V1.17749H10.5908C12.5127 1.17749 14.2002 1.52905 15.6533 2.23218C17.1182 2.9353 18.2432 3.93726 19.0283 5.23804C19.8135 6.5271 20.2061 7.9978 20.2061 9.65015C20.2061 12.158 19.3447 14.1384 17.6221 15.5916C15.9111 17.033 13.5381 17.7537 10.5029 17.7537H5.87988ZM5.87988 13.4822H10.5908C11.9854 13.4822 13.0459 13.1541 13.7725 12.4978C14.5107 11.8416 14.8799 10.9041 14.8799 9.6853C14.8799 8.4314 14.5107 7.41772 13.7725 6.64429C13.0342 5.87085 12.0146 5.47241 10.7139 5.44897H5.87988V13.4822Z". fill="#667C99"/>. <path d="M43.9365 18.2458C43.7373 20.9998 42.7178 23.1677 40.8779 24.7498C39.0498 26.3318 36.6357 27.1228 33.6357 27.1228C30.3545 27.1228 27.7705 26.0212 25.8838 23.8181C24.0088 21.6033 23.0713 18.5681 23.0713 14.7126V13.1482C23.0713 10.6873 23.5049 8.51929 24.3721 6.64429C25.2393 4.76929 26.4756 3.33374 28.0811 2.33765C29.6982 1.32

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/971878938?random=1711719898597&cv=11&fst=1711719898597&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43r0v9117519134za200&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&hn=www.googleadservices.com&frm=0&tiba=Buy%20Bitcoin%20with%20Credit%20or%20Debit%20Card%20Instantly%20-%20CEX.IO&npa=0&pscdl=noapi&auid=1182918140.1711719899&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	341
Entropy (8bit):	4.8345686799038115
Encrypted:	false
SSDEEP:	6:tnrwdhC/gKumc4slZRIhC2jGwsAGCf+/F8/1mqpBK5lqRIv652:trwdU/gKuihC2jG/nW3BK7DC0
MD5:	4083314AEDD6D439BEE2BB9682066257
SHA1:	2404036F44B279E19AE2CF387724F325FE25FEE5
SHA-256:	69558900819EB6EB54364B7CF06804F520876CB86E3C6667D8BEE6AE7F144594
SHA-512:	67D1DE3DFED4D5CDD616E3A910454701F87C23EEC199C7993FEE5A2906A78ED545768D5896B7E875F1B51B66E2F441D4030F879A1B13C52E60F77B67AF054904
Malicious:	false
Reputation:	low
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M20 4H4C2.897 4 2 4.897 2 6V18C2 19.103 2.897 20 4 20H20C21.103 20 22 19.103 22 18V6C22 4.897 21.103 4 20 4ZM20 6V8H4V6H20ZM4 18V12H20.001L20.002 18H4Z". fill="black"/>. <path d="M6 14H12V16H6V14Z" fill="black"/>.</svg>.

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, Unicode text, UTF-8 text, with very long lines (6405)
Category:	downloaded
Size (bytes):	14620
Entropy (8bit):	5.242889748422928
Encrypted:	false
SSDEEP:	192:uRFDAwWjv6YWivLinbiR3KHj+pYpxK6zlLOxbAz/8aglQOd7HFves8hxOB4vHwgI:K46JSSEp5HFvestgQgOuTA5GGD
MD5:	5E07513DE84F15F93F8CADEACFAD3A28
SHA1:	5BE72E791D9CF231CB37022144332375A4F6D3AB
SHA-256:	80469DD1EE15B47B9FD591D5F09DDE22B0B0158090C597253F3E9082EF64668B
SHA-512:	14339D44C587A56F1A51B76F6BC67DF4602F6A7ACAE460C72000695029C51C474BBBF2CA33DC458BC60188564132AFE3A430D73E0EB8B57105136EB26C4E8E83
Malicious:	false
Reputation:	low
URL:	https://cex.io/single-bundle-widget?forPage=/buy-bitcoins&originator=cex
Preview:	BUNDLE REGISTRATION TEMPLATE-->.<div id="bundle-flow-entry">. <h2 class="single-bundle-title-big">. Buy . <span id="currentCryptoName"></span>. with VISA or Mastercard in . <span id="currentFiatName"></span>. </h2>. <div class="single-bundle-wrapper">. <div class="single-bundle-currency">. <div class="single-bundle-currency-item">. <div class="single-bundle-currency-item-title">. Buy . </div>. <div class="single-bundle-currency-dropdown">. <button id="bundle-symbol1-current-dropdown" class="bundle-symbol-dropdown-btn"></button>. <ul id="bundle-entry-symbol1-placeholder" class="symbol1-list">. </ul>. </div>. </div>. <div class="single-bundle-currency-item">. <div class="single-bundle-currency-item-title">. . For .

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	15398
Entropy (8bit):	3.717867165850376
Encrypted:	false
SSDEEP:	192:bIx/JdzSAxVRWIMRxiw7XbqHDYpiSCdU6mxV827W6gnjCpW8s4xOKJCxmutqdbch:QDpoYeL+fSS
MD5:	22FB9AAD6104F4B4863A83DF645ADAB3
SHA1:	05C19E9C15795B780EED9CEF5E3FD41EFE7F1042
SHA-256:	331A9764D44420CF85E48D64C66CCA4C9DDFB879EA6BDE4A00B02C0E819548BF
SHA-512:	2ED5F0C994721A282A33E62F64A2AAB1DAEB47720F328A1A4788F5ED586CAEC5FB7C4FFBF2D31D0E7FBD438568C914FCF067890065EE9636E7DA96AF5DB7E254
Malicious:	false
Reputation:	low
Preview:	{. "menu": {. "services": {. "title": "Services",. "links": {. "buySellCrypto": {. "title": "Buy & Sell Crypto",. "link": "https://cex.io". },. "buyBitcoins": {. "title": "Buy Bitcoin",. "link": "https://cex.io/buy-bitcoins". },. "buyEthereum": {. "title": "Buy Ethereum",. "link": "https://cex.io/buy-ethereum". },. "btcToUsd": {. "title": "BTC to USD",. "link": "https://cex.io/btc-usd". },. "buyCryptoPaypal": {. "title": "Buy Crypto With Paypal",. "link": "https://cex.io/buy-bitcoin-with-paypal". },. "buyBitcoinBankAccount": {. "title": "Buy Bitcoin With Bank Account",.

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57596), with no line terminators
Category:	downloaded
Size (bytes):	57596
Entropy (8bit):	5.405573199272715
Encrypted:	false
SSDEEP:	1536:buM99dAoLYPNh7S5BTF94zgnSJpksMsNo5/M:buMdAVNiTF94zgnSJpksMp5/M
MD5:	32AD004436155EC972BC50E6238B5B67
SHA1:	9B2CDB645C2FA5B98A9D05DCDCA521FED4A17B7B
SHA-256:	CF7FCC9F75C8717897BFAEF72F303FAB423CE1B70C98512AEB3677E4AF988DEE
SHA-512:	7F3165DD7D6E3136448504918F92B91FC18FAFC5F83F7FEC9D07C8089953D920BF5EA908E4BFCFCAB0824D9BDCC5C9026A6763F3658E5D714A4B2E794F4380CF
Malicious:	false
Reputation:	low
URL:	https://static.ads-twitter.com/uwt.js
Preview:	!function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=globalThis.crypto),!r&&"undefined"!=typeof window&&window.msCrypto&&(r=window.msCrypto),!r&&void 0!==n.g&&n.g.crypto&&(r=n.g.crypto),!r)try{r=n(2480)}catch(t){}var i=function(){if(r){if("function"==typeof r.getRandomValues)try{return r.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof r.randomBytes)try{return r.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")},o=Object.create\|\|function(){function t(){}return function(e){var n;return t.prototype=e,n=new t,t.prototype=null,n}}(),a={},c=a.lib={},u=c.Base={extend:function(t){var e=o(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.137537511266052
Encrypted:	false
SSDEEP:	3:FIi5Y:FW
MD5:	94C9F7C893B8725DA10BABF645024E58
SHA1:	BF7F2F6C4913E9B09CA222990EF550706F504910
SHA-256:	604F82BF1F7F220A102CF8797F54685159720BF324FD687A2D75E60BD649796B
SHA-512:	E25085BB6AAA2B1C17A5A8B84D1BDC5D0715E365E5537CC2028424385E3186626FCF68C6DA199E9E6229356AE5EA4F5D48434D87B881345AD0FEF14404E80991
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmgpSHW7M1fpBIFDVpOMBUSBQ2nPxVC?alt=proto
Preview:	ChIKBw1aTjAVGgAKBw2nPxVCGgA=

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1720
Entropy (8bit):	4.266172667686713
Encrypted:	false
SSDEEP:	48:c2H69HKPLDVXF/9nvQODY+Ih82Kyiuj+KZ7ZBA4x7fQRwus5u:tH6hKP/D9vQOnIh+ySKZ73x74wuEu
MD5:	4CF5D632DA5DF3192DACCB9CBE76686C
SHA1:	D053214C8DE4C452501A00D9ADEB1CA208B96735
SHA-256:	D5DDABB9BD18958B11B852840499A286387E03959475E7AB20348ADA4761F6E5
SHA-512:	D09D04FDD30400574A2AE8AF5B426556C3B56F2F7DAF8F8CDF9BAB69B7CB0440A9DAA8941F1D88FE32188C7E3FA01EFB426C457D5CB8FE2C6970D3443C64F484
Malicious:	false
Reputation:	low
URL:	https://profile.cex.io/static/resources/media/mastercard.svg
Preview:	<svg width="46" height="29" viewBox="0 0 46 29" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M29.596 3.74951H16.4062V25.247H29.596V3.74951Z" fill="#FF5F00"/>. <path d="M17.7663 14.4998C17.7647 12.4298 18.2349 10.3865 19.1414 8.52464C20.048 6.66275 21.367 5.03103 22.9988 3.75297C20.9778 2.16799 18.5506 1.18238 15.9948 0.908799C13.439 0.635215 10.8576 1.08469 8.5457 2.20585C6.23376 3.32701 4.28456 5.07463 2.92086 7.24897C1.55716 9.4233 0.833984 11.9366 0.833984 14.5017C0.833984 17.0668 1.55716 19.5801 2.92086 21.7544C4.28456 23.9288 6.23376 25.6764 8.5457 26.7976C10.8576 27.9187 13.439 28.3682 15.9948 28.0946C18.5506 27.821 20.9778 26.8354 22.9988 25.2504C21.3665 23.972 20.0471 22.3397 19.1406 20.4771C18.234 18.6145 17.7641 16.5705 17.7663 14.4998Z". fill="#EB001B"/>. <path d="M45.1649 14.5003C45.1648 17.0656 44.4415 19.5791 43.0775 21.7535C41.7136 23.9279 39.7641 25.6755 37.4519 26.7965C35.1396 27.9175 32.558 28.3666 30.002 28.0927C27.4461 27.8187 25.0189

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 46460, version 1.0
Category:	downloaded
Size (bytes):	46460
Entropy (8bit):	7.995470392670012
Encrypted:	true
SSDEEP:	768:WTjlLYy5AUVM3OhbsCwJCHfyujSy5igT7mjr101UM47y3GTKu8FxPCXbl6Mjla:CFPuNONwJHujSyXTg101Uu3GhM8A
MD5:	93FE8F3415688D16BB947E2C96EA380E
SHA1:	378BC943C1802F00E734DBE7ABC455AF61485376
SHA-256:	46B518780343F2262E168BEA5146D1FF30A6253191CC61B486657C76A58FB2BB
SHA-512:	5C809F1CC07CC883E1682325E7A5DFEE9BF3FE796AE8C8C6232879DD46F070236EA333692EC56032917196119DC123D870ED90A2F62B61F938CAB1901EB802DC
Malicious:	false
Reputation:	low
URL:	https://profile.cex.io/static/resources/fonts/OpenSans-Bold.woff2
Preview:	wOF2.......\|.......8............................?FFTM.... ....`..n....`.....0..X..X..6.$..$. ........x[Mj..n...P........q.L.-..L.....q..y.b..U..........%.%i.....:..P3.....L.9.o`.%.*.3S.....D...J.o...!.%V.{....H)a.s.9.DfB.q.D.m.[...Ai.t../.R..S.-.....,N9KWH......."+E..../..m7.)......?....p....-....y../.:,..<%a...7.U.O...NI..r.FP{R...`.8..!]<.\|;.?I+...]=..W7m.y..y.Q%..0e..~C.E.h...(../2`.1L...[.....r..&...cQj.5.U..O.J.S:..~w-..~5..J^.2..[.F.../...y..z..a.\|...V...T.d....K....?...}.$...k,5..MQq,...PK(AC.A.r,Zj....f.%f.E-%...=..=d.C.!.....j..X.......%.E0....;.k..H"u.o....M..H.@Z...3.h.$z.Y/H0$...D0..N.D.puw.........j..U......C......!..b.\Ii...V..........`..E......DN.P....gqfr.S..E.2g..9..2..y.z....r.r...9H......q.,....4.Pw.O..k;.../.C.J...:.:G...u7.tW....\|..tA0......Y..0.O..N1&.K..sj.K.J-...2<..n2NJ.-..R.Q...HI6#.v...R.p\..i.]....om.D00.5....P'..?@?.+..HG.W.X...-z...<....J....2.............M......8Q..<..I.}.~.L.....s{..P..>.......>.l."..,....Y=

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	774
Entropy (8bit):	4.348141739202541
Encrypted:	false
SSDEEP:	24:tVu45uYFQcwqemUhfzENuSld9czGHkwltW:RnFQc/qf4TlAzl
MD5:	49EA2EF00B5CD1D19E596EF9BC1CBA76
SHA1:	E292E281DD1191C5B5C372D3FB9D7D5F8C2DA067
SHA-256:	AC3D0552371D219F6FF140401F026BEB83FCFEAE5B05A3FDCC7E32B789BF7EA0
SHA-512:	68BC71296C35C678A4FEB91BB774E7B56777B3909EA4A3F1198B3623CED979ECD3C0D4C12EB79BD975236673A9AF023DDA3CDD88D03FBBC4F796985BE542A75A
Malicious:	false
Reputation:	low
Preview:	<svg width="16" height="29" viewBox="0 0 16 29" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M15.3975 0.00603394L11.5598 0C7.24832 0 4.46205 2.80125 4.46205 7.13694V10.4275H0.603437C0.270007 10.4275 0 10.6924 0 11.0192V15.7869C0 16.1136 0.270315 16.3782 0.603437 16.3782H4.46205V28.4087C4.46205 28.7354 4.73205 29 5.06548 29H10.0999C10.4333 29 10.7033 28.7351 10.7033 28.4087V16.3782H15.2149C15.5483 16.3782 15.8184 16.1136 15.8184 15.7869L15.8202 11.0192C15.8202 10.8623 15.7565 10.712 15.6435 10.601C15.5305 10.49 15.3766 10.4275 15.2165 10.4275H10.7033V7.63806C10.7033 6.29732 11.0293 5.61669 12.8116 5.61669L15.3969 5.61578C15.73 5.61578 16 5.35089 16 5.02446V0.59736C16 0.271225 15.7303 0.00663733 15.3975 0.00603394Z". fill="#0C87F2"/>.</svg>.

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	47
Entropy (8bit):	4.110454745700462
Encrypted:	false
SSDEEP:	3:YWR4bliMW/lLan:YWybliX/lLa
MD5:	18E5F72F59FCC9DA001D878C1535E7F9
SHA1:	52C62D64AFF3F89F5C27F6E48B728DB1C052734D
SHA-256:	6756169482BB0E6574070224224E145C838B9E65D28026666A41F14520EDB4ED
SHA-512:	FE390526B575C3B908C69360767A543269D244BD45F7C6CE1932DC57CE3EC099294C4F5A6C5F495023DE2F092338C4DF7596A05348DB094341E763032D3A79D7
Malicious:	false
Reputation:	low
Preview:	{"status":"ok","data":{"isUserLoggedIn":false}}

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1604
Entropy (8bit):	4.179763477297218
Encrypted:	false
SSDEEP:	48:n/2oDilSwI7CR8OB3E+ebL+sMFDjqlLqoGh58UTCOk9kX:nUl9IF63Pev+s4DjqsoGhXGOk9kX
MD5:	16F714734F5D26C5615C7BE427CFB01A
SHA1:	316FBEAFFC3ED32E0F5013F1DEE67DD748F13B2A
SHA-256:	934021C6D7EE6C328709453C189DDF6B27AE90BA537E585E175A603E5A8576BE
SHA-512:	55355B24A971FA7B15624628F17937A89DB8340259F173721DEE3D4EC3B7C2BB9EC99E84E432C33435B8AAC799C9C23C7DC6CDF623EC039599CDC0FDC4890E3F
Malicious:	false
Reputation:	low
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M16.6002 12.0157C16.4038 12.3148 16.179 12.5935 15.9297 12.848C16.6217 13.1074 17.2475 13.5021 17.7749 14H18C19.6569 14 21 15.3431 21 17V18H23V17C23 14.2386 20.7614 12 18 12H17C16.8654 12 16.7321 12.0053 16.6002 12.0157ZM17.1325 10.9809C17.2533 10.9935 17.3759 11 17.5 11C19.433 11 21 9.433 21 7.5C21 5.567 19.433 4 17.5 4C16.7188 4 15.9975 4.25591 15.4151 4.68846C15.9441 5.10801 16.3941 5.62286 16.7391 6.20705C16.9622 6.07548 17.2223 6 17.5 6C18.3284 6 19 6.67157 19 7.5C19 8.32843 18.3284 9 17.5 9C17.5 9.69836 17.3698 10.3663 17.1325 10.9809ZM8.58489 4.68846C8.00253 4.25591 7.28115 4 6.5 4C4.567 4 3 5.567 3 7.5C3 9.433 4.567 11 6.5 11C6.62413 11 6.74674 10.9935 6.86753 10.9809C6.63016 10.3663 6.5 9.69836 6.5 9C5.67157 9 5 8.32843 5 7.5C5 6.67157 5.67157 6 6.5 6C6.77773 6 7.03783 6.07548 7.26091 6.20705C7.60594 5.62286 8.05591 5.10801 8.58489 4.

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	749
Entropy (8bit):	4.3067657385163525
Encrypted:	false
SSDEEP:	12:trwdU/gKui2et9v5k0LTjFXT60vRPCIciHcbo7EuSpZQRqbBc2tYYSnD0yqx7T2I:tYU/dulcv6qI0pPCIl8bo7EvpZuf2tYi
MD5:	988A7769407D206155FE2B8D5122AC4F
SHA1:	E5D307170A4F5F7C1473D26AE305382376A64387
SHA-256:	53B1B7D35803E23B3BF3A80265710247CA66EF05701E97C634FB05778FBFE155
SHA-512:	9290E8A1F70DF64033946456E0353740AB9938686BF31E1A96C4A5469991DF7A920D37C7442AC5CE7D48F45F7426FF53A174866FFE79D66C3B86862AD698668A
Malicious:	false
Reputation:	low
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M20.9947 6.9031C20.9786 6.73477 20.9199 6.57329 20.8242 6.43387C20.7285 6.29445 20.599 6.18165 20.4477 6.1061L12.4747 2.1061C12.336 2.03604 12.1828 1.99937 12.0274 1.99903C11.872 1.99868 11.7187 2.03466 11.5797 2.1041L3.55267 6.1041C3.25567 6.2541 3.05067 6.5411 3.00867 6.8711C2.99567 6.9681 1.86367 16.6121 11.5497 21.8791C11.6986 21.9603 11.8657 22.0021 12.0353 22.0005C12.2049 21.999 12.3713 21.9541 12.5187 21.8701C21.8257 16.6111 21.0327 7.2971 20.9947 6.9031ZM12.0177 19.8471C5.15767 15.8371 4.87767 9.4951 4.95467 7.6421L12.0257 4.1191L19.0237 7.6301C19.0287 9.5001 18.5427 15.8731 12.0177 19.8471Z". fill="black"/>.</svg>.

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	9013
Entropy (8bit):	5.232929931928589
Encrypted:	false
SSDEEP:	192:rqpyedLEYmZEVCjGYLKp2PrKctYqzIyFa2gLTG/P45tJB9zlH:yyBe9RH
MD5:	7444228834858B44FC7BBA8499F650E9
SHA1:	FBBB314F36A06255CE244010E410DC828EE6B609
SHA-256:	2D03AF57005E8F54166D862A08E5CAEAA0E1F7EDC6B36DF970B2D66D8058449E
SHA-512:	9F51017207C8B7352241563B3160C6360A27F79B1AE72E9CD5177F76E6446EB1BC2995609E84490705FCF1EB9E163108F8BA23B382649F68D2CB31B394E9C0C9
Malicious:	false
Reputation:	low
URL:	https://x.adroll.com/igs?advertisable=7UKK4UJQK5H4LI4OCBFPWX&fpc=9c2a3d2e2673c4382dbf8e1b819a358e
Preview:	[{"owner":"https://x.adroll.com","trustedBiddingSignalsURL":"https://x.adroll.com/kv/v1/getvalues","name":"7UKK4UJQK5H4LI4OCBFPWX","biddingLogicURL":"https://x.adroll.com/bid/bidding-logic.js","biddingWasmHelperURL":"https://x.adroll.com/bid/bidding-logic.wasm","trustedBiddingSignalsKeys":["9c2a3d2e2673c4382dbf8e1b819a358e"],"updateURL":"https://x.adroll.com/update/7UKK4UJQK5H4LI4OCBFPWX?p=ApwqPS4mc8Q4Lb-OG4GaNY4BAGalMCsA_LyLDcz8vIsNzA","ads":[{"renderUrl":"https://x.adroll.com/ads/gGkP7yKGej","metadata":"I1E_Y300x250"},{"renderUrl":"https://x.adroll.com/ads/4eaPYQ51_w","metadata":"I1E_Y300x250"},{"renderUrl":"https://x.adroll.com/ads/zXlEie8ghW","metadata":"I1E_Y160x600"},{"renderUrl":"https://x.adroll.com/ads/jvuqd4NA98","metadata":"I1E_Y160x600"},{"renderUrl":"https://x.adroll.com/ads/EObh8in-eD","metadata":"I1E_Y300x600"},{"renderUrl":"https://x.adroll.com/ads/AKBXzbrrMq","metadata":"I1E_Y300x600"},{"renderUrl":"https://x.adroll.com/ads/2aT-qbTmPn","metadata":"I1E_Y320x50"},{"rende

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	317148
Entropy (8bit):	5.278381901376652
Encrypted:	false
SSDEEP:	3072:4KvFpkzzdfh+Z+2+QsbB0zN9M20oq6GLolWR243DOK2CPtbqoNFArfNJtBoWb0+:LFp28Z+VlBEBlWT3DOKmcuD
MD5:	3461AD3E8457CE97D6906F71E7D74465
SHA1:	44A0B733FCA89952D03BD5405D43334251E8CC90
SHA-256:	80E964D3962C556FD2D9F807E1D83711430CF66DE6FAD499045A524FC61D7425
SHA-512:	9BB8B81BEDB5B4E2C64F0C70F77B36C73FBE5EB15A9687BCEBF850B4B4B751C693A94F37A3440DE85BB17E2759D28C2900D19D427331488EA619F3B3132594A2
Malicious:	false
Reputation:	low
URL:	https://static.cex.io/landings/SeoBuyBitcoinForUsd.js?v=1.8.83
Preview:	!function(e){function t(t){for(var r,a,l=t[0],u=t[1],s=t[2],f=0,d=[];f<l.length;f++)a=l[f],Object.prototype.hasOwnProperty.call(i,a)&&i[a]&&d.push(i[a][0]),i[a]=0;for(r in u)Object.prototype.hasOwnProperty.call(u,r)&&(e[r]=u[r]);for(c&&c(t);d.length;)d.shift()();return o.push.apply(o,s\|\|[]),n()}function n(){for(var e,t=0;t<o.length;t++){for(var n=o[t],r=!0,l=1;l<n.length;l++){var u=n[l];0!==i[u]&&(r=!1)}r&&(o.splice(t--,1),e=a(a.s=n[0]))}return e}var r={},i={85:0},o=[];function a(t){if(r[t])return r[t].exports;var n=r[t]={i:t,l:!1,exports:{}};return e[t].call(n.exports,n,n.exports,a),n.l=!0,n.exports}a.m=e,a.c=r,a.d=function(e,t,n){a.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},a.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},a.t=function(e,t){if(1&t&&(e=a(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	371
Entropy (8bit):	4.786989145390087
Encrypted:	false
SSDEEP:	6:tnrwdhC/gKumc4slZRIh0GaXK+RXpc2JXZVx/GCf+0l3MFrJMRzeU1KK52:trwdU/gKuiaGaE23S0lIQ6U1KK0
MD5:	1118332E807A42EA3B2B833A685D6173
SHA1:	D201ECCC95B256311634325F0528F9E76F7C81B3
SHA-256:	91ACA37240222E2D0DF0C815FB0A4BB5FF7777828A558A65F4AA535E7B510A7E
SHA-512:	354C2FF869CD8858E0BBA306D769615033F91A097D75D9089E8395ECD07583552C9E78846168B67E4A3D1BE11A3FED5B93BAB43201F0531671B92AF36E3D0ECC
Malicious:	false
Reputation:	low
URL:	https://profile.cex.io/static/resources/media/briefcase.svg
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M20 6H17V4C17 2.897 16.103 2 15 2H9C7.897 2 7 2.897 7 4V6H4C2.897 6 2 6.897 2 8V18C2 19.103 2.897 20 4 20H20C21.103 20 22 19.103 22 18V8C22 6.897 21.103 6 20 6ZM15 4V6H9V4H15ZM8 8H20V11H4V8H8ZM4 18V13H10V15H14V13H20L20.001 18H4Z". fill="black"/>.</svg>.

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 494556
Category:	downloaded
Size (bytes):	151135
Entropy (8bit):	7.998085977627993
Encrypted:	true
SSDEEP:	3072:3rmzC2sibD4A3GRJg/ksN1YHwwwHjnRhDtGTE6A8v:3fQbd3G48sTcCnjDI5
MD5:	AE95E8CFE55350008DCD098EBBE4CEE3
SHA1:	1446A444704821E67781841EAD64D3366DF98A9D
SHA-256:	0E4616E2103C63786D14D952BB81780FCAAD566EE363E6630402B0C40D4CFE98
SHA-512:	D0A29022111B96AAD6AD53DBBCB388D058AF8D499B2FA1041A65D170DE01AB78B2CF79E8F1EA95D5E297BEA2C47747E823D82B23CCD1378B0EAC4A5A1C1CEBD2
Malicious:	false
Reputation:	low
URL:	https://js.intercomcdn.com/vendor-modern.9921b73c.js
Preview:	...........i{.8.(....6'.!#Z..2...T.v.gb...**=..I,S.BR^.....9X..r......X.....8...oo....0..(e[A4.....q.....Q)c[.,..dw..,.......x...#m..x}....g[...?s..#/...i......l...Q.q<......Z..Vs.Lgf...........c2;...}.h,.oY..3.{9......&A.>&.%....p.......a?.z.9.........<>.o.Xv.....O;.-...1b..p..a...V.qP...3#...^..A'.B.N..........=.^.^.X...2..HS.Y.lg'l..I......d..Zc..}..N...=vey>z.:n........ ...1.W...Ys<..0g/3.......e.$.t"k.]....+j.8..<=q..z]...U..z.0...`..d....u....g...V......^%...Q.$.U....9...k..8Y3].Af..&.....z...\|i..o....Z`VL.>...0..y..V+c..F...\|.E.hv..3...;2Rb........B."<......Q...&.....s..y>.K.b..Y.p.B@.8y....f.!..^..y...5.I...V.e.x..8.._..c.JNlS.2kNY.2...-3f...-.@c..AX.a.g....a.....@......5......Y....sEM.V.5q.A.1\Nar-sl.i..c...E.(.ys.U....c..........K....K. .0wNb.3..`6.......S...p<;..1..._;]0.?@....R.l.Y....)...<.E.....I...&.C.._...h.b...&C...W.m7.n1..J~.3.....8K....Q.r... .$!2K..X.F........h.jJ.H..P#0..........\....).@..".1......C.v.N

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	443
Entropy (8bit):	4.80128738945247
Encrypted:	false
SSDEEP:	12:trwdU/gKui+7D7tEXAzh/e0pVZQehWhrT/NzNfuzQK0:tYU/duphEwzhm0p7ZYB10zt0
MD5:	2CD1BD8E027D75F5A080FAED2A847E4D
SHA1:	75C94AC0CDBB1F6C1D7EF2B8D203015434518858
SHA-256:	CB3089825EC65A6505826566F9378D3146731539E4DA60A2A73393AE6816C5F1
SHA-512:	682098514305E2934E12024806DEE8C2B9054C90FCF0ADC02016AD96669D51D8A971BC73F3FACF7F114C8A0C8A83C63E245A5BF560BEF41E5894F2FC9ABAB656
Malicious:	false
Reputation:	low
URL:	https://profile.cex.io/static/resources/media/chip.svg
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M9 9H15V15H9V9Z" fill="black"/>. <path d="M20 6C20 4.897 19.103 4 18 4H17V2H15V4H13V2H11V4H9V2H7V4H6C4.897 4 4 4.897 4 6V7H2V9H4V11H2V13H4V15H2V17H4V18C4 19.103 4.897 20 6 20H7V22H9V20H11V22H13V20H15V22H17V20H18C19.103 20 20 19.103 20 18V17H22V15H20V13H22V11H20V9H22V7H20V6ZM6 18V6H18L18.002 18H6Z". fill="black"/>.</svg>.

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 6952
Category:	downloaded
Size (bytes):	2705
Entropy (8bit):	7.913050528414669
Encrypted:	false
SSDEEP:	48:XoX6QI4ZdaVnAgj6AYLT+d+ifXCB/XkpJ+hHpoHzrCdCzZw+vmI1uwkl5Tv5v:DW+AedWidd/u/0ehHpYzrFmouwk/R
MD5:	752A99D045D738F9D27C3373D4D0E125
SHA1:	BABC5911D4B1B9EF5611161A3FD20A52B4D97305
SHA-256:	DB6A3BBB27790A87172209A4DC1F63D3E125BD2CDEA526C9F296B7F9E94B2C93
SHA-512:	1A010FA79F521DB228A301181AE7F16D40F80BA0CE6093A9A3D2E3278AAA58400349DDFF02BF177C03AA5A117367ED178630F15AEA68A73D482533F0843B4933
Malicious:	false
Reputation:	low
URL:	https://widget.intercom.io/widget/q22gd2x3
Preview:	...........Y.s.:..+.w'...IJK...R........i...V..c..J..$.}?..IZ.30..G...d..Y.H.c.^..aP.y.{..J:......2..).....$....C..2R.$.!...IJ.(e.z.6(-F...%....7.d6.X0H..l8..%S...~.M'.P.A"..b..`ne<Z...a.K..+<..Kk-A..X<.th)...;...tX.J.E.)...........k..s......^...G......Ex...<....)5c..e...G./O.i.N.>.....pUy.$M.O..-...ED.^W&....+.. .D.....#.S1.......G..3..p.......r}V..["K;..[.?c#...4\|.....^d..d.._.4o.^.....sX.....e.d.9K..J..i.ei.f..t......W$...Y.#.\|.R!.+.PA.)...)......tkn.)b.S...`."...L...[#A..K.(...K..-.2.5j.%....m.f..X.....DD..5Xl..\|n.Qmt.....oi..b<."._6..tq..N-.4)i.C........F.^.`.\)......8..{.7.je..."......h.o.....+...2/.$...l.........mW.....u.bs..T..._H......VS7B....l.)Y..v.../^....6..R.s.V.y..F.p#..{..IA.t.JP..k..y`...+..c....".~G.b..?....\|f.......m;W...o\x.A._.p..w...Az...=Qj.........J...j..L......6h.......dB.?&.7KT.z..f..?n>.G..B......4.LN......D.Z...K........p.dL.5..1...ik....l.G:......"..j4.<....JB......rC.b..H.Y.....1..G....n.T.....2..2

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2291), with no line terminators
Category:	downloaded
Size (bytes):	2291
Entropy (8bit):	5.84087534602212
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08w3K38UUIt4hG6:wsbSUtJfxrqLWWWdV6j183K3C
MD5:	88CAF2E05E2AE2DF132DDB586A1122BA
SHA1:	4565B9E80C827DB593158B46907525B99BE39D09
SHA-256:	D8CA05BEB0FE642771FD24EA3A89A5D664FC303199F28DC5529B42E3B8E257B2
SHA-512:	A253E15B965B8EF5F3AEF4125FCDC1A2ADAF8160668573C35B0AACBD48E7F25D0DDCFBC8753D86D38AD054CD08F71359380CCA4C1AF2AAA5C91F3E8FACE2279A
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/971878938/?random=1711719898597&cv=11&fst=1711719898597&bg=ffffff&guid=ON&async=1&gtm=45be43r0v9117519134za200&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&hn=www.googleadservices.com&frm=0&tiba=Buy%20Bitcoin%20with%20Credit%20or%20Debit%20Card%20Instantly%20-%20CEX.IO&npa=0&pscdl=noapi&auid=1182918140.1711719899&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	144
Entropy (8bit):	4.54178832719941
Encrypted:	false
SSDEEP:	3:YAv+e9BAJ6YSm7XJHIzRNg+wjNXWRwFH1j66qVVJMdMQUWKLb+AHfgq+WRHYn:YAme2J6YBDJHIlNgDXWqH1jwVJMyb/4l
MD5:	F447C440ABF2B8AF203938329FE494F8
SHA1:	3E071AE6400D84FB2EBE38EAEE60E1161D9F4556
SHA-256:	11BBA994684E05187E8CB291F03254CE7810FB3EABBC900299F078F2E584550F
SHA-512:	BC05CEC72D8512A1CE483156BDCD963199EBFFD224D991AABAD638D3FA075CD7C96E20B20B85C7224925B8263143772174B3BC824EA258C0B196C83E03007C9F
Malicious:	false
Reputation:	low
Preview:	{"errors":[{"code":"media_type_not_acceptable","message":"The Accept header should send a media type of application/json"}],"type":"error.list"}

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	7579
Entropy (8bit):	3.2946184785903534
Encrypted:	false
SSDEEP:	192:PymZpA7ZiuVM903JSZqiUcviSC3HNRDRnqkueUCyOxWPd16ScmEY6jGaXCyL:q3dJ9F
MD5:	41866B73F61B73A1E5EE337464B1C005
SHA1:	363DA5488738B233FB9E779014E3D9A2489B39F7
SHA-256:	1B7637E0D7D681F6FBB52573325DBBF3E4ED406AA5996947F38551E3AB9EB7F3
SHA-512:	6D01B0B8CE28939EE5FD2826D05CA45636A874A58F287283DBC902159B544D54F2A1FB79C36327B11836E21972AA8BC64E35ED1733B444221A8968358D91F778
Malicious:	false
Reputation:	low
Preview:	{. "companyLogo": {. "title": "CEX.IO",. "link": "https://cex.io/",. "icon": "cex-full-logo",. "iconLegacy": "cexFullLogo",. "width": 139,. "height": 40. },. "menu": {. "products": {. "title": "Products",. "icon": "grid",. "columns": {. "traders": {. "title": "For Traders",. "links": {. "exchange": {. "icon": "exchange",. "iconLegacy": "exchange",. "title": "Spot Trading",. "desc": "Trade crypto with deep liquidity, advanced charts, stop orders.",. "link": "https://trade.cex.io/spot?source=cexplus-products-header". },. "api": {. "icon": "chip",. "iconLegacy": "chip",.

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	719931
Entropy (8bit):	5.27144825042923
Encrypted:	false
SSDEEP:	12288:Sp9gYp/kpHpWVoeQps8kOAoJxpk/jGxpygYp1JDJv6p1XSA/G8pqUpi3pqMff:Sp9gYpcpHpWVoeQpszoJxpajGxpygYpd
MD5:	24F2039AC521BE0DEF747F7E4E239131
SHA1:	EF1B6B26F7AB7ED4065D8E90600DB72DD937AED5
SHA-256:	10E0BF4563CE75DCB9783437EB3D123C4B0B396D220C9E2358F555E354D3EB38
SHA-512:	F5BAFDAC290FF5D73023A7A4655BA8DEFBC775AC920865BE57BC21969FED8AD636D288932CAA6E2FB020D3C55128FE9151500AD1BFA61C01D0A0984CDA0F6AC6
Malicious:	false
Reputation:	low
URL:	https://static.cex.io/landings/ui-components.js?v=1.8.83
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[0],{1069:function(e,t,r){var n;"undefined"!=typeof self&&self,e.exports=(n=r(0),function(){var e={81486:function(e,t,r){"use strict";r.d(t,{cW:function(){return j},SH:function(){return O},ZP:function(){return E}});var n=r(84639),o=r.n(n),i=r(45697),a=r.n(i),c=r(65490),u=r(49214),l=r(34925),s=r(69642),f=["name","iconUrl","width","height"];function p(){return(p=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e}).apply(this,arguments)}function d(e,t){return function(e){if(Array.isArray(e))return e}(e)\|\|function(e,t){var r=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@iterator"];if(null!=r){var n,o,i,a,c=[],u=!0,l=!1;try{if(i=(r=r.call(e)).next,0===t){if(Object(r)!==r)return;u=!1}else for(;!(u=(n=i.call(r)).done)&&(c.push(n.value),c.length!==t);u=!0);}catch(e){l=!0,o=e}finally{try{if(!u&&n

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 5578
Category:	downloaded
Size (bytes):	1926
Entropy (8bit):	7.909096378466677
Encrypted:	false
SSDEEP:	48:XuJAg7KeI9yYnhcxy2H2qjGa4hxjLK/SZAgJEcgmW1X9q:EAg7KeQfnqJ2SG/nKKZgxmQq
MD5:	C8D15D2B5331FE0E09A3F74E8AA0779B
SHA1:	4BE85EE0C0E54662D1D6C6664E59488B1CC3F307
SHA-256:	1D37812BCEE2778DE26ACC29FC11210BB8AFABB357A6324A174DE5B1FE237861
SHA-512:	CEA62344BA94C8AA64A81BC3BAB2F3BEA78283A353CA9F85F6219FF5FC9EF956012250B157CEB066B7378E75022E2FFC359AA82FA12D99C03DDED8B4438EF7CA
Malicious:	false
Reputation:	low
URL:	https://js.intercomcdn.com/launcher-discovery-modern.374890f2.js
Preview:	...........Xms.6..+...!S..^,[...M;.\2.......I.I..@K...~..U.c;...6....].>...b..i(....l..w[..Ye8.....-M%.!Kn>..."_.\|.h.Y......\|.....x~.[.Q$..p.Em$........-.z..4........~.'..9....\.k1..y6J.q~9._......6.juq5....W..dj.!K.4.K.C...ez./..N.......\|..G.F..'.i..~v......o..M2....\|.G..p..t./.}..\0.gL#.....gy.9!.a.D..n.z.-....A.....>^....m$k.Jg....N...[.......@.n).+..0&.,.J.c....'a..&.}.......+.#...#...z.gb..iJ..^.8.......!6...uFR......F%~.@.8...G4.......a(....D.4.NDb\|....L.NfT..c.....\|<h...K...b.IItn,s....o.Od...(.....H.:......J...!.......t.......(.!z....tm8....).q.=.."2..:&.@.r".I...l.@... &."..\|S..4........TW.f.m.WZR( .+X..F...=.....BaV.?. ..?.....8...O...,x...cU.%....i8..;.#.c/.C.,.. ..o..?.v..{.....c..@.....kB.S.i...Yt0.^.4..t..\.$c)Ie.;%.C......g.zFRu..Edy.hdx......W.&..u.....L.,m.,.L.%.w.+:z......\.4.}E..Z..'..v.]....!.....G...,.....7......o..A...\H.^...d\|...X.p.1.K....%m.U.Bw9z\.g..9...p..1.3.F.D*-.h...:HA.}O#...m.J.4..}b.,..eS.JF..:o..}.].D.!.

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	644
Entropy (8bit):	4.357439504074708
Encrypted:	false
SSDEEP:	12:trwdU/gKuivgRbicypWRyU7+4G/VENjv4AYCLjMYK0:tYU/duAgpPypWRr7+4Gt2vdYCLYl0
MD5:	DD2F619F6FFEFC6E65665A8A8C1E73F9
SHA1:	42AA9EED1BE83D5AD40EED99FE948FB70CD35C48
SHA-256:	3547DC2739CA2993E6968F847BE891D6921B4F033E06276668BC7FB751B76862
SHA-512:	0A26931F548EFDD0E0E8EB92DA965210DF36CD7E77A922855E93E32C9E027B7273F9A5B828678356900FE77622AF1975DACDB0881A46B5F2E392F853392655D8
Malicious:	false
Reputation:	low
URL:	https://profile.cex.io/static/resources/media/data.svg
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M20 17V7C20 4.832 16.337 3 12 3C7.663 3 4 4.832 4 7V17C4 19.168 7.663 21 12 21C16.337 21 20 19.168 20 17ZM12 5C15.691 5 17.931 6.507 18 6.994C17.931 7.493 15.691 9 12 9C8.309 9 6.069 7.493 6 7.006C6.069 6.507 8.309 5 12 5ZM6 9.607C7.479 10.454 9.637 11 12 11C14.363 11 16.521 10.454 18 9.607V11.994C17.931 12.493 15.691 14 12 14C8.309 14 6.069 12.493 6 12V9.607ZM6 17V14.607C7.479 15.454 9.637 16 12 16C14.363 16 16.521 15.454 18 14.607V16.994C17.931 17.493 15.691 19 12 19C8.309 19 6.069 17.493 6 17Z". fill="black"/>.</svg>.

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.7092327439724695
Encrypted:	false
SSDEEP:	3:YTyLV/VffcB+xNVcSLQzRE9LduUBjd4:YWLV94iDLQmpddB4
MD5:	5143820DAEB644938735D6B28C0059E7
SHA1:	22316BB57B4FA755662FD6F5FB7F749B21AC32A1
SHA-256:	740BB313221BDA5543B6FBE0BCE3DD276CC70C4FD9AA0BAE9D46B149406BECF5
SHA-512:	ABABBC2935D02EF31FA6FD14F56CF781BA8015A0DBCF8AB05CC7CFECBCABCA4B2B4E37B5B0BBE0341948DA7902613F4BC7EEA1C1FB8E9D142B3EC1D61084FBA6
Malicious:	false
Reputation:	low
URL:	https://www.redditstatic.com/ads/conversions-config/v1/pixel/config/t2_fngyx_telemetry
Preview:	{"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	664
Entropy (8bit):	4.724127219942954
Encrypted:	false
SSDEEP:	12:tr2btKuNJf0lX/LxQJV7PEcqKf+zbhVLmtALRtwXgKBzZQZmdEKiHvOPsKx:tCbcuN9M/LxdqFOLridl1EKfXx
MD5:	1E51912D353735E78D1F1503BF4B92BF
SHA1:	EBFF9E3AB5C2B7B532A50780CB54A16651966A05
SHA-256:	9C03093325FB5C2D4D342E993A8BD77E5A8B2E6D8D8CF11A7A9542538B895B07
SHA-512:	F7814D8313BD6B9E154F7F46E30FA3818701F035FB78317EB3993A4490EDB7FA6D2F282BBA31C29F13090C79C4ABB9679354EC5F5C6F4B507D0BB985B4B9BB96
Malicious:	false
Reputation:	low
Preview:	<svg width="48" height="48" viewBox="0.06 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">. <g clip-path="url(#clip0)">. <path d="M12.0664 24C18.6938 24 24.0664 18.6274 24.0664 12C24.0664 5.37258 18.6938 0 12.0664 0C5.43899 0 0.0664062 5.37258 0.0664062 12C0.0664062 18.6274 5.43899 24 12.0664 24Z". fill="#FFDA44"/>. <path d="M0.0664062 12C0.0664062 5.37262 5.43903 0 12.0664 0C18.6938 0 24.0664 5.37262 24.0664 12". fill="#338AF3"/>. </g>. <defs>. <clipPath id="clip0">. <rect width="24" height="24" fill="white" transform="translate(0.0664062)"/>. </clipPath>. </defs>.</svg>.

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	686
Entropy (8bit):	4.412552364777488
Encrypted:	false
SSDEEP:	12:trwdU/gKuipQYjNmVcR+HdBbbQTBGc2RzdpG+NMFshly4jdbYpXMvfEK0:tYU/duQ9OcR+DbCizCm7yidoXMX50
MD5:	DEA02086B3DFD317BA00F14D9A32AD04
SHA1:	FBD3EB614818291A4132BC65245C37589C0C63D8
SHA-256:	D757868DA0C469C306117811831AB2B5C06D4FB46E5998CFECD425CB26F6D108
SHA-512:	4D8F4EC2F4CCF04840E9F17A6B4F10EC2DF08384F6DF313BDA617C8EB07B11BFADC5DDD0EEFF3AD8F3F2B144A7ED7D9B4FBBBDC8DEB154C079750BBCD2320688
Malicious:	false
Reputation:	low
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M8 22C7.86864 22.0001 7.73855 21.9744 7.61716 21.9241C7.49578 21.8739 7.38548 21.8003 7.2926 21.7074C7.19971 21.6145 7.12606 21.5042 7.07585 21.3828C7.02564 21.2615 6.99987 21.1314 7 21V17H4C2.897 17 2 16.103 2 15V6C2 4.897 2.897 4 4 4H20C21.103 4 22 4.897 22 6V15C22 16.103 21.103 17 20 17H13.414L8.707 21.707C8.51951 21.8946 8.26519 21.9999 8 22ZM4 6V15H8C8.26522 15 8.51957 15.1054 8.70711 15.2929C8.89464 15.4804 9 15.7348 9 16V18.586L12.293 15.293C12.3857 15.2 12.4959 15.1262 12.6172 15.0759C12.7386 15.0256 12.8687 14.9998 13 15H20V6H4Z". fill="black"/>.</svg>.

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	17391
Entropy (8bit):	4.791019793044514
Encrypted:	false
SSDEEP:	384:ZQFW6hTHjGIw3orWrg6RaSn65rm6/6tMwPNZesz5J3+h1zTTKQ2969VRYPkpUeK0:ZQFWSTDGIw3CW10HNPytMwPDesz5J3+j
MD5:	B412F3CEBB5A114B1A84AAEF5FC59B2F
SHA1:	5A17640585E76AFF3E7346C162215C0FCA78FA28
SHA-256:	EC5D400FE973D37575134B1BDE1AAE0AF3F5EA5E3F46A86381342417FA71799B
SHA-512:	1488AA1CE7C849A3387A6566B579012FF7061041CC380C938596FD27E18CFAFA7B0A3EEB924CC77E4185C2B8CA3B296C61887B5393FF0393E5FBFE34397AB0E0
Malicious:	false
Reputation:	low
URL:	https://cdn-cookieyes.com/client_data/9022a6a83360995949fccfed/audit-table/rCg5unVB.json
Preview:	{"cookies":{"ls.session":{"cookie_id":"ls.session","duration":"7 days","description":"<p>This cookie is needed to authorize users.</p>"},"gtm_id":{"cookie_id":"gtm_id","duration":"1 year","description":"<table>\n<tbody>\n<tr>\n<td>\n<p>Tracks how to interact with Intercom websites and ensures you are seeing page states that are relevant to your experience..<br />https://www.intercom.com/legal/cookie-policy</p>\n</td>\n</tr>\n</tbody>\n</table>"},"intercom-id-":{"cookie_id":"intercom-id-","duration":"8 months 26 days 1 hour","description":"Intercom sets this cookie that allows visitors to see any conversations they've had on Intercom websites."},"intercom-session-":{"cookie_id":"intercom-session-","duration":"7 days","description":"Intercom sets this cookie that allows visitors to see any conversations they've had on Intercom websites."},"intercom-device-id-":{"cookie_id":"intercom-device-id-","duration":"8 months 26 days 1 hour","description":"Intercom sets this cookie that allo

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	880
Entropy (8bit):	4.637623701366797
Encrypted:	false
SSDEEP:	24:twdmluIdARFcl/JV+UJr9MRaFL/MMxBoAV:68++/O8Da2
MD5:	3AFD14A996A67DE7207AE6A6B9640395
SHA1:	995FE850D0E4F9FD0AD544EEA1FCE698407B8B5C
SHA-256:	01AC21702217CE65714076E7EC940C5C384AF1A00A43421088C7FD121339E060
SHA-512:	CF37FAECF736D90DB4A9A8FBE690CD122A88C20A107FEFCAE79AEA4A25ADFEA73626524B898095CD73E862659435A955875B75BA1D34E661CFF93356CD14D876
Malicious:	false
Reputation:	low
Preview:	<svg width="20" height="20" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M2.54462 15.6398C2.54462 16.559 3.29212 17.3065 4.21128 17.3065H5.87795V15.6398H4.21128V13.9731H2.54462V15.6398ZM15.8779 5.63981C15.8779 4.72064 15.1304 3.97314 14.2113 3.97314H12.5446V5.63981H14.2113V7.30648H15.8779V5.63981ZM4.21128 5.63981H5.87795V3.97314H4.21128C3.29212 3.97314 2.54462 4.72064 2.54462 5.63981V7.30648H4.21128V5.63981ZM2.54462 8.97314H4.21128V12.3065H2.54462V8.97314ZM14.2113 8.97314H15.8779V10.6398H14.2113V8.97314ZM7.54462 3.97314H10.8779V5.63981H7.54462V3.97314ZM7.54462 15.6398H9.21128V17.3065H7.54462V15.6398Z". fill="#26374C"/>. <path fill-rule="evenodd" clip-rule="evenodd". d="M16.424 12.3065L17.5446 13.1391L13.648 17.3065L10.8779 15.2495L11.8238 14.238L13.4731 15.4637L16.424 12.3065Z". fill="#26374C"/>.</svg>.

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9596)
Category:	downloaded
Size (bytes):	275211
Entropy (8bit):	5.579009100731193
Encrypted:	false
SSDEEP:	6144:lpADw1PMKYhkPmjWU0XqpLcQneNewUKGM4a:3JBMKYhkPYneNewg7a
MD5:	7278F344E9819E4B440C962AD2BB985C
SHA1:	3D1D14957A3890DBD8EF5524E2F74D065574CCFE
SHA-256:	AC560233C7D9D0FE2F3EB8A434B84477E0557480A29ABE8C093A975F0C21A7A0
SHA-512:	58988D13682CE22C4ECD96735CEB2491837DFC2480DB797185AA4AF71DD070D9F90CAA071F93CCA23F484A85E40F64397ECF13E98A393EF19C03130AB7A80B88
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-QF933RX2RP&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"13",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"function":"__c","vtp_value":"c"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":24,"tag_id":22},{"function":"__ogt_referral_exclusion","priority":14,"vtp_includeConditions":["list","page\\.link","accounts\\.google\\.com"],"tag_id":24},{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR"

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1229
Entropy (8bit):	4.1531899523010445
Encrypted:	false
SSDEEP:	24:tg2S0uIQVcplVdlMmShgduMjIqNtZLAwLcTyHSHFg9AAQOZ4TTbZFw1muivctVH2:LSylRBShgduMMqNDAwLcTuSySdFwIuTA
MD5:	4A5DB1F159177AB6174F11510B3DD719
SHA1:	A0121A4A18D09E434A0154C319F77D9AAC6DF841
SHA-256:	CCBE8DB411E08F1308597735B66B5412770C11A7C1AB9EC184723E16748B773E
SHA-512:	4533FBB5E9119FAD3134EE07BFB20C47A7818C8C414E9D21F47FF16C3EC4AEC40F814BA513179D17493C9185B7AAEDA2DDC0872EDE00602DED7120C8DE9E4FAB
Malicious:	false
Reputation:	low
Preview:	<svg width="73" height="46" viewBox="0 0 73 46" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M72.6 43.1C72.6 44.6 71.4 45.8 69.9 45.8H2.7C1.2 45.8 0 44.6 0 43.1V2.7C0 1.2 1.2 0 2.7 0H69.9C71.4 0 72.6 1.2 72.6 2.7V43.1Z". fill="#1A1F71"/>. <path d="M27.5996 13.3L19.4996 32.6H14.1996L10.1996 17.2C9.99961 16.3 9.69961 15.9 8.99961 15.5C7.79961 14.9 5.79961 14.2 4.09961 13.9L4.19961 13.3H12.6996C13.7996 13.3 14.7996 14 14.9996 15.3L17.0996 26.5L22.2996 13.4H27.5996V13.3ZM48.2996 26.3C48.2996 21.2 41.2996 20.9 41.2996 18.7C41.2996 18 41.9996 17.3 43.3996 17.1C44.0996 17 46.0996 16.9 48.2996 18L49.1996 13.9C47.9996 13.5 46.4996 13 44.4996 13C39.5996 13 36.0996 15.6 36.0996 19.4C36.0996 22.2 38.5996 23.7 40.4996 24.6C42.3996 25.5 43.0996 26.1 43.0996 27C43.0996 28.3 41.5996 28.9 40.0996 28.9C37.5996 28.9 36.0996 28.2 34.9996 27.7L34.0996 31.9C35.2996 32.4 37.3996 32.9 39.5996 32.9C44.7996 32.9 48.1996 30.3 48.2996 26.3ZM61.2996 32.6H65.8996L61.8996 13.3H57.5996C56.

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1477
Entropy (8bit):	4.111514775950966
Encrypted:	false
SSDEEP:	24:tYU/duwMWmggzSFsj53ZwANEVnXwuZp8cS/dbKWx2LgJaxA6/NXBUk2I58OKIZ0V:n/U3w8Ay8gCGz2kJLiFBbH8OKIyM41
MD5:	511723E172F14E532E560BF8CCD67690
SHA1:	F817308ACD010167B9E548FA7FD887792100164C
SHA-256:	E7C7901F756F168A03A7C0C597518EF504E0A5302A7BB1D18C570E2AF88B801F
SHA-512:	EB6CD758C5692796253CFFC8AC5FBA70A66E1CE43E7298DFC59EF7F729A0FAF220FFB09EDED7AB0D49FE77B44B6AA793D9111B616D91F4707B7FE0B95AAA04DC
Malicious:	false
Reputation:	low
URL:	https://profile.cex.io/static/resources/media/grid.svg
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M10 3H4C3.73478 3 3.48043 3.10536 3.29289 3.29289C3.10536 3.48043 3 3.73478 3 4V10C3 10.2652 3.10536 10.5196 3.29289 10.7071C3.48043 10.8946 3.73478 11 4 11H10C10.2652 11 10.5196 10.8946 10.7071 10.7071C10.8946 10.5196 11 10.2652 11 10V4C11 3.73478 10.8946 3.48043 10.7071 3.29289C10.5196 3.10536 10.2652 3 10 3ZM9 9H5V5H9V9ZM14 11H20C20.2652 11 20.5196 10.8946 20.7071 10.7071C20.8946 10.5196 21 10.2652 21 10V4C21 3.73478 20.8946 3.48043 20.7071 3.29289C20.5196 3.10536 20.2652 3 20 3H14C13.7348 3 13.4804 3.10536 13.2929 3.29289C13.1054 3.48043 13 3.73478 13 4V10C13 10.2652 13.1054 10.5196 13.2929 10.7071C13.4804 10.8946 13.7348 11 14 11ZM15 5H19V9H15V5ZM3 20C3 20.2652 3.10536 20.5196 3.29289 20.7071C3.48043 20.8946 3.73478 21 4 21H10C10.2652 21 10.5196 20.8946 10.7071 20.7071C10.8946 20.5196 11 20.2652 11 20V14C11 13.7348 10.8946 13.4804 10.7071 13.2929C10.5196 13.1054 10.2652 13

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1229
Entropy (8bit):	4.1531899523010445
Encrypted:	false
SSDEEP:	24:tg2S0uIQVcplVdlMmShgduMjIqNtZLAwLcTyHSHFg9AAQOZ4TTbZFw1muivctVH2:LSylRBShgduMMqNDAwLcTuSySdFwIuTA
MD5:	4A5DB1F159177AB6174F11510B3DD719
SHA1:	A0121A4A18D09E434A0154C319F77D9AAC6DF841
SHA-256:	CCBE8DB411E08F1308597735B66B5412770C11A7C1AB9EC184723E16748B773E
SHA-512:	4533FBB5E9119FAD3134EE07BFB20C47A7818C8C414E9D21F47FF16C3EC4AEC40F814BA513179D17493C9185B7AAEDA2DDC0872EDE00602DED7120C8DE9E4FAB
Malicious:	false
Reputation:	low
URL:	https://profile.cex.io/static/resources/media/visa.svg
Preview:	<svg width="73" height="46" viewBox="0 0 73 46" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M72.6 43.1C72.6 44.6 71.4 45.8 69.9 45.8H2.7C1.2 45.8 0 44.6 0 43.1V2.7C0 1.2 1.2 0 2.7 0H69.9C71.4 0 72.6 1.2 72.6 2.7V43.1Z". fill="#1A1F71"/>. <path d="M27.5996 13.3L19.4996 32.6H14.1996L10.1996 17.2C9.99961 16.3 9.69961 15.9 8.99961 15.5C7.79961 14.9 5.79961 14.2 4.09961 13.9L4.19961 13.3H12.6996C13.7996 13.3 14.7996 14 14.9996 15.3L17.0996 26.5L22.2996 13.4H27.5996V13.3ZM48.2996 26.3C48.2996 21.2 41.2996 20.9 41.2996 18.7C41.2996 18 41.9996 17.3 43.3996 17.1C44.0996 17 46.0996 16.9 48.2996 18L49.1996 13.9C47.9996 13.5 46.4996 13 44.4996 13C39.5996 13 36.0996 15.6 36.0996 19.4C36.0996 22.2 38.5996 23.7 40.4996 24.6C42.3996 25.5 43.0996 26.1 43.0996 27C43.0996 28.3 41.5996 28.9 40.0996 28.9C37.5996 28.9 36.0996 28.2 34.9996 27.7L34.0996 31.9C35.2996 32.4 37.3996 32.9 39.5996 32.9C44.7996 32.9 48.1996 30.3 48.2996 26.3ZM61.2996 32.6H65.8996L61.8996 13.3H57.5996C56.

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 211019
Category:	downloaded
Size (bytes):	54071
Entropy (8bit):	7.995073636693487
Encrypted:	true
SSDEEP:	1536:tT8TEAC94UMEGCr1leleLrk5UxDaDYwkpD:RAC94qGm1lqeLPaDrG
MD5:	91DB46F9A239DDDA3B9EA3E0AF746198
SHA1:	5742DC60CBA5387D819669F2E872505C8296440D
SHA-256:	F2571C3D72F12B34DDA15171F8A1C0622C5ECB874DFDF4C1CA2E2491F799C33E
SHA-512:	D11E71467443345E3D4B786A56C8720449E03E82E5117FEFD15CF71BAC44B88963CB9FE761524AE8EC23EE4DC1F52A7A33BDB51BCF62FA77A67179B69C62E13F
Malicious:	false
Reputation:	low
URL:	https://js.intercomcdn.com/app~tooltips-modern.d78e4d48.js
Preview:	...........z.F.(..6...&.(.V...3.m....dS...4.Jb(..g......q..$3{f.... .....{Y....$.&.uR....{.s..Kwr}>_..^..h...?......`;.U<...?.....f..t..:g.........9....U...7Q.Z.%0...[...j.(...{..<x..s.f..m.:m...x..t.6..q.?nwl..c..k..'.0...dTo..9[.ukL.Yl....O..ou........x.....8..<...w.8..i.b..m.J.j.b...F..,....{..z..w.C/.7.~8.>Y...\...m{yw2YE14..i....;.Vq:.F.].a...d..a..5.v...{W.p..e.{.....n...........z.7..$\6\|>KT_]hN~..0.E...b.s.L\|7._....m.v.._..Ch6iL.?.......@...W.\:...M..W..M.../..>.$\|:..2..>L.pB...oaf.0H.....o6a.....6....l.0.e...'.8g.{./.7.....;...i..p.uk.`.5....{k.z..e.......@x.@..79...Y0..p..7c.,W...i...o.F:..;A.......f..D{%.$P...&.Y..{.~U.Y....$........&..Aik=.3w.''....3...a..&...%...8K.$`F.%.h.p...h..@Cc.6.jWH.t....^ ..0..>r..G......8...+.... ....v8..S..P_.hw....F.R....}o.{qzk.........rz'!..%.a..FwB....o.x....L.Z..%.#A...3ZM.0.;...M.Zr..;.$....>?......rQg....6a.ae.3.m...vD..Q..O"..^eko....G..w.....xx....24....j...i.L".....P.

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
URL:	https://x.adroll.com/attribution/trigger?fpc=9c2a3d2e2673c4382dbf8e1b819a358e&advertisable_eid=7UKK4UJQK5H4LI4OCBFPWX&conversion_type=PageView&conversion_value=0.0&pv=49777442137.35138
Preview:	OK

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
Preview:	OK

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	118
Entropy (8bit):	4.625003735668116
Encrypted:	false
SSDEEP:	3:YMKUcLRJyJGKeMfQ2pHG/4HviaNmX/ZQpsL8KqyRHfHyY:YMKUcmJGK+2pHrHaaNmXxtwwyY
MD5:	F6C1DC57C6EB6CE08F706EF410EABBF9
SHA1:	B23FEDB4F8F680F3536BEC7E9E7A5EF1E35488DE
SHA-256:	B3FB9A644557DE6095644489CE1E3044EA6CC6A743F421F471A2201E67375BCF
SHA-512:	21B66E4141063C6CFA12994867BC7E4B29C55813ECDC7AC5E67DAC3D396D3C8BC290FBF26FAC5046E0281A569811D8E2A144F4B6F95674F549527EEDE2460C96
Malicious:	false
Reputation:	low
Preview:	{"ip":"102.165.48.43","country":"US","country_name":"United States","region_code":"DC","in_eu":false,"continent":"NA"}

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.08979335248171
Encrypted:	false
SSDEEP:	6:tnrwdhC/gKumc4slZRIQ3oJgOKjdzkR52:trwdU/gKuiQ3oJgOKyR0
MD5:	39C25CC9AB95739A7AC4A08721807F08
SHA1:	9940FACC8756E5B90C7703EC8098F54A3B25BEED
SHA-256:	0659129ECFFB979A4A43BD902BDA41980C3C23E6B94AF8AC9AA88FE8511903F4
SHA-512:	396A0703F1F9FAA36AFE33C79EF7A0FA9B69C6E8833FE7A2454AF3C167B91F01BF7BA3264F54C2161C04953B4233205E8A71CF4DDA3256EC47F9565F52956803
Malicious:	false
Reputation:	low
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M16 12L20 8L16 4V6.999H2V8.999H16V12ZM8 12L4 16L8 20V17H22V15H8V12Z" fill="black"/>.</svg>.

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	238
Entropy (8bit):	4.850581800515803
Encrypted:	false
SSDEEP:	6:tnrwdhC/gKumc4slZRI7Ur0uyjGFMRQFfAonwK52:trwdU/gKui7UYrKFfFfLwK0
MD5:	D218793B513D2685E487A9E0955DFE1A
SHA1:	353BC5763EB8FD57B003AE9AEB48C82A7B1D9C91
SHA-256:	D1FCDF939DDA66CF16E71740CF581A81D7A95BD41EE678DBAEE36A32E2201DA5
SHA-512:	EA0D63BA55D0E82611F9046B1193114CF87DDA81D5D6ACCCEAD4168397CF9104C0ACB8D87A6E54D3E1AAB59A68A6FA8DA2B242BDC9CDAFCB24880FFE4DA95BEB
Malicious:	false
Reputation:	low
URL:	https://profile.cex.io/static/resources/media/chevron-right.svg
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M10.707 17.707L16.414 12L10.707 6.29297L9.29297 7.70697L13.586 12L9.29297 16.293L10.707 17.707Z". fill="black"/>.</svg>.

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	6262
Entropy (8bit):	5.515161621193756
Encrypted:	false
SSDEEP:	48:YNhbuR0Fy06Oo208K9TYdOqjwZaSADU2OTDfyBQwsnViRrKFYeUpQWieST1zdGu4:Ohi0G684MIDuyVa9rtILWcoAaQv
MD5:	49E5C320CB99849CE982AF0DE3395231
SHA1:	ED4104B004C5EAF5FBF8EE08EB3A6B9ACF1DDEE6
SHA-256:	CB91DCE50AE3C7DDE20DF30B5C62C70EA6B19300D204D3DA2542D63BB0B5D3C4
SHA-512:	F894A0CF79BC273EE63604F2A1867AD56C885F3F0FEB14293E780C126D9514C165DB052AC154838C3EDEFA652D8C26242000BEA3E694D5D42EF03B5B3056AFC3
Malicious:	false
Reputation:	low
URL:	https://api.rudderstack.com/sourceConfig/?p=cdn&v=2.48.6&writeKey=20k74eNX2JyWtp0UKQ9VlhB2Xgz
Preview:	{"source":{"id":"20k74bUwHzLi4618rpTwiZXB6lI","name":"web prod","writeKey":"20k74eNX2JyWtp0UKQ9VlhB2Xgz","config":{"statsCollection":{"errors":{"enabled":false},"metrics":{"enabled":false}}},"enabled":true,"workspaceId":"1yWTKcvoBzVND1KiW5a8pzEKS7V","sourceDefinitionId":"1TW48i2bIzEl1HPf825cEznfIM8","destinations":[],"updatedAt":"2024-03-22T09:12:04.407Z","createdAt":"2021-11-10T20:35:41.541Z","liveEventsConfig":{"eventUpload":false,"eventUploadTS":1711098724407},"sourceDefinition":{"options":null,"config":null,"configSchema":null,"uiConfig":null,"id":"1TW48i2bIzEl1HPf825cEznfIM8","name":"Javascript","displayName":"Javascript","category":null,"type":"web","createdAt":"2019-11-12T12:39:19.885Z","updatedAt":"2023-05-16T11:52:25.474Z"},"createdBy":"20QH141rovfmZHPDNGoIR6l7yf8","secretVersion":null,"connections":[{"id":"21nfWRQXFgYuaRxel4l8pHtujLv","createdAt":"2021-12-04T01:36:42.200Z","updatedAt":"2021-12-04T01:47:45.284Z","sourceId":"20k74bUwHzLi4618rpTwiZXB6lI","destinationId":"21nd8Vm

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1141
Entropy (8bit):	4.3052641307943205
Encrypted:	false
SSDEEP:	24:tjoqrDuEPyNhX4JhW8n2cqQUX0KyLNcoXmAMrvAIjV:qqrfPyNhXOhW8n27QOjeXmnrx
MD5:	C6118ABB780F7901636525AEC3E0CAA3
SHA1:	58557851859CA90FD4DBB15BC673459D1D8CC06A
SHA-256:	CF5FC043E2926C87BE7634A2D0A237479C0487B5AA1F6966C323C97CD40E1723
SHA-512:	B36764279A5E027522F347EB018DDA98598EB2F3FBF46269125164C217D80DDE6615E35317EBD74F9B4686E9E60C4409DA50EEE1C8597A9AC1A39CF165E2E206
Malicious:	false
Reputation:	low
URL:	https://profile.cex.io/static/resources/media/file.svg
Preview:	<svg width="21" height="21" viewBox="0 0 21 21" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M16.9637 7.79449C16.9242 7.70404 16.8689 7.62136 16.8004 7.55032L11.8004 2.55032C11.7294 2.4818 11.6467 2.4265 11.5562 2.38699C11.5312 2.37532 11.5046 2.36865 11.4779 2.35949C11.4082 2.33576 11.3356 2.32146 11.2621 2.31699C11.2446 2.31532 11.2287 2.30615 11.2112 2.30615H5.37791C4.45874 2.30615 3.71124 3.05365 3.71124 3.97282V17.3062C3.71124 18.2253 4.45874 18.9728 5.37791 18.9728H15.3779C16.2971 18.9728 17.0446 18.2253 17.0446 17.3062V8.13949C17.0446 8.12199 17.0354 8.10615 17.0337 8.08782C17.0297 8.01425 17.0154 7.94161 16.9912 7.87199C16.9829 7.84532 16.9754 7.81949 16.9637 7.79449ZM14.1996 7.30615H12.0446V5.15115L14.1996 7.30615ZM5.37791 17.3062V3.97282H10.3779V8.13949C10.3779 8.3605 10.4657 8.57246 10.622 8.72874C10.7783 8.88502 10.9902 8.97282 11.2112 8.97282H15.3779L15.3796 17.3062H5.37791Z". fill="#26374C"/>. <path d="M7.04456 10.6395H13.7112V12.3062H7.04456V1

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (26370)
Category:	downloaded
Size (bytes):	243567
Entropy (8bit):	5.558004769596172
Encrypted:	false
SSDEEP:	6144:7fxxRGyaQbz529y5GH0suADL1nyP4WEkXqpn5i5:7fxxRGyaQbz529y5GH0suu1yPue
MD5:	770698B19D5AF61EB3726CF181E8EF0E
SHA1:	9F6D8483FD584248ED7D8293E2E225B5B18CD969
SHA-256:	EDC3DE510422FF627CABA4787B83083F13AF8443739903020739D8EDAE5B5560
SHA-512:	BE4E42B19CC480BB74C9535CDEBDF2E3BADB386C95992327A75B90537B7FB56A88B83187BBF2CB556F518FDD85BB6126368AC3F05E3D3FB1028751D535768321
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-593TDDD
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"298",. . "macros":[{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"view_load"},{"function":"__e"},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"type_event"},{"function":"__e"},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"fu

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1105
Entropy (8bit):	4.136122864044135
Encrypted:	false
SSDEEP:	24:t8j8DuPfATaLtmIHl3sh/6h4sMhgRPGLaUFq4UBelDHYEqTefvlrW:pyfxl3sN6h4sMONeRFqpBqDNA
MD5:	BEDC39FEE545864AB0711A172D04EE34
SHA1:	3E198C37F1875CB9F5372DFA8FB24D2CEC14DEB5
SHA-256:	9C76B1644ACF8902B1B83BE2CCFFF403B4C9695771B296252C23D41E825F55A0
SHA-512:	700B37EF81FDB7504382F8AB6618F40F5E11ED3049392F81CEA7754DF25F6182F71C9EAC9E949008CF6B7F6E009C799F51D77912760F8CD249CCE027887CCFFF
Malicious:	false
Reputation:	low
Preview:	<svg width="33" height="26" viewBox="0 0 33 26" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M33 3.078C31.7862 3.59981 30.4805 3.95274 29.1112 4.11036C30.5093 3.29828 31.5822 2.01333 32.0886 0.479714C30.7804 1.23208 29.3308 1.77788 27.7893 2.07207C26.5543 0.796913 24.7947 0 22.8462 0C19.1079 0 16.0759 2.93947 16.0759 6.56376C16.0759 7.07823 16.136 7.57899 16.2521 8.05968C10.6254 7.78605 5.63633 5.17308 2.29684 1.20075C1.71417 2.16997 1.37992 3.29828 1.37992 4.50099C1.37992 6.77767 2.57606 8.78757 4.39172 9.96434C3.28243 9.93057 2.23777 9.6354 1.32539 9.14247C1.32489 9.17037 1.32489 9.19827 1.32489 9.22568C1.32489 12.406 3.6596 15.0586 6.75622 15.6612C6.1887 15.812 5.58937 15.8917 4.97287 15.8917C4.53562 15.8917 4.112 15.8511 3.69898 15.7748C4.56036 18.3819 7.06018 20.2797 10.0235 20.333C7.70596 22.0938 4.78706 23.1428 1.6142 23.1428C1.0689 23.1428 0.528642 23.1119 0 23.0507C2.99463 24.9138 6.55425 26 10.3774 26C22.8306 26 29.6408 15.9985 29.6408 7.32396C29.6408 7.03956

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	15398
Entropy (8bit):	3.717867165850376
Encrypted:	false
SSDEEP:	192:bIx/JdzSAxVRWIMRxiw7XbqHDYpiSCdU6mxV827W6gnjCpW8s4xOKJCxmutqdbch:QDpoYeL+fSS
MD5:	22FB9AAD6104F4B4863A83DF645ADAB3
SHA1:	05C19E9C15795B780EED9CEF5E3FD41EFE7F1042
SHA-256:	331A9764D44420CF85E48D64C66CCA4C9DDFB879EA6BDE4A00B02C0E819548BF
SHA-512:	2ED5F0C994721A282A33E62F64A2AAB1DAEB47720F328A1A4788F5ED586CAEC5FB7C4FFBF2D31D0E7FBD438568C914FCF067890065EE9636E7DA96AF5DB7E254
Malicious:	false
Reputation:	low
URL:	https://profile.cex.io/static/resources/content/footer.json
Preview:	{. "menu": {. "services": {. "title": "Services",. "links": {. "buySellCrypto": {. "title": "Buy & Sell Crypto",. "link": "https://cex.io". },. "buyBitcoins": {. "title": "Buy Bitcoin",. "link": "https://cex.io/buy-bitcoins". },. "buyEthereum": {. "title": "Buy Ethereum",. "link": "https://cex.io/buy-ethereum". },. "btcToUsd": {. "title": "BTC to USD",. "link": "https://cex.io/btc-usd". },. "buyCryptoPaypal": {. "title": "Buy Crypto With Paypal",. "link": "https://cex.io/buy-bitcoin-with-paypal". },. "buyBitcoinBankAccount": {. "title": "Buy Bitcoin With Bank Account",.

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1138
Entropy (8bit):	4.160045356415514
Encrypted:	false
SSDEEP:	24:tYU/duwkhJ5Ev3F0cHGsuKc+l/j8+JwazWoO3277nL8UvU474yXJi00:n/a5w3GcHXVl/jpKUO30Do6v1Ji
MD5:	9627CEEF10743DDB90F3D7138B3F2CBD
SHA1:	02FF60EA5AAE9D4B6254235C7221D1EB13674B2B
SHA-256:	F240CABC5D11BE8A3F9D96A504E5738F1E806A6E70A1153ACD72F30BC1C46244
SHA-512:	AB5D853A036C817084EADB3EEEF3A51FBE48464AE35F3C32D4701980D2713136C3F365EE4CD71A8A1509E11827D0ACC566DBA33321887ED685E620E6A23756FD
Malicious:	false
Reputation:	low
URL:	https://profile.cex.io/static/resources/media/user-circle.svg
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M12 2C6.579 2 2 6.579 2 12C2 15.189 3.592 18.078 6 19.924V20H6.102C7.77 21.245 9.813 22 12 22C14.187 22 16.23 21.245 17.898 20H18V19.924C20.408 18.078 22 15.19 22 12C22 6.579 17.421 2 12 2ZM8.074 18.927C8.22136 18.2604 8.59154 17.6639 9.12347 17.236C9.6554 16.808 10.3173 16.5742 11 16.573H13C13.6827 16.5744 14.3445 16.8083 14.8764 17.2362C15.4082 17.6641 15.7785 18.2605 15.926 18.927C14.758 19.604 13.416 20 12 20C10.584 20 9.242 19.604 8.074 18.927ZM17.61 17.641C17.2286 16.7329 16.5877 15.9574 15.7677 15.4117C14.9477 14.866 13.985 14.5742 13 14.573H11C10.015 14.5742 9.05227 14.866 8.23227 15.4117C7.41227 15.9574 6.77144 16.7329 6.39 17.641C4.923 16.182 4 14.176 4 12C4 7.663 7.663 4 12 4C16.337 4 20 7.663 20 12C20 14.176 19.077 16.182 17.61 17.641Z". fill="black"/>. <path d="M12 6C9.72 6 8 7.72 8 10C8 12.28 9.72 14 12 14C14.28 14 16 12.28 16 10C16 7.72 14.28 6 12 6ZM1

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (685), with no line terminators
Category:	downloaded
Size (bytes):	685
Entropy (8bit):	5.266929679169406
Encrypted:	false
SSDEEP:	12:haxVfMbnp22AwEojP2gdvINe7vHOoAvmbRXu6TT7eR4VXHVc8KsOPhIG:haHMpVjPDdvLjWYlDT7eRYFc8KZhIG
MD5:	29086E144144354D3F3EACFC59C31FC3
SHA1:	AFE338C4DED2D380BE54E297F66F108C8F8945F1
SHA-256:	4D89B8AD5EAEBDCD52A9FBE60102386E757EA37D1AC770283C361A80E2259519
SHA-512:	18ECBDDE5CDB08D3CFEF63EF87D4DA12E2B07F3C4623A432E15584B7502A3106303029AF964F95F50A593840570FCC492CE0E4A3D41F76F7350201E396234018
Malicious:	false
Reputation:	low
URL:	https://x.adroll.com/pxl/iframe_content.html?adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103&flg=1&pv=49777442137.35138&arrfrr=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&advertisable=7UKK4UJQK5H4LI4OCBFPWX
Preview:	<!DOCTYPE html><html><head><meta charset="UTF-8"><script>const urlParams=new URLSearchParams(document.location.search),adv=urlParams.get("advertisable"),fpc=urlParams.get("adroll_fpc").split("-")[0],origin=document.location.origin,kSecsPerDay=2592e3;let url=origin+"/igs?advertisable="+adv+"&fpc="+fpc;function joinInterestGroups(e=null){let n=null!==e?"&cd_label="+e:"";var o=new XMLHttpRequest;o.responseType="json",o.open("GET",url+n,!0),o.onload=()=>{o.response.forEach((e=>{navigator.joinAdInterestGroup(e,2592e3)}))},o.send(null)}"cookieDeprecationLabel"in navigator?navigator.cookieDeprecationLabel.getValue().then(joinInterestGroups):joinInterestGroups()</script></head></html>

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	749
Entropy (8bit):	4.3067657385163525
Encrypted:	false
SSDEEP:	12:trwdU/gKui2et9v5k0LTjFXT60vRPCIciHcbo7EuSpZQRqbBc2tYYSnD0yqx7T2I:tYU/dulcv6qI0pPCIl8bo7EvpZuf2tYi
MD5:	988A7769407D206155FE2B8D5122AC4F
SHA1:	E5D307170A4F5F7C1473D26AE305382376A64387
SHA-256:	53B1B7D35803E23B3BF3A80265710247CA66EF05701E97C634FB05778FBFE155
SHA-512:	9290E8A1F70DF64033946456E0353740AB9938686BF31E1A96C4A5469991DF7A920D37C7442AC5CE7D48F45F7426FF53A174866FFE79D66C3B86862AD698668A
Malicious:	false
Reputation:	low
URL:	https://profile.cex.io/static/resources/media/shield.svg
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M20.9947 6.9031C20.9786 6.73477 20.9199 6.57329 20.8242 6.43387C20.7285 6.29445 20.599 6.18165 20.4477 6.1061L12.4747 2.1061C12.336 2.03604 12.1828 1.99937 12.0274 1.99903C11.872 1.99868 11.7187 2.03466 11.5797 2.1041L3.55267 6.1041C3.25567 6.2541 3.05067 6.5411 3.00867 6.8711C2.99567 6.9681 1.86367 16.6121 11.5497 21.8791C11.6986 21.9603 11.8657 22.0021 12.0353 22.0005C12.2049 21.999 12.3713 21.9541 12.5187 21.8701C21.8257 16.6111 21.0327 7.2971 20.9947 6.9031ZM12.0177 19.8471C5.15767 15.8371 4.87767 9.4951 4.95467 7.6421L12.0257 4.1191L19.0237 7.6301C19.0287 9.5001 18.5427 15.8731 12.0177 19.8471Z". fill="black"/>.</svg>.

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	8250
Entropy (8bit):	3.9988926667633464
Encrypted:	false
SSDEEP:	192:gdpfPso9qDeEb+5GZMFQhNHg5ix21djwe33j:8R9RMEG6FQY5+21Fwk3j
MD5:	6BE2C1115F8B8BEC305DA2438842CE2C
SHA1:	C6DCE0720C1DC307AC3701252AFF132778FF8EFD
SHA-256:	769EDC9AF4CFE8E1E93F339BB7D05F7EC08A8098D81A659D26BBDB70D7F323FA
SHA-512:	26172CE184A7E8D30FB206617BC7250104D28FEB29B61D2C4F5A9D8C31A9BC4923CA33AE43D5CD8E71F26DFB272473446297990CB50A51627F640963E8630AC8
Malicious:	false
Reputation:	low
URL:	https://profile.cex.io/static/resources/media/pci.svg
Preview:	<svg width="82" height="28" viewBox="0 0 82 28" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M5.87988 17.7537V26.7712H0.606445V1.17749H10.5908C12.5127 1.17749 14.2002 1.52905 15.6533 2.23218C17.1182 2.9353 18.2432 3.93726 19.0283 5.23804C19.8135 6.5271 20.2061 7.9978 20.2061 9.65015C20.2061 12.158 19.3447 14.1384 17.6221 15.5916C15.9111 17.033 13.5381 17.7537 10.5029 17.7537H5.87988ZM5.87988 13.4822H10.5908C11.9854 13.4822 13.0459 13.1541 13.7725 12.4978C14.5107 11.8416 14.8799 10.9041 14.8799 9.6853C14.8799 8.4314 14.5107 7.41772 13.7725 6.64429C13.0342 5.87085 12.0146 5.47241 10.7139 5.44897H5.87988V13.4822Z". fill="#667C99"/>. <path d="M43.9365 18.2458C43.7373 20.9998 42.7178 23.1677 40.8779 24.7498C39.0498 26.3318 36.6357 27.1228 33.6357 27.1228C30.3545 27.1228 27.7705 26.0212 25.8838 23.8181C24.0088 21.6033 23.0713 18.5681 23.0713 14.7126V13.1482C23.0713 10.6873 23.5049 8.51929 24.3721 6.64429C25.2393 4.76929 26.4756 3.33374 28.0811 2.33765C29.6982 1.32

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3502
Entropy (8bit):	4.220657976699538
Encrypted:	false
SSDEEP:	96:2mURimFp6iGw2AKMLQjSLNXvlmxP+ij7FexG4QM8TV0Ja:SVf6iGw5KMLQjuNXvw0ijBeEA8TyJa
MD5:	4988D4CEF43B78AE7E7BC00D1F4CBCB6
SHA1:	CE7FF0254F357034B916A471317519489752A53F
SHA-256:	223EE307721B275863060AACFE94D596D977F0739B16CEF8DF3C85FAD66ACFBC
SHA-512:	88F040D52C5F66C3D3E41305507524316817B13656C3DA62C31D84199680CFD18349C3ECCB79D4F26C8865DC4B4CA0DAB980997100EB0BC6C6811FAD96055224
Malicious:	false
Reputation:	low
URL:	https://profile.cex.io/static/resources/media/cex-full-logo.svg
Preview:	<svg width="139" height="40" viewBox="0 0 139 40" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M19.8572 22.2047H34.7936L37.1664 19.8345L34.7936 17.4644H19.8572C18.5459 17.4644 17.4844 18.5247 17.4844 19.8345C17.4844 21.1443 18.5459 22.2047 19.8572 22.2047Z". fill="#00CCCC"/>. <path d="M19.8571 8.73193C13.7251 8.73193 8.74219 13.7093 8.74219 19.8342C8.74219 25.9592 13.7251 30.9366 19.8571 30.9366H26.0514L30.7971 26.1963H19.8571C16.3478 26.1963 13.4879 23.3396 13.4879 19.8342C13.4879 16.3289 16.3478 13.4722 19.8571 13.4722H30.7971L26.0514 8.73193H19.8571Z". fill="#00CCCC"/>. <path d="M39.7139 30.9366V26.1963H36.1422L31.3965 30.9366H39.7139Z" fill="#00CCCC"/>. <path d="M5.8197 5.81312C2.06062 9.55548 0 14.5328 0 19.8345C0 25.1361 2.06062 30.1135 5.8197 33.8558C9.56629 37.5982 14.5617 39.6689 19.8569 39.6689H39.7138V34.9286H19.8569C15.8231 34.9286 12.0265 33.3568 9.16665 30.5127C6.31924 27.656 4.74568 23.8637 4.74568 19.8345C4.74568 15.8052 6.3192

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1171
Entropy (8bit):	4.362888063846814
Encrypted:	false
SSDEEP:	24:tjoqrDu3MMQ5G95Pv7J0GBFiA4BKQmi7Uta8UpmaV2fQQ1QdDE:qqru7UUC7pRF2piw
MD5:	44CCDF1F0BC28A0B843E6F75041B2564
SHA1:	E9EF854CCB0F85A8F90A22B3214995EB5A2846B4
SHA-256:	1032E4BC8BAAA8A9C0B58DC234CE7CD59ECAB787B5002334E1332415AC0A0D7B
SHA-512:	9E496B778A6CC717F8FBCD69085F3601E7C966818541611A470B97FA50755483C220829E7DCDD7553CC61D3B7E18146F4F245D38352B972BB0F1273436FC9D02
Malicious:	false
Reputation:	low
Preview:	<svg width="21" height="21" viewBox="0 0 21 21" fill="none" xmlns="http://www.w3.org/2000/svg">. <path fill-rule="evenodd" clip-rule="evenodd". d="M4.36483 5.04336C2.86615 6.53707 2.04462 8.52369 2.04462 10.6398C2.04462 12.7558 2.86615 14.7425 4.36483 16.2362C5.85854 17.7299 7.85014 18.5564 9.96124 18.5564H17.8779V16.6644H9.96124C8.35302 16.6644 6.8394 16.037 5.69921 14.9018C4.564 13.7616 3.93664 12.248 3.93664 10.6398C3.93664 9.03155 4.564 7.51793 5.69921 6.37774C6.8394 5.24252 8.35302 4.61517 9.96124 4.61517H17.8779V2.72314H9.96124C7.84516 2.72314 5.85854 3.54468 4.36483 5.04336ZM9.96112 6.20841C7.51642 6.20841 5.5298 8.19504 5.5298 10.6397C5.5298 13.0844 7.51642 15.071 9.96112 15.071H12.4307L14.3227 13.179H9.96112C8.56201 13.179 7.42182 12.0388 7.42182 10.6397C7.42182 9.24063 8.56201 8.10043 9.96112 8.10043H14.3227L12.4307 6.20841H9.96112ZM9.96095 11.5858H15.9158L16.8619 10.6398L15.9158 9.69377H9.96095C9.43816 9.69377 9.01494 10.117 9.01494 10.6398C9.01494 11.1626 9.4381

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15086
Entropy (8bit):	3.265251543777828
Encrypted:	false
SSDEEP:	96:jRbuxxxxxxxxxxxxxxxxxxxxx+Eb9ZZZZZ9ZZZZxa2r7ZHS0ZZZZZ9ZZZZl/spDg:jRbrEXrj/spDzx24X/l/K0HufJLh
MD5:	B262D2C26924F3261B88C08481A313D1
SHA1:	A181B7676D48F9E236F5D8AD9737FDC00A33CF8F
SHA-256:	547259210F4BA7D8C5970CC9F6AD04F766A78D3C5DB436B1C4E7C9434406A72C
SHA-512:	6B29E0038D36D01D5E5CB8FFDB95ECCD7133B205625939CC55151A63C1353DA3CE45D8A3BDA5B3B73C454F476C0105D22BF526CC3FD096C5AA3047EAA911F33E
Malicious:	false
Reputation:	low
URL:	https://cex.io/img/favicon/favicon.ico
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$.............................................................................................:...k...............................................................................................................................................................................=.......................................................................................................................................................................................S.......................................................................................................................................................................................=...........................................................................................................................................................................................\|..............................................................................................

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	188
Entropy (8bit):	5.1547143275257
Encrypted:	false
SSDEEP:	3:qQgfjg5anvEVUxRAISUBhnC6SEWtf4NoWjUHWnhTHJHrHWLKjUSHJb4CNw1B:qQQjgYkeRAIB2V4xjJWLA1Hx4CNw1B
MD5:	5E7E6A69054D43910DDD4BFA0852708B
SHA1:	38DDBB9648E059F56C9AC39C3AF269A28BFD142B
SHA-256:	30AF962BB9073C90BE3E8860954CDC4E8E60099492FB54BC621A0AC9BC2BE52C
SHA-512:	8D4D4C7271E220F89916F81B448F0105A0FBB7164B6B96A052FDB82FE5BB8341E355FD1F54C35FF93F74CE092DDAAA222897986E6CD7024BB08A1093A6BB2CC4
Malicious:	false
Reputation:	low
URL:	https://tr.snapchat.com/config/io/4d52341b-7196-4dc9-a490-6fe981c45213.js?v=3.12.0-2402271815
Preview:	!function(){"use strict";try{window.snaptr.cfg('4d52341b-7196-4dc9-a490-6fe981c45213',{"asc":[],"a":["PII","AV3"],"ipg":"1","b":[],"t":"246","v":"3.7.5-2401032347","ec":[]})}catch(e){}}();

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	302
Entropy (8bit):	4.856890648737081
Encrypted:	false
SSDEEP:	6:tnrwdhC/gKumc4slZRIx83pPuip7dTjphldB4V7YEG8q8xYK52:trwdU/gKuix891p71jLldCVs8xYK0
MD5:	7D516DB9D49C61EB2B5D5EDB2A5A57D5
SHA1:	B8375CCF51181122AD4A5E4819594A1FD00899C2
SHA-256:	25C54A20D0F0694BB3BBCAEA8CD2E5DF8FA997A267F47BCB0DBC7C268286D36F
SHA-512:	AEADCE6CD150901DFFE6B915DBA89755FDAAA43B8C690E4A3A1F239C208391E6913FD19C6810CE5DC6CC5E67386786B0987BA36F94EAE4CEAD8AA5D35F4D1B56
Malicious:	false
Reputation:	low
URL:	https://profile.cex.io/static/resources/media/arrow-up-and-right.svg
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M7.82543 9.59136L13.8937 9.78018L6.90786 16.3444L8.2774 17.8019L15.2633 11.2377L15.0744 17.306L17.0732 17.3682L17.3682 7.88762L7.88762 7.59263L7.82543 9.59136Z". fill="black"/>.</svg>.

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 67559
Category:	downloaded
Size (bytes):	21502
Entropy (8bit):	7.989511589368222
Encrypted:	false
SSDEEP:	384:GM7pI1brzTu6i0yLKIAgLM6FKS85jfJCaYp9W+BCXoHVLhgUtsF8Lqp7w3tD:GMKPvm0qAglifJCaYp9WohHV9gUtsF8B
MD5:	418911F0E28E7F33A5AC1FC4F3C723DE
SHA1:	E2995B7FA3BF1AD2169B668BBE681018CB7FA7D7
SHA-256:	202635EB355C9B1B5A463FC5A69A87F6AC72AD0B5867E1A53CD8D9D7742D5119
SHA-512:	CBB5F40CE231ED3C9CA52610BD9EFF528ED070FA73E518443FF35990197CDB2A87166649B1B0658F7649E69204354663D8263F25A63EF3FBD14E5E8C2BDA1960
Malicious:	false
Reputation:	low
URL:	https://js.intercomcdn.com/vendors~app-modern.3733d47a.js
Preview:	............z.F.8.$.G...E.l.Ax2..d......P...M.c.`.P.C.<.........U.W..-g.....&.......u.{..Wa.n...[~..'...W.()x6I....O..nGc..\.sw4z...2f.....}..`..\|..A.M.S.{l.J&E.&-.B&KX.mn....[t..f.xvpPt..=..Y..r.?..f.$.<y.&7a...O.<...g)@xW.?.B.{........O....2K..X/y...$...[...]....?..J..BZX.7W.......^.z.R..0t.f.3..iV.jd,.n.h.. .&... ..K.....]:kE.."h.&..Y.d..^.].l.&l..l.l...&p'..wgq.fn.?::..Z.....k.".x^\|.D..s^f......$L&<....q.J.......i.p=9..lT....\W._.&.f...m.....u2t.A.<...F.w=..Hs.Wz.+J...6....A.(\.J~m4.....OW.`...+KMb.f....63l...._A.u..p5t..&..SO62..W../Ws9r..7.\|...w.u..?_...4.Z..U..c.0.u:...y....:.....U9.*....xX>M.<..klA......r[.h....4,.n...\.4D.E..'fI]S...$..+.4v.Vk...k...i.2~k.Z..a.Z.......s^./..#h.......F..i...{.M.9Lc..H..%.<....EE..~'D.>.(u.~eQ._kN..5..........-.q._i...E.x."[o.../A...2.b6...6..y.$,&skOiz.H..W..!O".{.f.../........h=KW..E+N.i..r..4.lWh....O/o........-lD..Y..%Qa.D!6r...9m..j=....(...xw.e.4+OT..KE;.L..-...aC...z.<.&.=..y....#...8

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.054229296672174
Encrypted:	false
SSDEEP:	3:3xuq3XW2C2Y:xn5O
MD5:	638FB29357D49E9A9D2889229043B078
SHA1:	C29D1B77328F39D6F2C684E33C15E61A647BAF52
SHA-256:	0FED1E72D393247E450EF385EC24D5D885A472F8CE3451F4DCC35E5C65470D25
SHA-512:	71202F7B2258706E1DCB28C840FB92AB60E4DFB542CC435627FEE812920B2C206BADFAE5FBF816EC225AD641938F0853DF8A866E95A09DD1056C04A34708F889
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlgL36HMa_FyRIFDXhvEhk=?alt=proto
Preview:	ChQKEg14bxIZGgQICRgBGgUImgEYAg==

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 527817
Category:	downloaded
Size (bytes):	145093
Entropy (8bit):	7.998049294623725
Encrypted:	true
SSDEEP:	3072:6ze6n1tKogJ4mptAGvgTQuw5OCZxMH1zpaqYVCZn9groZyJAdX:6Vn1i4mTjvH5bZxMVzpaFsJ9OoQWX
MD5:	479B48CD31017F146C1838FF8EA841F8
SHA1:	EEF29A830B895D7EBD6241A83E0D5EC4F1A218CE
SHA-256:	878698692F32DDD28278939CD92229EB0D3C29FD1BAE3F1E1D0B2E6EBBECF066
SHA-512:	787587EF5BDE4A5A8705584385F9D3C5D16BA4D7EA68F3AF55EE18290E9C5D73949B77713A942711D107B9280740A60D80979973886426EDA65A4A37778375F8
Malicious:	false
Reputation:	low
URL:	https://js.intercomcdn.com/frame-modern.0c18727c.js
Preview:	............{.H. .W(^?]`..1)...V.l+X..... Y.a.....h..}.9U...%w........A...N..a..\|..A.....c...[.Z..2.z.k?.....o...r.^..3....3pzv...x.l..U\|.y`G~ ..5.x;.tGN$n6.....`.....cp.z..>\..<..^)0"s...O.....X..1n.O<>+............./......,...(.g....?+EV...v......Q...............-......0...........X..}w..>.....A.........V.n6.W......[_.....kT..o.^.;...Q.n.j..!.x.A}......x......:4..]..=[=.6.k..[".._ll6.lk..M.......f...rT}.6...z.Ukn4.V.".......U.W..w.U..@.......R.....A.k.......y./..F.mUe#.{..2ng.....#'..V...omm...W..z.m.d.a<.Z..3ol6."..6.k..0,. HVc...Q.MM...V.l.V..;...Z..dM.H<.g..R..y..?..hnm..[.....w^m.Z..o7ni.R.-..h.Et...V..P.....lV.l..n...ve....<^7.S....3...fW.. ..=...}..`.77E?..fe.>....Gk...$..p.jM.,.s....M.S..J.R..b.m..A.%.J.`hsK.a.j'.^g... .7w.^.n0.H...4.Y...l...x.....k4...a.E.@.57.h....f}....+9..GUk6X....}..",\|..6.7D..k.g.l..lV7k......5a.....e.p..J.w..#'........g.1).w"a..M..fN;.Z......Fd....F.F...,..6.....U..i*\....[ i..:.^...nh..<.y)....

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1171
Entropy (8bit):	4.362888063846814
Encrypted:	false
SSDEEP:	24:tjoqrDu3MMQ5G95Pv7J0GBFiA4BKQmi7Uta8UpmaV2fQQ1QdDE:qqru7UUC7pRF2piw
MD5:	44CCDF1F0BC28A0B843E6F75041B2564
SHA1:	E9EF854CCB0F85A8F90A22B3214995EB5A2846B4
SHA-256:	1032E4BC8BAAA8A9C0B58DC234CE7CD59ECAB787B5002334E1332415AC0A0D7B
SHA-512:	9E496B778A6CC717F8FBCD69085F3601E7C966818541611A470B97FA50755483C220829E7DCDD7553CC61D3B7E18146F4F245D38352B972BB0F1273436FC9D02
Malicious:	false
Reputation:	low
URL:	https://profile.cex.io/static/resources/media/cex.svg
Preview:	<svg width="21" height="21" viewBox="0 0 21 21" fill="none" xmlns="http://www.w3.org/2000/svg">. <path fill-rule="evenodd" clip-rule="evenodd". d="M4.36483 5.04336C2.86615 6.53707 2.04462 8.52369 2.04462 10.6398C2.04462 12.7558 2.86615 14.7425 4.36483 16.2362C5.85854 17.7299 7.85014 18.5564 9.96124 18.5564H17.8779V16.6644H9.96124C8.35302 16.6644 6.8394 16.037 5.69921 14.9018C4.564 13.7616 3.93664 12.248 3.93664 10.6398C3.93664 9.03155 4.564 7.51793 5.69921 6.37774C6.8394 5.24252 8.35302 4.61517 9.96124 4.61517H17.8779V2.72314H9.96124C7.84516 2.72314 5.85854 3.54468 4.36483 5.04336ZM9.96112 6.20841C7.51642 6.20841 5.5298 8.19504 5.5298 10.6397C5.5298 13.0844 7.51642 15.071 9.96112 15.071H12.4307L14.3227 13.179H9.96112C8.56201 13.179 7.42182 12.0388 7.42182 10.6397C7.42182 9.24063 8.56201 8.10043 9.96112 8.10043H14.3227L12.4307 6.20841H9.96112ZM9.96095 11.5858H15.9158L16.8619 10.6398L15.9158 9.69377H9.96095C9.43816 9.69377 9.01494 10.117 9.01494 10.6398C9.01494 11.1626 9.4381

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9013
Entropy (8bit):	5.232929931928589
Encrypted:	false
SSDEEP:	192:rqpyedLEYmZEVCjGYLKp2PrKctYqzIyFa2gLTG/P45tJW+zlH:yyBZ+RH
MD5:	1FFDA2CF06B322AF8255634764151260
SHA1:	3C6457C4DD55C012BEFE5262BC7DDC3364EAF3BA
SHA-256:	1F08B3CB074FA0D87B660F01E2BEA2FCE343AA31F4CC1FA7E99A183B6988761B
SHA-512:	734A5C55A1D9F2B4A829538AB3E5CC2FC78F5083A76FA996123E6F813DF6E44A311D77EF59C1247C924F8E6E7B3B78A256B0E37D0921974F32441D4454BB5F59
Malicious:	false
Reputation:	low
Preview:	[{"owner":"https://x.adroll.com","trustedBiddingSignalsURL":"https://x.adroll.com/kv/v1/getvalues","name":"7UKK4UJQK5H4LI4OCBFPWX","biddingLogicURL":"https://x.adroll.com/bid/bidding-logic.js","biddingWasmHelperURL":"https://x.adroll.com/bid/bidding-logic.wasm","trustedBiddingSignalsKeys":["9c2a3d2e2673c4382dbf8e1b819a358e"],"updateURL":"https://x.adroll.com/update/7UKK4UJQK5H4LI4OCBFPWX?p=ApwqPS4mc8Q4Lb-OG4GaNY4BAGalMCsA_LyLDcz8vIsNzA","ads":[{"renderUrl":"https://x.adroll.com/ads/gGkP7yKGej","metadata":"I1E_Y300x250"},{"renderUrl":"https://x.adroll.com/ads/4eaPYQ51_w","metadata":"I1E_Y300x250"},{"renderUrl":"https://x.adroll.com/ads/zXlEie8ghW","metadata":"I1E_Y160x600"},{"renderUrl":"https://x.adroll.com/ads/jvuqd4NA98","metadata":"I1E_Y160x600"},{"renderUrl":"https://x.adroll.com/ads/EObh8in-eD","metadata":"I1E_Y300x600"},{"renderUrl":"https://x.adroll.com/ads/AKBXzbrrMq","metadata":"I1E_Y300x600"},{"renderUrl":"https://x.adroll.com/ads/2aT-qbTmPn","metadata":"I1E_Y320x50"},{"rende

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1356
Entropy (8bit):	4.260386478062559
Encrypted:	false
SSDEEP:	24:tHtXTu3MMG9L+MgRCXiPMwOLVGMoyxNQeYf//zt8acPh91TceF5acR3SXkpfzbsK:lhvqMgRCXiP1zyNQtJcJceF3hpHsK
MD5:	698142F6D41E24AAC664374FE404328E
SHA1:	608A38621108D85B154C9BD3EB2A9C6006BECAB4
SHA-256:	83A31653061BC451E16475624698D1FE300D9A81F7CE9C27D524BA2BB625C7FD
SHA-512:	54301CD7114B457484C920E48A6C9AC0D29F79967D8F549F8DD25A90C05763E258C409B4F9C1646AC13EBDE837856D0716A4CFA588F583D10120CED787087F36
Malicious:	false
Reputation:	low
Preview:	<svg width="27" height="27" viewBox="0 0 27 27" fill="none" xmlns="http://www.w3.org/2000/svg">. <path fill-rule="evenodd" clip-rule="evenodd". d="M1.29239 1.72491C1.88657 1.16565 2.6622 0.885742 3.61945 0.885742C4.57675 0.885742 5.34406 1.16541 5.92056 1.72491C6.49713 2.28436 6.79144 2.99066 6.80298 3.8443C6.81442 4.6864 6.52322 5.38995 5.92929 5.95502C5.33536 6.52032 4.55377 6.8028 3.58478 6.8028H3.55017C2.60437 6.8028 1.84299 6.52008 1.26645 5.95502C0.689697 5.38995 0.401367 4.68616 0.401367 3.8443C0.401367 2.9906 0.698242 2.28436 1.29239 1.72491ZM25.1771 10.7073C23.9777 9.39813 22.3914 8.74341 20.4192 8.74341C19.6925 8.74341 19.032 8.83282 18.4379 9.01166C17.8439 9.19043 17.3423 9.44128 16.9327 9.76428C16.5233 10.0873 16.1973 10.3871 15.9553 10.6638C15.7251 10.9267 15.5 11.2328 15.2804 11.5792V9.14105H9.58789L9.60535 9.97168C9.61703 10.5255 9.6228 12.2325 9.6228 15.0929C9.6228 17.9536 9.61127 21.6849 9.58813 26.2872H15.2804V16.7191C15.2804 16.131 15.3435 15.6639 15.4706

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	443
Entropy (8bit):	4.80128738945247
Encrypted:	false
SSDEEP:	12:trwdU/gKui+7D7tEXAzh/e0pVZQehWhrT/NzNfuzQK0:tYU/duphEwzhm0p7ZYB10zt0
MD5:	2CD1BD8E027D75F5A080FAED2A847E4D
SHA1:	75C94AC0CDBB1F6C1D7EF2B8D203015434518858
SHA-256:	CB3089825EC65A6505826566F9378D3146731539E4DA60A2A73393AE6816C5F1
SHA-512:	682098514305E2934E12024806DEE8C2B9054C90FCF0ADC02016AD96669D51D8A971BC73F3FACF7F114C8A0C8A83C63E245A5BF560BEF41E5894F2FC9ABAB656
Malicious:	false
Reputation:	low
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M9 9H15V15H9V9Z" fill="black"/>. <path d="M20 6C20 4.897 19.103 4 18 4H17V2H15V4H13V2H11V4H9V2H7V4H6C4.897 4 4 4.897 4 6V7H2V9H4V11H2V13H4V15H2V17H4V18C4 19.103 4.897 20 6 20H7V22H9V20H11V22H13V20H15V22H17V20H18C19.103 20 20 19.103 20 18V17H22V15H20V13H22V11H20V9H22V7H20V6ZM6 18V6H18L18.002 18H6Z". fill="black"/>.</svg>.

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	144
Entropy (8bit):	4.54178832719941
Encrypted:	false
SSDEEP:	3:YAv+e9BAJ6YSm7XJHIzRNg+wjNXWRwFH1j66qVVJMdMQUWKLb+AHfgq+WRHYn:YAme2J6YBDJHIlNgDXWqH1jwVJMyb/4l
MD5:	F447C440ABF2B8AF203938329FE494F8
SHA1:	3E071AE6400D84FB2EBE38EAEE60E1161D9F4556
SHA-256:	11BBA994684E05187E8CB291F03254CE7810FB3EABBC900299F078F2E584550F
SHA-512:	BC05CEC72D8512A1CE483156BDCD963199EBFFD224D991AABAD638D3FA075CD7C96E20B20B85C7224925B8263143772174B3BC824EA258C0B196C83E03007C9F
Malicious:	false
Reputation:	low
Preview:	{"errors":[{"code":"media_type_not_acceptable","message":"The Accept header should send a media type of application/json"}],"type":"error.list"}

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (37205), with NEL line terminators
Category:	downloaded
Size (bytes):	99878
Entropy (8bit):	5.428445380860574
Encrypted:	false
SSDEEP:	1536:12eFH3V2LxziVPfqyl94DlBDsB7/Xpy+rUAmHZtM9YCP4U/g:1lFH3VcW3V7/14j
MD5:	8652F5DC8B385541837A75710421A42A
SHA1:	F52C293DD8858CFB26A3B42558F40B22C74C877D
SHA-256:	06741E0B1B707C98BD7CD60E83AFEEACC013F6789D1A1FB61E874E3360D2B385
SHA-512:	20F792FD5BBA925B173A01E870C7C61B43596AC14E4860B4786165C2720DF34AB4ED5A18CC4CF6F9400533B6B23F6FF9573D2435B25694C15E0505066C99C24D
Malicious:	false
Reputation:	low
URL:	https://cdn-cookieyes.com/client_data/9022a6a83360995949fccfed/script.js
Preview:	!function(){var t={3241:function(){"document"in window.self&&((!("classList"in document.createElement("_"))\|\|document.createElementNS&&!("classList"in document.createElementNS("http://www.w3.org/2000/svg","g")))&&function(t){"use strict";if("Element"in t){var e="classList",r=t.Element.prototype,n=Object,o=String.prototype.trim\|\|function(){return this.replace(/^\s+\|\s+$/g,"")},i=Array.prototype.indexOf\|\|function(t){for(var e=0,r=this.length;e<r;e++)if(e in this&&this[e]===t)return e;return-1},a=function(t,e){this.name=t,this.code=DOMException[t],this.message=e},c=function(t,e){if(""===e)throw new a("SYNTAX_ERR","An invalid or illegal string was specified");if(/\s/.test(e))throw new a("INVALID_CHARACTER_ERR","String contains an invalid character");return i.call(t,e)},s=function(t){for(var e=o.call(t.getAttribute("class")\|\|""),r=e?e.split(/\s+/):[],n=0,i=r.length;n<i;n++)this.push(r[n]);this._updateClassName=function(){t.setAttribute("class",this.toString())}},u=s.prototype=[],f=function(

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1749
Entropy (8bit):	3.9886336290882483
Encrypted:	false
SSDEEP:	48:n/eeDiGBZVANlh+1iUZ41RV6Fimz0hwGvEPbq6Z:nhi/3P8YMDohwOEfZ
MD5:	C963F434EF227D637C0829B1EDBA776C
SHA1:	9E542575F547818505ADB8D621EB4AC458A4F6BB
SHA-256:	CCFAEA0298A18A8C45040D7A42E20F7084850B0054136914FAF02E4F10D44450
SHA-512:	8825D1A3FB6969B8DBA5BF120F03A09F60E42720D28AF5D66E818E66A9FC7803644B18D342B4D7CFE90A11588311FF14F3FE1C1E347CA295049A02120FA75B72
Malicious:	false
Reputation:	low
URL:	https://profile.cex.io/static/resources/media/phone.svg
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M17.7073 12.2932C17.6145 12.2003 17.5043 12.1265 17.383 12.0762C17.2617 12.0259 17.1317 12 17.0003 12C16.869 12 16.739 12.0259 16.6176 12.0762C16.4963 12.1265 16.3861 12.2003 16.2933 12.2932L14.6993 13.8872C13.9603 13.6672 12.5813 13.1672 11.7073 12.2932C10.8333 11.4192 10.3333 10.0402 10.1133 9.3012L11.7073 7.7072C11.8003 7.61441 11.874 7.50421 11.9243 7.38289C11.9746 7.26158 12.0005 7.13153 12.0005 7.0002C12.0005 6.86887 11.9746 6.73882 11.9243 6.61751C11.874 6.49619 11.8003 6.38599 11.7073 6.2932L7.70733 2.2932C7.61455 2.20026 7.50434 2.12652 7.38303 2.07621C7.26171 2.0259 7.13167 2 7.00033 2C6.869 2 6.73896 2.0259 6.61764 2.07621C6.49633 2.12652 6.38612 2.20026 6.29333 2.2932L3.58133 5.0052C3.20133 5.3852 2.98733 5.9072 2.99533 6.4402C3.01833 7.8642 3.39533 12.8102 7.29333 16.7082C11.1913 20.6062 16.1373 20.9822 17.5623 21.0062H17.5903C18.1183 21.0062 18.6173 20.7982 18.9953

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	664
Entropy (8bit):	4.724127219942954
Encrypted:	false
SSDEEP:	12:tr2btKuNJf0lX/LxQJV7PEcqKf+zbhVLmtALRtwXgKBzZQZmdEKiHvOPsKx:tCbcuN9M/LxdqFOLridl1EKfXx
MD5:	1E51912D353735E78D1F1503BF4B92BF
SHA1:	EBFF9E3AB5C2B7B532A50780CB54A16651966A05
SHA-256:	9C03093325FB5C2D4D342E993A8BD77E5A8B2E6D8D8CF11A7A9542538B895B07
SHA-512:	F7814D8313BD6B9E154F7F46E30FA3818701F035FB78317EB3993A4490EDB7FA6D2F282BBA31C29F13090C79C4ABB9679354EC5F5C6F4B507D0BB985B4B9BB96
Malicious:	false
Reputation:	low
URL:	https://profile.cex.io/static/resources/media/ua.svg
Preview:	<svg width="48" height="48" viewBox="0.06 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">. <g clip-path="url(#clip0)">. <path d="M12.0664 24C18.6938 24 24.0664 18.6274 24.0664 12C24.0664 5.37258 18.6938 0 12.0664 0C5.43899 0 0.0664062 5.37258 0.0664062 12C0.0664062 18.6274 5.43899 24 12.0664 24Z". fill="#FFDA44"/>. <path d="M0.0664062 12C0.0664062 5.37262 5.43903 0 12.0664 0C18.6938 0 24.0664 5.37262 24.0664 12". fill="#338AF3"/>. </g>. <defs>. <clipPath id="clip0">. <rect width="24" height="24" fill="white" transform="translate(0.0664062)"/>. </clipPath>. </defs>.</svg>.

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	7579
Entropy (8bit):	3.2946184785903534
Encrypted:	false
SSDEEP:	192:PymZpA7ZiuVM903JSZqiUcviSC3HNRDRnqkueUCyOxWPd16ScmEY6jGaXCyL:q3dJ9F
MD5:	41866B73F61B73A1E5EE337464B1C005
SHA1:	363DA5488738B233FB9E779014E3D9A2489B39F7
SHA-256:	1B7637E0D7D681F6FBB52573325DBBF3E4ED406AA5996947F38551E3AB9EB7F3
SHA-512:	6D01B0B8CE28939EE5FD2826D05CA45636A874A58F287283DBC902159B544D54F2A1FB79C36327B11836E21972AA8BC64E35ED1733B444221A8968358D91F778
Malicious:	false
Reputation:	low
URL:	https://profile.cex.io/static/resources/content/header.json
Preview:	{. "companyLogo": {. "title": "CEX.IO",. "link": "https://cex.io/",. "icon": "cex-full-logo",. "iconLegacy": "cexFullLogo",. "width": 139,. "height": 40. },. "menu": {. "products": {. "title": "Products",. "icon": "grid",. "columns": {. "traders": {. "title": "For Traders",. "links": {. "exchange": {. "icon": "exchange",. "iconLegacy": "exchange",. "title": "Spot Trading",. "desc": "Trade crypto with deep liquidity, advanced charts, stop orders.",. "link": "https://trade.cex.io/spot?source=cexplus-products-header". },. "api": {. "icon": "chip",. "iconLegacy": "chip",.

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	118
Entropy (8bit):	4.625003735668116
Encrypted:	false
SSDEEP:	3:YMKUcLRJyJGKeMfQ2pHG/4HviaNmX/ZQpsL8KqyRHfHyY:YMKUcmJGK+2pHrHaaNmXxtwwyY
MD5:	F6C1DC57C6EB6CE08F706EF410EABBF9
SHA1:	B23FEDB4F8F680F3536BEC7E9E7A5EF1E35488DE
SHA-256:	B3FB9A644557DE6095644489CE1E3044EA6CC6A743F421F471A2201E67375BCF
SHA-512:	21B66E4141063C6CFA12994867BC7E4B29C55813ECDC7AC5E67DAC3D396D3C8BC290FBF26FAC5046E0281A569811D8E2A144F4B6F95674F549527EEDE2460C96
Malicious:	false
Reputation:	low
URL:	https://directory.cookieyes.com/api/v1/ip
Preview:	{"ip":"102.165.48.43","country":"US","country_name":"United States","region_code":"DC","in_eu":false,"continent":"NA"}

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	239
Entropy (8bit):	4.862784697321541
Encrypted:	false
SSDEEP:	6:tnrwdhC/gKumc4slZRIPNXj6ZuUjF7qyxd3FNXjIK52:trwdU/gKuiFT6ZuYjxBLTIK0
MD5:	8FBDAF71B652D52DE4F246DD6C57E175
SHA1:	15B9AD8354338C5F0F6E2E0E3EC85672618A8ACB
SHA-256:	6B9A36EB997A1C05DE8044AA5D0B8C7A5C42C23369DE3FB82DB67BF01456DE7D
SHA-512:	E6D77E5DD5AC5488EBA40800522DE699FAC590A0189A637BCBA81C24C76EFE6983B7D8677E1D381A8204055B48F0DB0BB6631EE1A31DFC6326460E9F9C5ECD2B
Malicious:	false
Reputation:	low
URL:	https://profile.cex.io/static/resources/media/chevron-down.svg
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M16.293 9.29297L12 13.586L7.70697 9.29297L6.29297 10.707L12 16.414L17.707 10.707L16.293 9.29297Z". fill="black"/>.</svg>.

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29025)
Category:	downloaded
Size (bytes):	678143
Entropy (8bit):	5.60261722256168
Encrypted:	false
SSDEEP:	12288:Dld09IUUktHe9CjFV4Ch1+QtKIe6oF4hFbFagO9DJPZgA9fg6Ttk:5y9IA
MD5:	503C57EC776613382A962862F5913DF6
SHA1:	A091E416ABD2AB39B4B6B1ADC6A87F9DC4C5021F
SHA-256:	DA0ABA56C4EA88EB7BB16C0258C7E4C1F75747565D737A37A6C5FEF35769D271
SHA-512:	2EB7C8125E363D3EBF981F0E11A55ABBAF040CDEDF53AB1F5BB60A43F837C336A5C2864A4100D2E602AEF7274105C22E44C31A649B7CEF8D9A4B9143B06AE404
Malicious:	false
Reputation:	low
URL:	https://static.cex.io/bundles/scripts/singleBundleFlowWidget.js
Preview:	var requirejs,require,define;(function(ca){function G(b){return"[object Function]"===N.call(b)}function H(b){return"[object Array]"===N.call(b)}function v(b,c){if(b){var d;for(d=0;d<b.length&&(!b[d]\|\|!c(b[d],d,b));d+=1);}}function U(b,c){if(b){var d;for(d=b.length-1;-1<d&&(!b[d]\|\|!c(b[d],d,b));d-=1);}}function s(b,c){return ga.call(b,c)}function j(b,c){return s(b,c)&&b[c]}function B(b,c){for(var d in b)if(s(b,d)&&c(b[d],d))break}function V(b,c,d,g){c&&B(c,function(c,h){if(d\|\|!s(b,h))g&&"object"===typeof c&&c&&!H(c)&&!G(c)&&!(c instanceof.RegExp)?(b[h]\|\|(b[h]={}),V(b[h],c,d,g)):b[h]=c});return b}function t(b,c){return function(){return c.apply(b,arguments)}}function da(b){throw b;}function ea(b){if(!b)return b;var c=ca;v(b.split("."),function(b){c=c[b]});return c}function C(b,c,d,g){c=Error(c+"\nhttp://requirejs.org/docs/errors.html#"+b);c.requireType=b;c.requireModules=g;d&&(c.originalError=d);return c}function ha(b){function c(a,e,b){var f,n,c,d,g,h,i,I=e&&e.split("/");n=I;var m=l.map

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1711719899067&id=t2_fngyx&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=586ad4c0-3fa0-43ef-b6b6-cef72ecf199f&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27581)
Category:	downloaded
Size (bytes):	44888
Entropy (8bit):	5.503225947742622
Encrypted:	false
SSDEEP:	768:lIeyQ4UXMomxX8CV5wxVo6JAriRt/ak6dX6hJ1H:lBxmxTUVomeif/ak6dX6hJ1
MD5:	0B1127E3C1B99D6A5B2F81E37E300CCD
SHA1:	7C09CFBFC8D7FEF1F3E51A8764A13E9CF0D10848
SHA-256:	1EEBBE20A7E11128EE261E88CADBC5F467F81690A0BB0A8AA2A529A8F04AEE43
SHA-512:	30244132ADB60881F70AB712F15D40C0EC732FECC692816C98F022F46B3DBF42CC62D9CFEE25CBDAC011681CED6C91FB5C0397C255B2D24F4DC5FCB9607DBCD6
Malicious:	false
Reputation:	low
URL:	https://sc-static.net/scevent.min.js
Preview:	/** Snapchat Pixel SDK */.!function(){"use strict";var t=function(){return t=Object.assign\|\|function(t){for(var n,r=1,e=arguments.length;r<e;r++)for(var i in n=arguments[r])Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i]);return t},t.apply(this,arguments)};function n(t,n,r,e){return new(r\|\|(r=Promise))((function(i,o){function a(t){try{u(e.next(t))}catch(t){o(t)}}function c(t){try{u(e.throw(t))}catch(t){o(t)}}function u(t){var n;t.done?i(t.value):(n=t.value,n instanceof r?n:new r((function(t){t(n)}))).then(a,c)}u((e=e.apply(t,n\|\|[])).next())}))}function r(t,n){var r,e,i,o,a={label:0,sent:function(){if(1&i[0])throw i[1];return i[1]},trys:[],ops:[]};return o={next:c(0),throw:c(1),return:c(2)},"function"==typeof Symbol&&(o[Symbol.iterator]=function(){return this}),o;function c(c){return function(u){return function(c){if(r)throw new TypeError("Generator is already executing.");for(;o&&(o=0,c[0]&&(a=0)),a;)try{if(r=1,e&&(i=2&c[0]?e.return:c[0]?e.throw\|\|((i=e.return)&&i.call(e),0):e.nex

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1281)
Category:	downloaded
Size (bytes):	96157
Entropy (8bit):	5.469089283880079
Encrypted:	false
SSDEEP:	1536:+eHxNKQwDst6OZChM9hxvisGdWpk7nCI8Ra4+:AgEsGdEw
MD5:	1B038565C6CFA89879562836DA66149D
SHA1:	AF1715C618E5947B974D47CAA8A331BA473BFC68
SHA-256:	FCCD0B114FFF85F75CAF77413196DE7618FFDA9090BE552C6326233FDC80006F
SHA-512:	AB33FDB6E2B7BCBA893388AF35FA43316C6F16D197037710E335A421F6FA26E396D1E38D20953502529DA0241C897FA07E578A303B5EE7032016B51790F5779F
Malicious:	false
Reputation:	low
URL:	https://s.adroll.com/j/7UKK4UJQK5H4LI4OCBFPWX/roundtrip.js
Preview:	try {. . __adroll.load_adroll_tpc(__adroll.render_advertisable_cell);.}.catch(e) {}..try {. function __adroll__(){this.pxlstart=(new Date).getTime();this.version="2.0";this.exp=8760;this.eexp=720;this.pv=1E11Math.random();this.__adc="__ar_v4";this._loaded=this._broken=!1;this._url=2E3;this._kwl=300;this._r={};this._logs=[];this.cm_urls=[];this.consent_networks={facebook:"f",linkedin:"linkedin"};this.pixelstart=this.session_time=0;this._init_idb();this._init_floc_trial();for(var a=Array(4),b=0;b<a.length;b++)a[b]=(Math.round(1E11Math.random()).toString(16)+Array(9).join("0")).substr(0,.8);this._set_global("adroll_sid",a.join(""));this._has_global("adroll_adv_id")&&(this.init_pixchk(),this.trigger_gtm_consent_event(),this.load_pixel_assistant(),["adroll_adv_id","adroll_pix_id"].forEach(function(a){window.hasOwnProperty(a)&&("string"===typeof window[a]\|\|window[a]instanceof String)&&(window[a]=window[a].replace(/[^A-Z0-9_]/g,""))}));window.adroll=window.adroll\|\|{};window.adr

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1138
Entropy (8bit):	4.160045356415514
Encrypted:	false
SSDEEP:	24:tYU/duwkhJ5Ev3F0cHGsuKc+l/j8+JwazWoO3277nL8UvU474yXJi00:n/a5w3GcHXVl/jpKUO30Do6v1Ji
MD5:	9627CEEF10743DDB90F3D7138B3F2CBD
SHA1:	02FF60EA5AAE9D4B6254235C7221D1EB13674B2B
SHA-256:	F240CABC5D11BE8A3F9D96A504E5738F1E806A6E70A1153ACD72F30BC1C46244
SHA-512:	AB5D853A036C817084EADB3EEEF3A51FBE48464AE35F3C32D4701980D2713136C3F365EE4CD71A8A1509E11827D0ACC566DBA33321887ED685E620E6A23756FD
Malicious:	false
Reputation:	low
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M12 2C6.579 2 2 6.579 2 12C2 15.189 3.592 18.078 6 19.924V20H6.102C7.77 21.245 9.813 22 12 22C14.187 22 16.23 21.245 17.898 20H18V19.924C20.408 18.078 22 15.19 22 12C22 6.579 17.421 2 12 2ZM8.074 18.927C8.22136 18.2604 8.59154 17.6639 9.12347 17.236C9.6554 16.808 10.3173 16.5742 11 16.573H13C13.6827 16.5744 14.3445 16.8083 14.8764 17.2362C15.4082 17.6641 15.7785 18.2605 15.926 18.927C14.758 19.604 13.416 20 12 20C10.584 20 9.242 19.604 8.074 18.927ZM17.61 17.641C17.2286 16.7329 16.5877 15.9574 15.7677 15.4117C14.9477 14.866 13.985 14.5742 13 14.573H11C10.015 14.5742 9.05227 14.866 8.23227 15.4117C7.41227 15.9574 6.77144 16.7329 6.39 17.641C4.923 16.182 4 14.176 4 12C4 7.663 7.663 4 12 4C16.337 4 20 7.663 20 12C20 14.176 19.077 16.182 17.61 17.641Z". fill="black"/>. <path d="M12 6C9.72 6 8 7.72 8 10C8 12.28 9.72 14 12 14C14.28 14 16 12.28 16 10C16 7.72 14.28 6 12 6ZM1

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	151177
Entropy (8bit):	5.136527545899764
Encrypted:	false
SSDEEP:	1536:KHoHgHmP8haPYHMP0HME9qTHbHuhacP55VXezHM54:dPpPPPGPLY
MD5:	B0F6EA9C9CCFDB77519753A93225FE55
SHA1:	188596D00B91E46433E089A9C45DCC422ED52D90
SHA-256:	2F41FD2CD353634035EAE98D87E807FE11CE6C8CAE0B85FFE79EF5D31F3F0917
SHA-512:	4F3E09D80BAB1F81EE120A2B5AA1399C0AAAFBAA60701555236A00530543505F404D9C19E2317104DD71BE2A7BFC1E94B3C881209243CEA6AE32FC4C675DCBF0
Malicious:	false
Reputation:	low
URL:	https://static.cex.io/landings/css/ui-components.css?v=1.8.83
Preview:	.cex-ui-button{width:100%;display:flex;justify-content:center;align-items:center;cursor:pointer}.cex-ui-button-big{border-radius:16px;height:60px;font-size:18px;line-height:26px}.cex-ui-button-big .cex-ui-icon{height:24px;width:24px}.cex-ui-button-small{border-radius:8px;height:32px;font-size:14px;line-height:22px}.cex-ui-button-small .cex-ui-icon{height:16px;width:16px}.cex-ui-button-primary-contained{border:1px solid transparent;background-color:#1bb6c1;color:#fff;transition:-webkit-transform .3s;transition:transform .3s;transition:transform .3s,-webkit-transform .3s;transition:transform .3s,-webkit-transform .3s}.cex-ui-button-primary-contained .cex-ui-icon *{fill:#fff}.cex-ui-button-primary-contained .cex-ui-icon-left{margin-right:8px}.cex-ui-button-primary-contained .cex-ui-icon-right{margin-left:8px}.cex-ui-button-primary-contained:hover:not([disabled]){-webkit-transform:translateY(-1px);transform:translateY(-1px);background-color:#2bcbd7}.cex-ui-button-primary-contained:active:n

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450)
Category:	downloaded
Size (bytes):	225445
Entropy (8bit):	5.378711341053158
Encrypted:	false
SSDEEP:	3072:yhwvwV82wOdix0bgz6Fk7YLUaLdmBRDYH:yhwvwUOExEQokbasbDYH
MD5:	645FC548E91F44AA4E1226EE86502370
SHA1:	E4075A2E73B3AB050D85F985847E5DB554B3B2C2
SHA-256:	6265CA724F73E24568A94C7EA752B44E491C10231BFC8E80E86CD3F02EAB2E71
SHA-512:	F6E58EFE8E5B084703B995C644C4D530F4955909DDBBB23E21F8939DD6C8D57C82A62E249561D4B1CDCDEFDCB42C1747CC166145A936A928C59CC53B51E23BDE
Malicious:	false
Reputation:	low
URL:	https://script.hotjar.com/modules.ad6500eebe72fe1c39dd.js
Preview:	/! For license information please see modules.ad6500eebe72fe1c39dd.js.LICENSE.txt /.!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_recording",TAG_RECORDING:"tag_recording",HEATMAP_HELO:"heatmap_helo",RECORDING_HELO:"recording_helo",REPORT_USER_ID:"report_user_id",MUTATION:"mutation",MOUSE_CLICK:"mouse_click",INPUT_CHOICE_CHANGE:"input_choice_change",KEY_PRESS:"key_press",MOUSE_MOVE:"mouse_move",RELATIVE_MOUSE_MOVE:"relative_mouse_move",CLIPBOARD:"clipboard",PAGE_VISIBILITY:"page_visibility",SCROLL_REACH:"scroll_reach",SCROLL:"scroll",SELECT_CHANGE:"select_change",VIEWPORT_RESIZE:"viewport_resize",SCRIPT_PERFORMANCE:"script_performance",REPORT_CONTENT:"report_content",INSERTED_RULE:"inserted_rule",DELETED_RULE:"deleted_rule"})},6939:function(e,t,n){"use strict";n.d(t,{f:function(){return f},W:function(){return g}});const r=Object.freeze({LIVE:"LIVE",REVIEW_WEBAPP:"REVI

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	644
Entropy (8bit):	4.357439504074708
Encrypted:	false
SSDEEP:	12:trwdU/gKuivgRbicypWRyU7+4G/VENjv4AYCLjMYK0:tYU/duAgpPypWRr7+4Gt2vdYCLYl0
MD5:	DD2F619F6FFEFC6E65665A8A8C1E73F9
SHA1:	42AA9EED1BE83D5AD40EED99FE948FB70CD35C48
SHA-256:	3547DC2739CA2993E6968F847BE891D6921B4F033E06276668BC7FB751B76862
SHA-512:	0A26931F548EFDD0E0E8EB92DA965210DF36CD7E77A922855E93E32C9E027B7273F9A5B828678356900FE77622AF1975DACDB0881A46B5F2E392F853392655D8
Malicious:	false
Reputation:	low
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M20 17V7C20 4.832 16.337 3 12 3C7.663 3 4 4.832 4 7V17C4 19.168 7.663 21 12 21C16.337 21 20 19.168 20 17ZM12 5C15.691 5 17.931 6.507 18 6.994C17.931 7.493 15.691 9 12 9C8.309 9 6.069 7.493 6 7.006C6.069 6.507 8.309 5 12 5ZM6 9.607C7.479 10.454 9.637 11 12 11C14.363 11 16.521 10.454 18 9.607V11.994C17.931 12.493 15.691 14 12 14C8.309 14 6.069 12.493 6 12V9.607ZM6 17V14.607C7.479 15.454 9.637 16 12 16C14.363 16 16.521 15.454 18 14.607V16.994C17.931 17.493 15.691 19 12 19C8.309 19 6.069 17.493 6 17Z". fill="black"/>.</svg>.

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	47
Entropy (8bit):	4.110454745700462
Encrypted:	false
SSDEEP:	3:YWR4bliMW/lLan:YWybliX/lLa
MD5:	18E5F72F59FCC9DA001D878C1535E7F9
SHA1:	52C62D64AFF3F89F5C27F6E48B728DB1C052734D
SHA-256:	6756169482BB0E6574070224224E145C838B9E65D28026666A41F14520EDB4ED
SHA-512:	FE390526B575C3B908C69360767A543269D244BD45F7C6CE1932DC57CE3EC099294C4F5A6C5F495023DE2F092338C4DF7596A05348DB094341E763032D3A79D7
Malicious:	false
Reputation:	low
URL:	https://cex.io/is-user-logged-in
Preview:	{"status":"ok","data":{"isUserLoggedIn":false}}

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15086
Entropy (8bit):	3.265251543777828
Encrypted:	false
SSDEEP:	96:jRbuxxxxxxxxxxxxxxxxxxxxx+Eb9ZZZZZ9ZZZZxa2r7ZHS0ZZZZZ9ZZZZl/spDg:jRbrEXrj/spDzx24X/l/K0HufJLh
MD5:	B262D2C26924F3261B88C08481A313D1
SHA1:	A181B7676D48F9E236F5D8AD9737FDC00A33CF8F
SHA-256:	547259210F4BA7D8C5970CC9F6AD04F766A78D3C5DB436B1C4E7C9434406A72C
SHA-512:	6B29E0038D36D01D5E5CB8FFDB95ECCD7133B205625939CC55151A63C1353DA3CE45D8A3BDA5B3B73C454F476C0105D22BF526CC3FD096C5AA3047EAA911F33E
Malicious:	false
Reputation:	low
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$.............................................................................................:...k...............................................................................................................................................................................=.......................................................................................................................................................................................S.......................................................................................................................................................................................=...........................................................................................................................................................................................\|..............................................................................................

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	774
Entropy (8bit):	4.352691505629691
Encrypted:	false
SSDEEP:	24:tdHbuyfwcGpvrAD/atiJx0pp2rBr+qFltW:D9wcGdrWCUUKZ5o
MD5:	ED4E5CBC5EBBE7B9BBF931462932C655
SHA1:	6CA10C3918E79E78CF2DD6477598A2189A314631
SHA-256:	84943B5D5AF399EF66EA8FF25C492CEA16C16DEBA3816DF175DBA322C7E0A109
SHA-512:	750CFC10FE9A162B0BEEB1C570920670F8C455C4B70D3CF66BC55FCF967ED3E200CE874A33100660BC3E3FEAE36BEFA60273DB9F940DC298DE6A291A763CBED8
Malicious:	false
Reputation:	low
Preview:	<svg width="34" height="30" viewBox="0 0 34 30" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M0.600541 14.3849L8.43483 17.3481L11.4672 27.231C11.6612 27.864 12.425 28.0979 12.9319 27.6779L17.2989 24.0701C17.7566 23.6921 18.4086 23.6733 18.887 24.0252L26.7635 29.8204C27.3058 30.2199 28.0741 29.9187 28.2101 29.2546L33.98 1.12781C34.1284 0.402388 33.4251 -0.20278 32.7435 0.0643717L0.591361 12.6342C-0.202087 12.9443 -0.195173 14.0827 0.600541 14.3849ZM10.9785 15.7707L26.2896 6.21403C26.5648 6.04278 26.8479 6.41985 26.6116 6.64198L13.9755 18.5455C13.5313 18.9645 13.2448 19.5252 13.1637 20.1338L12.7332 23.3665C12.6762 23.7981 12.0779 23.841 11.9604 23.4233L10.3049 17.5283C10.1153 16.856 10.3916 16.1378 10.9785 15.7707Z". fill="#0C87F2"/>.</svg>.

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	786
Entropy (8bit):	4.509756326107144
Encrypted:	false
SSDEEP:	24:tYRUyKuHCzE2sHhgY1siM5WOuTIB4+7Du1kJjWEJb0:gxV2suni0WZIaYDoEK
MD5:	FB3690EFFE93F63238CCCDD4623CF40B
SHA1:	E3798D9DD352803A0F8A5AC331B4FB66CC6D761D
SHA-256:	6DD6D9917E775628FB11E7EE4EE901D8CA821D585C6383221C289CB9A5342CCE
SHA-512:	0CC5D70B3BC9036A0250065D688A0B8D7F40E2CFD57E33E417BDF45D850257B97F33C389A269E539127CCC31217552BA5CF88E381F76371853A47BC4E727046C
Malicious:	false
Reputation:	low
Preview:	<svg width="24" height="25" viewBox="0 0 24 25" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M4.64961 22.0498C4.01628 22.0498 3.47461 21.829 3.02461 21.3873C2.57461 20.9456 2.34961 20.4081 2.34961 19.7748V5.2498C2.34961 4.61647 2.57461 4.0748 3.02461 3.6248C3.47461 3.1748 4.01628 2.9498 4.64961 2.9498H14.0746V5.2498H4.64961V19.7748H19.1746V10.3248H21.4496V19.7748C21.4496 20.4081 21.2204 20.9456 20.7621 21.3873C20.3038 21.829 19.7746 22.0498 19.1746 22.0498H4.64961ZM17.7496 8.9998V6.6998H15.4246V4.9748H17.7246V2.6748H19.4496V4.9498H21.7496V6.6748H19.4496V8.9998H17.7496Z" fill="black"/>. <path d="M5.29688 16.3459L6.45099 17.5L9.84118 14.1338L12.0051 16.2978L17.1746 11.1043L16.0205 9.9502L12.0051 13.9655L9.84118 11.8016L5.29688 16.3459Z" fill="black"/>.</svg>.

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	200
Entropy (8bit):	5.08979335248171
Encrypted:	false
SSDEEP:	6:tnrwdhC/gKumc4slZRIQ3oJgOKjdzkR52:trwdU/gKuiQ3oJgOKyR0
MD5:	39C25CC9AB95739A7AC4A08721807F08
SHA1:	9940FACC8756E5B90C7703EC8098F54A3B25BEED
SHA-256:	0659129ECFFB979A4A43BD902BDA41980C3C23E6B94AF8AC9AA88FE8511903F4
SHA-512:	396A0703F1F9FAA36AFE33C79EF7A0FA9B69C6E8833FE7A2454AF3C167B91F01BF7BA3264F54C2161C04953B4233205E8A71CF4DDA3256EC47F9565F52956803
Malicious:	false
Reputation:	low
URL:	https://profile.cex.io/static/resources/media/transfer.svg
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M16 12L20 8L16 4V6.999H2V8.999H16V12ZM8 12L4 16L8 20V17H22V15H8V12Z" fill="black"/>.</svg>.

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3852), with no line terminators
Category:	downloaded
Size (bytes):	3852
Entropy (8bit):	5.391206915961338
Encrypted:	false
SSDEEP:	96:bp4VYgEi6oEipiFlzACOHTAS2ykb72OX3bIrXpwKk:bpaYgvDrEF1AJMS2ykH3X3srX2Z
MD5:	80AF0D6CF59C193E26BEF57345E4E4DC
SHA1:	3BF0DABB57E189AE598EE13E697AAD1DC84FC03C
SHA-256:	39FCB3F653FF7BCC895FC996C9949B82D50A719029EF687254B5545651441C0B
SHA-512:	052213F5885A75F8E08A270FBE1CCBA24D7AE439609EAB9420889D7D5D91AC87FB88EF1BF0C6037E8538BFF63886D497EB14A3714BC493EC9C271D375C3FE3BD
Malicious:	false
Reputation:	low
URL:	https://static.cex.io/bundles/scripts/bundleWidgetLoader.js
Preview:	!function(){var e=new XMLHttpRequest,t=document.currentScript.getAttribute("originator")\|\|"cex",i=document.currentScript.getAttribute("baseUrl")\|\|"https://cex.io/",a=document.currentScript.getAttribute("staticUrl")\|\|"https://static.cex.io/",n=document.currentScript.getAttribute("isNeedCss")\|\|!0;window.originator=t;var r,s=document.getElementById("single-bundle-widget");s.setAttribute("style","width: 100%; height: 521px; overflow: hidden; position: relative;");var l=document.createElement("div");l.setAttribute("style","position: absolute; width: 100%; height: 100%; background-color: transparent; display: flex; justify-content: center; align-items: center; z-index: 999; opacity: 1; transition: opacity 1s ease;"),l.className="loader-wrapper";l.innerHTML='<svg xmlns="http://www.w3.org/2000/svg" width="60" height="60" class="loader">\n<style>.loader {animation: rotate 2s linear infinite} @keyframes rotate {0%{transform: rotate(0deg)} 100% {transform: rotate(360deg)}}</style><path fill="#707

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27581)
Category:	downloaded
Size (bytes):	44888
Entropy (8bit):	5.503225947742622
Encrypted:	false
SSDEEP:	768:lIeyQ4UXMomxX8CV5wxVo6JAriRt/ak6dX6hJ1H:lBxmxTUVomeif/ak6dX6hJ1
MD5:	0B1127E3C1B99D6A5B2F81E37E300CCD
SHA1:	7C09CFBFC8D7FEF1F3E51A8764A13E9CF0D10848
SHA-256:	1EEBBE20A7E11128EE261E88CADBC5F467F81690A0BB0A8AA2A529A8F04AEE43
SHA-512:	30244132ADB60881F70AB712F15D40C0EC732FECC692816C98F022F46B3DBF42CC62D9CFEE25CBDAC011681CED6C91FB5C0397C255B2D24F4DC5FCB9607DBCD6
Malicious:	false
Reputation:	low
URL:	https://sc-static.net/scevent.min.js
Preview:	/** Snapchat Pixel SDK */.!function(){"use strict";var t=function(){return t=Object.assign\|\|function(t){for(var n,r=1,e=arguments.length;r<e;r++)for(var i in n=arguments[r])Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i]);return t},t.apply(this,arguments)};function n(t,n,r,e){return new(r\|\|(r=Promise))((function(i,o){function a(t){try{u(e.next(t))}catch(t){o(t)}}function c(t){try{u(e.throw(t))}catch(t){o(t)}}function u(t){var n;t.done?i(t.value):(n=t.value,n instanceof r?n:new r((function(t){t(n)}))).then(a,c)}u((e=e.apply(t,n\|\|[])).next())}))}function r(t,n){var r,e,i,o,a={label:0,sent:function(){if(1&i[0])throw i[1];return i[1]},trys:[],ops:[]};return o={next:c(0),throw:c(1),return:c(2)},"function"==typeof Symbol&&(o[Symbol.iterator]=function(){return this}),o;function c(c){return function(u){return function(c){if(r)throw new TypeError("Generator is already executing.");for(;o&&(o=0,c[0]&&(a=0)),a;)try{if(r=1,e&&(i=2&c[0]?e.return:c[0]?e.throw\|\|((i=e.return)&&i.call(e),0):e.nex

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	384635
Entropy (8bit):	5.206778557911576
Encrypted:	false
SSDEEP:	6144:c3qvYHkj1TEn5KEllLLXJvW4hNXAqzA2VGrh9:cq1TEn5u
MD5:	9E55878F4A78FF9B8E3B54B152158A75
SHA1:	587C9EC00F24C075EE2700855C41589B3E0137A7
SHA-256:	8912456E543FD3504A197CAA2156441855539BB16C86C11AE2348C16CDF5F8C9
SHA-512:	2A734C42AEF5076AE18196C577EFB9595B67148A0126400184B844B0E181A61F425A3B96A94751CCA6DCBD6868E32542785BB9EB14BCE2D2A9FC136364B7FDB7
Malicious:	false
Reputation:	low
URL:	https://cex.io/scripts/currencyProfileForWidget/
Preview:	var currencyProfileData = {"cfg":{"GHS":{"scale":0,"customTxLinkFnName":"","precision":8,"fiat":false,"confirmations":6,"commission":0.0001,"minimalWithdrawalAmount":0.01,"name":"GHS","disableCreateVoucher":false,"disableRedeemVoucher":false},"BTC":{"scale":0,"customTxLinkFnName":"","precision":8,"fiat":false,"confirmations":2,"commission":0.0005,"minimalWithdrawalAmount":0.002,"name":"bitcoin","txLink":"http://blockchain.info/tx/","disableCreateVoucher":false,"disableRedeemVoucher":false,"dustLimit":0.0001},"BCH":{"scale":0,"customTxLinkFnName":"","precision":8,"fiat":false,"confirmations":10,"commission":0.001,"minimalWithdrawalAmount":0.01,"name":"BCH","txLink":"https://blockchair.com/bitcoin-cash/transaction/","disableCreateVoucher":false,"disableRedeemVoucher":false,"dustLimit":0.0001},"BTG":{"scale":0,"customTxLinkFnName":"","precision":8,"fiat":false,"confirmations":41,"commission":0.001,"minimalWithdrawalAmount":0.01,"name":"BTG","txLink":"https://btgexplorer.com/tx/","disable

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5563
Entropy (8bit):	7.943567955941959
Encrypted:	false
SSDEEP:	96:JgIvdr/dgmhfmfoGbkHcsqIT6n0ayeUysMCciEbpn1WvpQYyqeUj7XomY5MFuGCT:PRddcsq10aZUyKciEbl1iZYUj74gfCTP
MD5:	FB27C332D1FEBB60005709B9C6CCDEE6
SHA1:	F77609A8355D5895439558E31ABB2F5AC22CD9D6
SHA-256:	FAB304DD19E12F2FB79DFB0C2EF7B9330300DDD77483F0376B153235A4F4C7A0
SHA-512:	835A88E4C512DA19261E243F5AAEE8C0F7965DD19978D04B99EA2F8BCDC6B51194B701D3A8CDCA4283FF71667FDDA062606BFA02D0FBE4B1C3859184021A7C24
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............>U.....IDATx..MrTI..._JHe.(..:..1....$'(.t#.....:..... S.A5....q..E..I`d.`...).\|../3E.[)...x..3..Y!...="<.@.4..K..Z...i....[.Z./.~n.~...@M....(...nS%UAs.;N.eR...C..<.{r..:....+.....I."..I...5....\.....~....PK2..l.').DR........[......\T}.e8.........M.E.[....../@Z...\|.4...dO..5Z...A..3...\|..$..B,0.._..".........K .9LmF=.Rd.[.......{..>D.........m..qA.@`.. ]j-0...SK.!.......f.M{....U.6....O..A.BT^..,w........Qi..{.}..q..g...TR..y'..ePq2....u...-..>.Je"pq4...\...P.!..0...##....77....k...H..xt......PS.....w....Q...Rh.e..Rf..."..w...:.....xrD$8":..'&........I...D...7B-......$u......;..S%.?.?X.O...HZc...../wD..mR..E.m....t.....:}.....Xw.....i.E...z.p.BV0+Q....4W....[.q.m._.l... :.+)..6....7....IT..~..XXzT.\z.".s.F.......!.5pe....?......'..\..Yq.7M.m....xj..cq.........<..x...D.E..l1..SE.....".$.O.M.H...p.SX.....b.p..mnR.0.sQ.'.......VQ...4]..q.J....)A....I\.tg..]....t..M.5.v..E.f....... ..I.........I.R.{...q.....X.`..H

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	239
Entropy (8bit):	4.862784697321541
Encrypted:	false
SSDEEP:	6:tnrwdhC/gKumc4slZRIPNXj6ZuUjF7qyxd3FNXjIK52:trwdU/gKuiFT6ZuYjxBLTIK0
MD5:	8FBDAF71B652D52DE4F246DD6C57E175
SHA1:	15B9AD8354338C5F0F6E2E0E3EC85672618A8ACB
SHA-256:	6B9A36EB997A1C05DE8044AA5D0B8C7A5C42C23369DE3FB82DB67BF01456DE7D
SHA-512:	E6D77E5DD5AC5488EBA40800522DE699FAC590A0189A637BCBA81C24C76EFE6983B7D8677E1D381A8204055B48F0DB0BB6631EE1A31DFC6326460E9F9C5ECD2B
Malicious:	false
Reputation:	low
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M16.293 9.29297L12 13.586L7.70697 9.29297L6.29297 10.707L12 16.414L17.707 10.707L16.293 9.29297Z". fill="black"/>.</svg>.

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	302
Entropy (8bit):	4.856890648737081
Encrypted:	false
SSDEEP:	6:tnrwdhC/gKumc4slZRIx83pPuip7dTjphldB4V7YEG8q8xYK52:trwdU/gKuix891p71jLldCVs8xYK0
MD5:	7D516DB9D49C61EB2B5D5EDB2A5A57D5
SHA1:	B8375CCF51181122AD4A5E4819594A1FD00899C2
SHA-256:	25C54A20D0F0694BB3BBCAEA8CD2E5DF8FA997A267F47BCB0DBC7C268286D36F
SHA-512:	AEADCE6CD150901DFFE6B915DBA89755FDAAA43B8C690E4A3A1F239C208391E6913FD19C6810CE5DC6CC5E67386786B0987BA36F94EAE4CEAD8AA5D35F4D1B56
Malicious:	false
Reputation:	low
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M7.82543 9.59136L13.8937 9.78018L6.90786 16.3444L8.2774 17.8019L15.2633 11.2377L15.0744 17.306L17.0732 17.3682L17.3682 7.88762L7.88762 7.59263L7.82543 9.59136Z". fill="black"/>.</svg>.

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1720
Entropy (8bit):	4.266172667686713
Encrypted:	false
SSDEEP:	48:c2H69HKPLDVXF/9nvQODY+Ih82Kyiuj+KZ7ZBA4x7fQRwus5u:tH6hKP/D9vQOnIh+ySKZ73x74wuEu
MD5:	4CF5D632DA5DF3192DACCB9CBE76686C
SHA1:	D053214C8DE4C452501A00D9ADEB1CA208B96735
SHA-256:	D5DDABB9BD18958B11B852840499A286387E03959475E7AB20348ADA4761F6E5
SHA-512:	D09D04FDD30400574A2AE8AF5B426556C3B56F2F7DAF8F8CDF9BAB69B7CB0440A9DAA8941F1D88FE32188C7E3FA01EFB426C457D5CB8FE2C6970D3443C64F484
Malicious:	false
Reputation:	low
Preview:	<svg width="46" height="29" viewBox="0 0 46 29" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M29.596 3.74951H16.4062V25.247H29.596V3.74951Z" fill="#FF5F00"/>. <path d="M17.7663 14.4998C17.7647 12.4298 18.2349 10.3865 19.1414 8.52464C20.048 6.66275 21.367 5.03103 22.9988 3.75297C20.9778 2.16799 18.5506 1.18238 15.9948 0.908799C13.439 0.635215 10.8576 1.08469 8.5457 2.20585C6.23376 3.32701 4.28456 5.07463 2.92086 7.24897C1.55716 9.4233 0.833984 11.9366 0.833984 14.5017C0.833984 17.0668 1.55716 19.5801 2.92086 21.7544C4.28456 23.9288 6.23376 25.6764 8.5457 26.7976C10.8576 27.9187 13.439 28.3682 15.9948 28.0946C18.5506 27.821 20.9778 26.8354 22.9988 25.2504C21.3665 23.972 20.0471 22.3397 19.1406 20.4771C18.234 18.6145 17.7641 16.5705 17.7663 14.4998Z". fill="#EB001B"/>. <path d="M45.1649 14.5003C45.1648 17.0656 44.4415 19.5791 43.0775 21.7535C41.7136 23.9279 39.7641 25.6755 37.4519 26.7965C35.1396 27.9175 32.558 28.3666 30.002 28.0927C27.4461 27.8187 25.0189

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (23282)
Category:	downloaded
Size (bytes):	28955
Entropy (8bit):	4.930189257275287
Encrypted:	false
SSDEEP:	768:kI69S0syN5+MDLnhQ+bihmQDGQEZveni34DSXpIppeLKQbtgnoATkjMItQdDZe4q:kI69StALnhQCWmQDGQEZvenGsSXpIp8N
MD5:	0AB64A9904892FBA67EAA8E8B948204C
SHA1:	6B716CCA9EE2C3ACEBF332F2CCA44626CEF90D06
SHA-256:	2EE37078D069F59E02FE482E4B0C7F907216AA799A3B2F5FA97CA81D1866F06E
SHA-512:	839F9A5D55420FB8B7C2C4DD9F4E632B9DFF6050F77CA39B7EB02B8AB67D69F279F0BE7BDE751FBE8F8A74C5ABAAFB5B176383BB902EC0BFE62988B93C980941
Malicious:	false
Reputation:	low
URL:	https://cex.io/buy-bitcoins
Preview:	.<!doctype html>.<html>.<head>.<title>Buy Bitcoin with Credit or Debit Card Instantly - CEX.IO</title>.<meta charset="utf-8">.<meta name="format-detection" content="telephone=no">.<meta name="viewport" content="width=device-width, initial-scale=1">.<meta name="description" content="If you want to purchase cryptocurrency, then you look for a reliable crypto exchange. CEX.IO is a secure and reputable platform that allows you to instantly buy Bitcoin with a credit or debit card.">.<meta name="google-site-verification" content="wgvrnzeB9Q7Awc6UGb0eU6aqPLh_28P-LXhz2dVWX3Y" />.<meta name="twitter:card" content="summary" />.<meta name="twitter:title" content="Buy Bitcoin with Credit or Debit Card Instantly - CEX.IO" />.<meta name="twitter:description" content="If you want to purchase cryptocurrency, then you look for a reliable crypto exchange. CEX.IO is a secure and reputable platform that allows you to instantly buy Bitcoin with a credit or debit card." />.<meta name="twitter:image" content

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5563
Entropy (8bit):	7.943567955941959
Encrypted:	false
SSDEEP:	96:JgIvdr/dgmhfmfoGbkHcsqIT6n0ayeUysMCciEbpn1WvpQYyqeUj7XomY5MFuGCT:PRddcsq10aZUyKciEbl1iZYUj74gfCTP
MD5:	FB27C332D1FEBB60005709B9C6CCDEE6
SHA1:	F77609A8355D5895439558E31ABB2F5AC22CD9D6
SHA-256:	FAB304DD19E12F2FB79DFB0C2EF7B9330300DDD77483F0376B153235A4F4C7A0
SHA-512:	835A88E4C512DA19261E243F5AAEE8C0F7965DD19978D04B99EA2F8BCDC6B51194B701D3A8CDCA4283FF71667FDDA062606BFA02D0FBE4B1C3859184021A7C24
Malicious:	false
Reputation:	low
URL:	https://downloads.intercomcdn.com/i/o/475519/eabaa4fa79044587e479220a/41bec6986704a574349426a752d128dc.png
Preview:	.PNG........IHDR.............>U.....IDATx..MrTI..._JHe.(..:..1....$'(.t#.....:..... S.A5....q..E..I`d.`...).\|../3E.[)...x..3..Y!...="<.@.4..K..Z...i....[.Z./.~n.~...@M....(...nS%UAs.;N.eR...C..<.{r..:....+.....I."..I...5....\.....~....PK2..l.').DR........[......\T}.e8.........M.E.[....../@Z...\|.4...dO..5Z...A..3...\|..$..B,0.._..".........K .9LmF=.Rd.[.......{..>D.........m..qA.@`.. ]j-0...SK.!.......f.M{....U.6....O..A.BT^..,w........Qi..{.}..q..g...TR..y'..ePq2....u...-..>.Je"pq4...\...P.!..0...##....77....k...H..xt......PS.....w....Q...Rh.e..Rf..."..w...:.....xrD$8":..'&........I...D...7B-......$u......;..S%.?.?X.O...HZc...../wD..mR..E.m....t.....:}.....Xw.....i.E...z.p.BV0+Q....4W....[.q.m._.l... :.+)..6....7....IT..~..XXzT.\z.".s.F.......!.5pe....?......'..\..Yq.7M.m....xj..cq.........<..x...D.E..l1..SE.....".$.O.M.H...p.SX.....b.p..mnR.0.sQ.'.......VQ...4]..q.J....)A....I\.tg..]....t..M.5.v..E.f....... ..I.........I.R.{...q.....X.`..H

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1749
Entropy (8bit):	3.9886336290882483
Encrypted:	false
SSDEEP:	48:n/eeDiGBZVANlh+1iUZ41RV6Fimz0hwGvEPbq6Z:nhi/3P8YMDohwOEfZ
MD5:	C963F434EF227D637C0829B1EDBA776C
SHA1:	9E542575F547818505ADB8D621EB4AC458A4F6BB
SHA-256:	CCFAEA0298A18A8C45040D7A42E20F7084850B0054136914FAF02E4F10D44450
SHA-512:	8825D1A3FB6969B8DBA5BF120F03A09F60E42720D28AF5D66E818E66A9FC7803644B18D342B4D7CFE90A11588311FF14F3FE1C1E347CA295049A02120FA75B72
Malicious:	false
Reputation:	low
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M17.7073 12.2932C17.6145 12.2003 17.5043 12.1265 17.383 12.0762C17.2617 12.0259 17.1317 12 17.0003 12C16.869 12 16.739 12.0259 16.6176 12.0762C16.4963 12.1265 16.3861 12.2003 16.2933 12.2932L14.6993 13.8872C13.9603 13.6672 12.5813 13.1672 11.7073 12.2932C10.8333 11.4192 10.3333 10.0402 10.1133 9.3012L11.7073 7.7072C11.8003 7.61441 11.874 7.50421 11.9243 7.38289C11.9746 7.26158 12.0005 7.13153 12.0005 7.0002C12.0005 6.86887 11.9746 6.73882 11.9243 6.61751C11.874 6.49619 11.8003 6.38599 11.7073 6.2932L7.70733 2.2932C7.61455 2.20026 7.50434 2.12652 7.38303 2.07621C7.26171 2.0259 7.13167 2 7.00033 2C6.869 2 6.73896 2.0259 6.61764 2.07621C6.49633 2.12652 6.38612 2.20026 6.29333 2.2932L3.58133 5.0052C3.20133 5.3852 2.98733 5.9072 2.99533 6.4402C3.01833 7.8642 3.39533 12.8102 7.29333 16.7082C11.1913 20.6062 16.1373 20.9822 17.5623 21.0062H17.5903C18.1183 21.0062 18.6173 20.7982 18.9953

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.7092327439724695
Encrypted:	false
SSDEEP:	3:YTyLV/VffcB+xNVcSLQzRE9LduUBjd4:YWLV94iDLQmpddB4
MD5:	5143820DAEB644938735D6B28C0059E7
SHA1:	22316BB57B4FA755662FD6F5FB7F749B21AC32A1
SHA-256:	740BB313221BDA5543B6FBE0BCE3DD276CC70C4FD9AA0BAE9D46B149406BECF5
SHA-512:	ABABBC2935D02EF31FA6FD14F56CF781BA8015A0DBCF8AB05CC7CFECBCABCA4B2B4E37B5B0BBE0341948DA7902613F4BC7EEA1C1FB8E9D142B3EC1D61084FBA6
Malicious:	false
Reputation:	low
Preview:	{"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	774
Entropy (8bit):	4.352691505629691
Encrypted:	false
SSDEEP:	24:tdHbuyfwcGpvrAD/atiJx0pp2rBr+qFltW:D9wcGdrWCUUKZ5o
MD5:	ED4E5CBC5EBBE7B9BBF931462932C655
SHA1:	6CA10C3918E79E78CF2DD6477598A2189A314631
SHA-256:	84943B5D5AF399EF66EA8FF25C492CEA16C16DEBA3816DF175DBA322C7E0A109
SHA-512:	750CFC10FE9A162B0BEEB1C570920670F8C455C4B70D3CF66BC55FCF967ED3E200CE874A33100660BC3E3FEAE36BEFA60273DB9F940DC298DE6A291A763CBED8
Malicious:	false
Reputation:	low
URL:	https://profile.cex.io/static/resources/media/telegram.svg
Preview:	<svg width="34" height="30" viewBox="0 0 34 30" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M0.600541 14.3849L8.43483 17.3481L11.4672 27.231C11.6612 27.864 12.425 28.0979 12.9319 27.6779L17.2989 24.0701C17.7566 23.6921 18.4086 23.6733 18.887 24.0252L26.7635 29.8204C27.3058 30.2199 28.0741 29.9187 28.2101 29.2546L33.98 1.12781C34.1284 0.402388 33.4251 -0.20278 32.7435 0.0643717L0.591361 12.6342C-0.202087 12.9443 -0.195173 14.0827 0.600541 14.3849ZM10.9785 15.7707L26.2896 6.21403C26.5648 6.04278 26.8479 6.41985 26.6116 6.64198L13.9755 18.5455C13.5313 18.9645 13.2448 19.5252 13.1637 20.1338L12.7332 23.3665C12.6762 23.7981 12.0779 23.841 11.9604 23.4233L10.3049 17.5283C10.1153 16.856 10.3916 16.1378 10.9785 15.7707Z". fill="#0C87F2"/>.</svg>.

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 46576, version 1.0
Category:	downloaded
Size (bytes):	46576
Entropy (8bit):	7.9954894976283954
Encrypted:	true
SSDEEP:	768:g+dJLT8u+dEb6CcQDC9uM2RM7pzEkHAy4Zqid5lr6N57TjF4h1zGN/L:Pl8E2lpyIpTAPbuVfF6zGl
MD5:	7106BB83A0E767E12659DE9CFBA3926D
SHA1:	B869C145806C2B7AB5E0603DB32C6D48B19FAF79
SHA-256:	7A32484E166E1337FBB0CF4F4262BB385ED9081F1AC20F9EFE39E8E50490367A
SHA-512:	27A983D80C7F0553B60B047ADBC1A22ECC9F48CBA76FEE8170512287FC7544D15ED038AA6679AE01559406AA74CCBCC16A51FD2128811BCC794A6BC4DCC994F4
Malicious:	false
Reputation:	low
URL:	https://profile.cex.io/static/resources/fonts/OpenSans-SemiBold.woff2
Preview:	wOF2............................................?FFTM.... ....`..n..&..4.....t.....X..6.$..$. ..+......[._q......Y..\|z.#W.[.Aw.P.n..:.....U.....%.$...m..Q@.W.......f.#......C..2..`.k./.....H.......`Y.ZB.$.`r.J..pSyg.U.R"b.A.8....oe.\|..7..\|..R:w<s?.~.k.sBV..L.kK........A9.;....Yf..a.&....qMaN~.1.g7...b.=...g.S.....q..S..n2....8!.L\|"..k..\.)L%O`...J........./.7...AC....^..,Z..S.;..UC}.+...eP..Xq..!...;.]U}......3..F...#.......?....?.\.(M1.!.Ya.YeH.i...2D.B.!...h.qQ...".).E1...rqQ.tQ.......G...R.....f.w.0..f.N..='.....WT^...J....V...P(...."E.t.q<..55O..$...av..g./......P..hP"..%_.w.V.:.O.c...Y.<p.6...$9..=..qf.......WSJO.v.{[...(.%.X.....K....k....m..Du.J..i.`{;JgU..Uu...^L..=.Hc.0`3!..>.s..9lJ..4.>.."..........y}.......,Y..rG.6..tS./V..LK..U.<.....Q....k..c....b...x'.@.H-..w...0.......Y!K.MR.<...9........"......XM......q.!q.U....2..\|..D .W..+3.f...H]..93.d...R.w.S....Kcxj...^...U-.k...1.6.p..wj~.)...W..$....5.ed..&.Vt/\)e......9[.....2..h......./c..\|.+.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 29, 2024 14:44:52.190267086 CET	49700	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:52.190301895 CET	443	49700	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.190383911 CET	49700	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:52.190783978 CET	49700	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:52.190797091 CET	443	49700	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.191071987 CET	49701	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:52.191102982 CET	443	49701	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.191216946 CET	49701	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:52.191602945 CET	49701	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:52.191615105 CET	443	49701	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.399682045 CET	443	49700	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.400156975 CET	49700	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:52.400173903 CET	443	49700	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.401525021 CET	443	49700	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.401592016 CET	49700	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:52.402515888 CET	443	49701	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.402718067 CET	49701	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:52.402726889 CET	443	49701	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.403645992 CET	49700	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:52.403723001 CET	443	49700	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.404095888 CET	443	49701	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.404191017 CET	49701	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:52.404609919 CET	49700	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:52.404617071 CET	443	49700	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.404911995 CET	49701	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:52.404973030 CET	443	49701	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.454818964 CET	49700	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:52.454830885 CET	49701	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:52.454854012 CET	443	49701	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.502727985 CET	49701	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:52.744513035 CET	443	49700	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.744553089 CET	443	49700	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.744596004 CET	443	49700	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.744622946 CET	443	49700	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.744659901 CET	443	49700	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.744719028 CET	49700	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:52.744719028 CET	49700	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:52.744724989 CET	443	49700	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.744735956 CET	443	49700	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.744772911 CET	49700	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:52.744781017 CET	443	49700	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.744827032 CET	49700	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:52.745001078 CET	443	49700	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.745085001 CET	443	49700	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.745104074 CET	443	49700	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.745127916 CET	49700	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:52.745134115 CET	443	49700	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.745186090 CET	49700	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:52.745579004 CET	443	49700	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.745666027 CET	443	49700	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.745692968 CET	443	49700	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.745707035 CET	49700	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:52.745712042 CET	443	49700	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.745738983 CET	443	49700	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.745752096 CET	49700	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:52.745757103 CET	443	49700	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.745800972 CET	49700	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:52.746593952 CET	443	49700	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.746680975 CET	443	49700	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.746706963 CET	443	49700	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.746726036 CET	49700	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:52.746731043 CET	443	49700	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.746774912 CET	49700	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:52.746779919 CET	443	49700	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.746814966 CET	443	49700	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:52.746860981 CET	49700	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:52.747586012 CET	49700	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:52.747597933 CET	443	49700	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:53.878896952 CET	49704	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:53.878926039 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:53.879004002 CET	49704	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:53.879031897 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:53.879070044 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:53.879126072 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:53.879189968 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:53.879210949 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:53.879265070 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:53.879463911 CET	49704	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:53.879481077 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:53.879586935 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:53.879602909 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:53.879713058 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:53.879728079 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.101016998 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.101315022 CET	49704	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.101331949 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.102410078 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.102497101 CET	49704	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.103413105 CET	49704	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.103494883 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.103616953 CET	49704	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.103626013 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.110398054 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.110641956 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.110662937 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.112546921 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.112627029 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.112901926 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.112988949 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.113002062 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.152740955 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.152744055 CET	49704	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.152750015 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.199718952 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.350503922 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.350589991 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.350636005 CET	49704	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.350649118 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.365045071 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.365113020 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.365159988 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.365178108 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.365247011 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.365295887 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.365304947 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.405731916 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.405749083 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.405750036 CET	49704	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.446368933 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.446434975 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.446463108 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.446479082 CET	49704	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.446487904 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.446525097 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.446542978 CET	49704	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.446549892 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.446590900 CET	49704	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.446980953 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.447040081 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.447071075 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.447102070 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.447109938 CET	49704	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.447129011 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.447140932 CET	49704	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.447175026 CET	49704	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.447180033 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.447220087 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.447251081 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.447268963 CET	49704	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.447276115 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.447314978 CET	49704	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.447318077 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.447329998 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.447372913 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.447379112 CET	49704	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.447386026 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.447431087 CET	49704	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.447437048 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.450011015 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.450038910 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.450062037 CET	49704	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.450069904 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.450103045 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.450114012 CET	49704	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.450120926 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.450156927 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.450186968 CET	49704	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.450191975 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.450201035 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.450234890 CET	49704	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.450243950 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.450279951 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.450290918 CET	49704	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.450297117 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.450324059 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.450351954 CET	49704	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.450351954 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.450366974 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.450402021 CET	49704	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.450408936 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.450443029 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.450458050 CET	49704	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.450464010 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.450505018 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.450508118 CET	49704	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.450515985 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.450546026 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.450560093 CET	49704	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.450567007 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.450598001 CET	49704	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.450629950 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.450666904 CET	49704	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.450674057 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.450704098 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.450743914 CET	49704	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.452269077 CET	49704	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.452280045 CET	443	49704	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.452743053 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.458962917 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.459000111 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.459057093 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.459398985 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.459414959 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.461560011 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.461747885 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.461812973 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.461826086 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.461921930 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.461966991 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.461973906 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.462102890 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.462146044 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.462153912 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.462251902 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.462291002 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.462297916 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.462414026 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.462454081 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.462461948 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.462568998 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.462609053 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.462615967 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.462714911 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.462753057 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.462760925 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.462862015 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.462903976 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.462910891 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.463009119 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.463049889 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.463056087 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.463155031 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.463192940 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.463200092 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.463303089 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.463344097 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.463351965 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.465151072 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.465207100 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.465219975 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.465295076 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.465346098 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.465353012 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.465442896 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.465491056 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.465498924 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.465621948 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.465665102 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.465672016 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.465775967 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.465821028 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.465827942 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.465919971 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.465960979 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.465969086 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.467241049 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.467308998 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.467315912 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.467333078 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.467384100 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.467391968 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.467430115 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.467436075 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.467503071 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.467547894 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.467555046 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.467592955 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.558005095 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.558070898 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.559585094 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.559659958 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.559689999 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.559757948 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.559946060 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.560004950 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.560046911 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.560102940 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.561644077 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.561729908 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.561742067 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.561803102 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.561826944 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.561897993 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.562211990 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.562278032 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.562330008 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.562380075 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.563132048 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.563199997 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.563211918 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.563267946 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.652426958 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.652529001 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.652559042 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.652618885 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.652843952 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.652921915 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.653274059 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.653341055 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.653431892 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.653500080 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.653728962 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.653778076 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.654227018 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.654288054 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.654398918 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.654453993 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.655222893 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.655284882 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.655536890 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.655597925 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.656080961 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.656145096 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.656711102 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.656780958 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.656861067 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.656917095 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.657634020 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.657716036 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.657841921 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.657905102 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.658508062 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.658586979 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.658670902 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.658740044 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.659651041 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.659734011 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.659746885 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.659796000 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.660111904 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.660176992 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.660336971 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.660387039 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.660764933 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.661015034 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.661035061 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.661154032 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.661222935 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.661360025 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.661417961 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.661474943 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.661681890 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.661741972 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.661936998 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.662050962 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.662298918 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.663228035 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.663245916 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.663275003 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.663301945 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.663310051 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.663322926 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.665000916 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.665044069 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.665075064 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.665081978 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.665127993 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.666575909 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.666616917 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.666652918 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.666661024 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.666698933 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.666723013 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.668766975 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.668809891 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.668839931 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.668853998 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.668889999 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.668905973 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.670311928 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.670351028 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.670383930 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.670389891 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.670440912 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.708233118 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.748410940 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.748481035 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.748516083 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.748524904 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.748579979 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.749742985 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.749785900 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.749820948 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.749828100 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.749856949 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.749871969 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.751571894 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.751611948 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.751817942 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.751827002 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.751976967 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.849539042 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.849608898 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.849632025 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.849653006 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.849703074 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.849725962 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.851011992 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.851052999 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.851089954 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.851098061 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.851140976 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.851155996 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.851902008 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.851942062 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.851974964 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.851982117 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.852015018 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.852025986 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.852075100 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.852114916 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.852139950 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.852145910 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.852170944 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.852193117 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.852212906 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.852269888 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.852283955 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.852292061 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.852325916 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.852344990 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.857650042 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.857690096 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.857718945 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.857726097 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.857758999 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.857767105 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.860043049 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.860081911 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.860112906 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.860119104 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.860150099 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.860172987 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.860176086 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.860203028 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.860234022 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.860255957 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.860268116 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.860291958 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.860455990 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.862190008 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.862229109 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.862260103 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.862266064 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.862294912 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.862303972 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.865444899 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.865487099 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.865519047 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.865526915 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.865549088 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.865564108 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.865580082 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.865621090 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.865650892 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.865657091 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.865685940 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.865712881 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.865736008 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.865832090 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.865870953 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.865890980 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.865900040 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.865915060 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.871021032 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.871068954 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.871092081 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.871098995 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.871133089 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.871176958 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.871216059 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.871229887 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.871243000 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.871279955 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.874252081 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.874296904 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.874329090 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.874336004 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.874366999 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.876080990 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.876120090 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.876143932 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.876157045 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.876187086 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.876307011 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.876359940 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.876367092 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.876389027 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.876445055 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.876451969 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.880398035 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.880436897 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.880475998 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.880485058 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.880511999 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.882890940 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.882936954 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.882956028 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.882967949 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.882996082 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.883061886 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.883097887 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.883121967 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.883130074 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.883157015 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.883228064 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.883272886 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.883286953 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.883295059 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.883526087 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.883563995 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.883563995 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.883583069 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.883606911 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.883631945 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.883738041 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.883780956 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.883800030 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.883821964 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.883857012 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.884171009 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:54.884222984 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.884350061 CET	49706	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:54.884361029 CET	443	49706	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.108680964 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.108937979 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.108953953 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.109983921 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.110057116 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.110321999 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.110388041 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.110449076 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.110456944 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.152744055 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.202578068 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.202621937 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.202663898 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.202667952 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.202683926 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.202719927 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.202723980 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.202733994 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.202764988 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.202774048 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.248739004 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.299273968 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.299330950 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.299365044 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.299371004 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.299384117 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.299412966 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.299420118 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.299428940 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.299455881 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.299467087 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.299474955 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.299500942 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.299506903 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.299515963 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.299550056 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.299557924 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.299595118 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.299621105 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.299627066 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.299634933 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.299664974 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.299665928 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.299674988 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.299707890 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.299715996 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.299747944 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.299776077 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.299784899 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.299792051 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.299824953 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.299832106 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.299840927 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.299877882 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.299881935 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.299889088 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.299921036 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.299928904 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.299963951 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.299995899 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.300004005 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.300029039 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.300060034 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.300069094 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.300096989 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.300124884 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.300129890 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.300137997 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.300177097 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.300183058 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.300189972 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.300221920 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.300229073 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.300254107 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.300285101 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.300295115 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.300302982 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.300319910 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.300338030 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.300381899 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.300390959 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.344723940 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.360127926 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.360173941 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.360203028 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.360234022 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.360251904 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.360299110 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.360306978 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.360341072 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.360373974 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.360387087 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.360394001 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.360440016 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.360626936 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.360675097 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.360703945 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.360733032 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.360740900 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.360785007 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.361226082 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.361341000 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.361386061 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.361391068 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.361399889 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.361443043 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.361450911 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.361480951 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.361525059 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.361532927 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.362251043 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.362281084 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.362304926 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.362313032 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.362340927 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.362364054 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.362366915 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.362375975 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.362397909 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.363141060 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.363188028 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.363193989 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.363235950 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.363265038 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.363275051 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.363281965 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.363313913 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.363318920 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.363326073 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.363370895 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.363989115 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.364088058 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.364114046 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.364134073 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.364140987 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.364183903 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.364190102 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.365020990 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.365050077 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.365072012 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.365078926 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.365119934 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.365125895 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.366218090 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.366285086 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.366292000 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.395966053 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.396003962 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.396023989 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.396040916 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.396053076 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.396086931 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.396939039 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.396997929 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.397072077 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.397125006 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.397850990 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.397912025 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.398293018 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.398349047 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.407761097 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.455307007 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.455385923 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.457707882 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.457772970 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.458164930 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.458231926 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.458703041 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.458760023 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.458858013 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.458914995 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.458972931 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.459019899 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.459270954 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.459330082 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.459511042 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.459558964 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.459717035 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.459773064 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.459912062 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.459964037 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.460084915 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.460134029 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.460447073 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.460501909 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.460596085 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.460650921 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.461694956 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.461751938 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.462027073 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.462084055 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.462395906 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.462450027 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.462758064 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.462812901 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.496942043 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.496982098 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.497014046 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.497021914 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.497034073 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.497049093 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.497061968 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.497080088 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.497101068 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.497109890 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.497119904 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.497127056 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.497150898 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.497157097 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.497164965 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.497184992 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.497198105 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.497220993 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.497231960 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.497239113 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.497251987 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.497262001 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.497283936 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.497298002 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.497306108 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.497317076 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.497328043 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.497350931 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.497359037 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.497364998 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.497383118 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.497390032 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.497416973 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.497425079 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.497432947 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.497454882 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.497463942 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.497488976 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.497492075 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.497503996 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.497534990 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.497540951 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.497550011 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.497565985 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.497574091 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.497586012 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.497590065 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.497601986 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.497606993 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.497632980 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.497637987 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.497643948 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.497668028 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.497941017 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.497992992 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.497998953 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.498032093 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.498141050 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.498189926 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.502834082 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.502890110 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.551587105 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.551662922 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.554059982 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.554140091 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.555555105 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.555583000 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.555620909 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.555630922 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.555645943 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.555679083 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.556015015 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.556081057 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.556087971 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.556127071 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.556128025 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.556174040 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.556269884 CET	49705	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.556283951 CET	443	49705	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.590712070 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.590756893 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.590792894 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.590795994 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.590810061 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.590848923 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.591053963 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.591097116 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.591105938 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.591139078 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.591850042 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.591906071 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.592010975 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.592056036 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.593415976 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.593477964 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.594671011 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.594711065 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.594741106 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.594748020 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.594762087 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.594779015 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.594954014 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.595007896 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.597095966 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.597116947 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.597170115 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.597178936 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.598014116 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.598030090 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.598098040 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.598107100 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.600102901 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.600117922 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.600172043 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.600182056 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.602051020 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.602066994 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.602107048 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.602118015 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.602144003 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.603877068 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.603888988 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.603956938 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.603965044 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.604185104 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.604235888 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.604461908 CET	49708	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.604480028 CET	443	49708	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.685203075 CET	49701	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.690177917 CET	49710	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.690213919 CET	443	49710	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.690291882 CET	49710	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.690742016 CET	49710	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.690754890 CET	443	49710	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.713393927 CET	49711	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.713423967 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.713498116 CET	49711	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.713565111 CET	49712	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.713599920 CET	443	49712	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.713660955 CET	49712	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.713685989 CET	49713	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.713713884 CET	443	49713	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.713774920 CET	49713	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.713819027 CET	49714	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.713836908 CET	443	49714	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.713890076 CET	49714	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.713939905 CET	49715	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.713968992 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.714019060 CET	49715	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.714040041 CET	49716	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.714066982 CET	443	49716	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.714109898 CET	49716	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.714255095 CET	49711	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.714270115 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.714395046 CET	49712	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.714411020 CET	443	49712	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.714514017 CET	49713	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.714528084 CET	443	49713	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.714633942 CET	49714	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.714648008 CET	443	49714	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.714756966 CET	49715	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.714771032 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.714879036 CET	49716	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.714890957 CET	443	49716	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.728230953 CET	443	49701	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.793029070 CET	49717	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.793056011 CET	443	49717	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.793128967 CET	49717	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.793315887 CET	49717	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.793327093 CET	443	49717	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.795979977 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:55.795988083 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:55.796046972 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:55.796214104 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:55.796226025 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:55.893763065 CET	443	49710	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.894007921 CET	49710	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.894018888 CET	443	49710	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.894367933 CET	443	49710	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.894666910 CET	49710	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.894723892 CET	443	49710	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.894805908 CET	49710	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.905847073 CET	443	49701	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.905936003 CET	443	49701	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.905997038 CET	49701	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.906775951 CET	49701	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.906786919 CET	443	49701	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.936245918 CET	443	49710	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.948205948 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.948427916 CET	49715	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.948447943 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.949440956 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.949510098 CET	49715	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.950375080 CET	49715	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.950423956 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.950519085 CET	49715	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.950526953 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.954888105 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.955069065 CET	49711	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.955091000 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.956459999 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.956530094 CET	49711	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.956779003 CET	49711	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.956835032 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.956897974 CET	49711	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.956906080 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.958353043 CET	443	49714	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.958513021 CET	49714	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.958528042 CET	443	49714	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.959531069 CET	443	49714	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.959589005 CET	49714	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.959815025 CET	49714	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.959875107 CET	443	49714	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.959891081 CET	49714	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.978032112 CET	443	49713	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.978223085 CET	49713	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.978239059 CET	443	49713	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.979299068 CET	443	49716	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.979459047 CET	49716	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.979485989 CET	443	49716	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.979528904 CET	443	49713	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.979597092 CET	49713	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.979836941 CET	49713	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.979897022 CET	443	49713	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.979923964 CET	49713	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.980562925 CET	443	49716	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.980628014 CET	49716	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.980895042 CET	49716	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.981050968 CET	443	49716	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.981069088 CET	49716	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.981559038 CET	443	49712	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.981746912 CET	49712	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.981771946 CET	443	49712	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.983279943 CET	443	49712	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.983366013 CET	49712	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.983637094 CET	49712	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.983715057 CET	443	49712	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.983740091 CET	49712	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.995179892 CET	443	49717	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.995366096 CET	49717	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.995374918 CET	443	49717	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.996515989 CET	443	49717	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.996588945 CET	49717	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.996736050 CET	49711	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.996754885 CET	49715	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.997725010 CET	49717	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:55.997817993 CET	443	49717	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:55.997853994 CET	49717	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.000236988 CET	443	49714	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.002922058 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.003084898 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.003091097 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.004065037 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.004156113 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.004793882 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.004849911 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.004899979 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.004904985 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.012746096 CET	49714	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.012753963 CET	443	49714	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.014354944 CET	49719	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.014375925 CET	443	49719	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.014446020 CET	49719	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.014615059 CET	49719	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.014625072 CET	443	49719	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.020229101 CET	443	49713	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.028223038 CET	443	49716	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.028243065 CET	443	49712	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.028738976 CET	49712	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.028738022 CET	49716	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.028739929 CET	49713	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.028745890 CET	443	49712	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.028748989 CET	443	49713	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.028764963 CET	443	49716	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.044224977 CET	443	49717	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.044756889 CET	49717	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.044756889 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.044764042 CET	443	49717	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.060746908 CET	49714	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.076816082 CET	49712	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.076817989 CET	49713	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.076817989 CET	49716	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.092724085 CET	49717	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.157160044 CET	443	49710	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.157198906 CET	443	49710	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.157253981 CET	49710	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.157269001 CET	443	49710	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.157340050 CET	443	49710	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.157385111 CET	49710	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.157391071 CET	443	49710	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.157457113 CET	443	49710	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.157517910 CET	49710	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.157979965 CET	49710	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.157989979 CET	443	49710	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.160654068 CET	49720	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.160682917 CET	443	49720	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.160763979 CET	49720	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.160916090 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.160950899 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.161014080 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.161128044 CET	49720	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.161143064 CET	443	49720	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.161426067 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.161442041 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.204298019 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.204339981 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.204370022 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.204391956 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.204406023 CET	49715	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.204422951 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.204440117 CET	49715	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.204454899 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.204492092 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.204495907 CET	49715	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.204503059 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.204535961 CET	49715	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.204541922 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.205051899 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.205081940 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.205107927 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.205107927 CET	49715	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.205118895 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.205153942 CET	49715	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.205183983 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.205221891 CET	49715	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.205228090 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.206258059 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.206295013 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.206310987 CET	49715	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.206316948 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.206366062 CET	49715	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.206372023 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.206512928 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.206556082 CET	49715	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.206562996 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.206883907 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.206912994 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.206934929 CET	49715	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.206942081 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.206985950 CET	49715	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.206991911 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.207052946 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.207079887 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.207098007 CET	49715	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.207104921 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.207143068 CET	49715	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.208204031 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.208270073 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.208297968 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.208314896 CET	49715	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.208322048 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.208348036 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.208362103 CET	49715	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.208369017 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.208411932 CET	49715	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.208828926 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.208900928 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.208954096 CET	49715	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.209136963 CET	49715	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.209146023 CET	443	49715	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.219156981 CET	443	49719	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.219387054 CET	49719	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.219405890 CET	443	49719	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.220390081 CET	443	49719	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.220479965 CET	49719	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.220817089 CET	49719	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.220875978 CET	443	49719	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.220958948 CET	49719	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.220963955 CET	443	49719	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.223300934 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.223350048 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.223375082 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.223396063 CET	49711	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.223406076 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.223429918 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.223445892 CET	49711	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.223450899 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.223493099 CET	49711	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.223615885 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.223787069 CET	443	49713	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.223833084 CET	443	49713	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.223875999 CET	49713	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.224611044 CET	49713	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.224625111 CET	443	49713	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.233392954 CET	443	49716	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.233431101 CET	443	49716	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.233462095 CET	443	49716	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.233479023 CET	49716	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.233506918 CET	443	49716	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.233544111 CET	49716	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.233553886 CET	443	49716	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.233566046 CET	443	49716	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.233607054 CET	49716	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.234127045 CET	49716	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.234157085 CET	443	49716	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.253114939 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.253171921 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.253207922 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.253213882 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.253226042 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.253247976 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.253277063 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.253282070 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.253331900 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.253375053 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.253668070 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.253700018 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.253719091 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.253722906 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.253746033 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.253758907 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.253762960 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.253808022 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.254304886 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.254376888 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.254406929 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.254416943 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.254420996 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.254450083 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.254473925 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.254482031 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.254518986 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.255119085 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.255192995 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.255227089 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.255233049 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.255284071 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.255316019 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.255321980 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.255326033 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.255357027 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.255995989 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.256073952 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.256113052 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.256114960 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.256123066 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.256160021 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.256164074 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.256189108 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.256243944 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.256248951 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.256978989 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.257030010 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.257030964 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.257038116 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.257077932 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.257081985 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.257153034 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.257190943 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.257195950 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.257941961 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.257980108 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.257989883 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.257992983 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.258030891 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.258033991 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.258040905 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.258080959 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.258776903 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.258841038 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.268744946 CET	49719	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.268817902 CET	49711	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.268826962 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.316730976 CET	49711	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.319753885 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.319806099 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.319838047 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.319853067 CET	49711	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.319859028 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.319885015 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.319906950 CET	49711	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.319911003 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.319936991 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.319948912 CET	49711	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.319952965 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.319982052 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.319992065 CET	49711	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.319996119 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.320019960 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.320030928 CET	49711	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.320034981 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.320075989 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.320075989 CET	49711	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.320085049 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.320125103 CET	49711	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.320128918 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.320154905 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.320178986 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.320204020 CET	49711	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.320205927 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.320211887 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.320247889 CET	49711	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.320251942 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.320290089 CET	49711	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.320293903 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.320319891 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.320350885 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.320354939 CET	49711	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.320358992 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.320395947 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.320404053 CET	49711	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.320408106 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.320445061 CET	49711	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.320449114 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.320493937 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.320538044 CET	49711	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.320754051 CET	49711	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.320764065 CET	443	49711	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.330513954 CET	49722	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.330538034 CET	443	49722	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.330617905 CET	49722	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.330671072 CET	49723	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.330688000 CET	443	49723	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.330750942 CET	49723	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.330907106 CET	49722	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.330920935 CET	443	49722	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.331094980 CET	49723	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.331108093 CET	443	49723	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.348932028 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.349010944 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.349015951 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.349029064 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.349065065 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.349617004 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.349668026 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.349673986 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.349690914 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.349715948 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.349720955 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.349742889 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.350574017 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.350606918 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.350626945 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.350630999 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.350656033 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.351166010 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.351210117 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.351227999 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.351232052 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.351262093 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.351671934 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.351703882 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.351730108 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.351733923 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.351752043 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.351784945 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.351829052 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.351984024 CET	49718	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.351994991 CET	443	49718	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.366590023 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.366612911 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.366683960 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.366871119 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.366878986 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.387768030 CET	443	49720	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.388019085 CET	49720	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.388031006 CET	443	49720	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.388685942 CET	443	49720	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.388991117 CET	49720	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.389091015 CET	443	49720	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.389110088 CET	49720	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.389673948 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.389858007 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.389873028 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.390285969 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.390567064 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.390628099 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.390645981 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.428774118 CET	49720	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.428781033 CET	443	49720	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.436235905 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.443728924 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.461283922 CET	49725	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:56.461308002 CET	443	49725	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:56.461383104 CET	49725	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:56.461565971 CET	49725	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:56.461577892 CET	443	49725	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:56.519464970 CET	443	49714	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.519505978 CET	443	49714	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.519531965 CET	443	49714	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.519560099 CET	49714	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.519576073 CET	443	49714	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.519624949 CET	49714	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.519725084 CET	443	49714	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.519819975 CET	443	49714	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.519865990 CET	49714	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.519871950 CET	443	49714	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.519927025 CET	443	49714	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.519980907 CET	49714	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.520416975 CET	49714	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.520425081 CET	443	49714	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.523005009 CET	49726	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.523026943 CET	443	49726	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.523094893 CET	49726	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.523272991 CET	49726	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.523283958 CET	443	49726	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.524132013 CET	443	49712	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.524311066 CET	443	49712	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.524379969 CET	49712	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.524390936 CET	443	49712	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.524480104 CET	443	49712	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.524529934 CET	49712	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.524537086 CET	443	49712	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.524684906 CET	443	49712	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.524745941 CET	49712	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.524751902 CET	443	49712	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.524899006 CET	443	49712	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.524950027 CET	49712	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.524955988 CET	443	49712	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.525063038 CET	443	49712	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.525115967 CET	49712	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.525122881 CET	443	49712	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.525203943 CET	443	49712	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.525249958 CET	49712	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.525258064 CET	443	49712	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.525409937 CET	443	49712	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.525460005 CET	49712	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.525542021 CET	49712	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.525551081 CET	443	49712	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.530917883 CET	49727	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.530937910 CET	443	49727	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.531008005 CET	49727	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.531267881 CET	49728	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.531280041 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.531336069 CET	49728	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.531694889 CET	49729	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.531714916 CET	443	49729	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.531783104 CET	49729	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.532170057 CET	49730	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.532186985 CET	443	49730	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.532246113 CET	49730	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.533093929 CET	49731	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.533106089 CET	443	49731	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.533163071 CET	49731	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.533430099 CET	49732	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.533452988 CET	443	49732	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.533500910 CET	49732	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.533915043 CET	49727	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.533927917 CET	443	49727	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.534472942 CET	49728	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.534485102 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.534821987 CET	49729	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.534833908 CET	443	49729	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.535023928 CET	49730	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.535034895 CET	443	49730	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.535533905 CET	49731	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.535548925 CET	443	49731	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.535728931 CET	49732	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.535742044 CET	443	49732	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.568780899 CET	443	49719	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.568876028 CET	443	49719	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.568932056 CET	49719	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.570225954 CET	49719	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.570238113 CET	443	49719	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.574287891 CET	49733	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.574321032 CET	443	49733	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.574877977 CET	49733	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.575401068 CET	49733	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.575419903 CET	443	49733	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.614281893 CET	443	49717	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.614336967 CET	443	49717	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.614418983 CET	49717	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.614891052 CET	49717	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.614906073 CET	443	49717	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.640137911 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.640423059 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.640438080 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.641010046 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.641320944 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.641412973 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.641438007 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.653984070 CET	443	49723	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.654232979 CET	49723	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.654242992 CET	443	49723	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.655752897 CET	443	49723	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.655822992 CET	49723	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.656235933 CET	49723	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.656322956 CET	443	49723	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.656390905 CET	49723	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.656402111 CET	443	49723	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.656672955 CET	443	49722	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.656866074 CET	49722	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.656876087 CET	443	49722	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.658163071 CET	443	49722	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.658224106 CET	49722	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.658509970 CET	49722	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.658571005 CET	443	49722	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.658615112 CET	49722	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.681770086 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.681783915 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.696738958 CET	49723	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.704235077 CET	443	49722	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.712735891 CET	49722	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.712740898 CET	443	49722	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.724500895 CET	443	49726	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.724786997 CET	49726	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.724801064 CET	443	49726	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.725841999 CET	443	49726	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.725923061 CET	49726	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.726221085 CET	49726	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.726274967 CET	443	49726	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.726363897 CET	49726	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.726372004 CET	443	49726	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.752187014 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.752237082 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.752294064 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.752301931 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.752346039 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.752393007 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.752398014 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.752717018 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.752749920 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.752777100 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.752778053 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.752787113 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.752835035 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.753209114 CET	443	49720	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.753289938 CET	443	49720	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.753335953 CET	49720	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.753344059 CET	443	49720	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.753381014 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.753436089 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.753578901 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.753755093 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.753787041 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.753794909 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.753799915 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.753843069 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.753846884 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.754301071 CET	443	49720	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.754349947 CET	49720	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.754358053 CET	443	49720	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.754477024 CET	443	49720	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.754518986 CET	49720	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.754553080 CET	443	49720	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.754566908 CET	443	49720	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.754601955 CET	49720	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.754611969 CET	443	49720	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.754673004 CET	443	49720	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.754712105 CET	49720	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.754717112 CET	443	49720	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.754803896 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.754846096 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.754849911 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.754976988 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.755018950 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.755023956 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.755141020 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.755170107 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.755182981 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.755187988 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.755227089 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.755357981 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.755428076 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.755470991 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.755475044 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.755480051 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.755539894 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.755553007 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.755558968 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.755603075 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.755645990 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.755728960 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.755767107 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.755769968 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.755887985 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.755927086 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.755932093 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.756542921 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.756572962 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.756596088 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.756599903 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.756638050 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.756642103 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.756756067 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.756788015 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.756797075 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.756800890 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.756839037 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.756906986 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.757744074 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.757818937 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.757823944 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.762737989 CET	49722	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.776753902 CET	49726	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.807749987 CET	49720	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.807754993 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.822132111 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.822405100 CET	49728	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.822412968 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.822762966 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.823050976 CET	49728	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.823117971 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.823187113 CET	49728	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.826109886 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.826196909 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.826251030 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.826265097 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.826296091 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.826323032 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.826330900 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.826335907 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.826369047 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.826375008 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.826379061 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.826422930 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.826426983 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.826772928 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.826824903 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.826828003 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.826899052 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.826948881 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.826952934 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.827012062 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.827054024 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.827059031 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.827642918 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.827691078 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.827693939 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.827768087 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.827805996 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.827810049 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.827967882 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.828006983 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.828011990 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.828540087 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.828591108 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.828594923 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.828634977 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.828674078 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.828677893 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.828856945 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.828883886 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.828895092 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.828902006 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.828938007 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.829504013 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.829684019 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.829741001 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.829745054 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.829926968 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.829969883 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.829973936 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.830293894 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.830337048 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.830341101 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.830429077 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.830476046 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.830480099 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.830564976 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.830614090 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.830619097 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.830660105 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.830713034 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.830718040 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.831574917 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.831646919 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.831650972 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.839350939 CET	443	49720	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.839560032 CET	443	49720	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.839632988 CET	49720	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.839643002 CET	443	49720	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.839716911 CET	443	49720	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.839766026 CET	49720	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.840107918 CET	49720	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.840116024 CET	443	49720	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.843385935 CET	49735	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.843413115 CET	443	49735	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.843477964 CET	49735	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.843705893 CET	49735	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.843718052 CET	443	49735	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.845022917 CET	49736	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.845032930 CET	443	49736	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.845097065 CET	49736	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.845298052 CET	49736	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.845308065 CET	443	49736	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.847008944 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.847018957 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.847099066 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.847107887 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.847150087 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.848088026 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.848153114 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.848265886 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.848326921 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.849782944 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.849848032 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.850033045 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.850085974 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.850228071 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.850289106 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.850682974 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.850747108 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.851408958 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.851473093 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.851528883 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.851588011 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.851900101 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.851947069 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.852094889 CET	443	49731	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.852168083 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.852221012 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.852314949 CET	49731	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.852324963 CET	443	49731	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.853063107 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.853122950 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.853318930 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.853367090 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.853936911 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.853981972 CET	443	49731	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.853996992 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.854034901 CET	49731	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.854173899 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.854279041 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.854414940 CET	49731	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.854654074 CET	443	49731	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.854670048 CET	49731	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.864242077 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.871737003 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.894562960 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.894593954 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.894635916 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.894644022 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.894682884 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.894711971 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.896241903 CET	443	49731	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.902717113 CET	49731	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.902724981 CET	443	49731	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.918549061 CET	443	49729	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.919413090 CET	49729	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.919434071 CET	443	49729	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.921027899 CET	443	49729	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.921106100 CET	49729	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.921273947 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.921325922 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.921334982 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.921386957 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.921511889 CET	49729	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.921654940 CET	443	49729	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.921742916 CET	49729	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.921751022 CET	443	49729	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.922344923 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.922399998 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.922403097 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.922409058 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.922460079 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.922475100 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.922779083 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.922835112 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.922887087 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.922947884 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.923728943 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.923785925 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.923901081 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.923939943 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.923945904 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.923999071 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.924946070 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.924974918 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.925002098 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.925009966 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.925050974 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.925056934 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.925065994 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.925102949 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.925251007 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.925261974 CET	443	49724	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:56.925278902 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.925301075 CET	49724	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:56.932226896 CET	443	49733	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.932421923 CET	49733	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.932439089 CET	443	49733	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.933890104 CET	443	49733	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.933948994 CET	49733	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.934262037 CET	49733	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.934318066 CET	443	49733	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.934442997 CET	49733	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.934453011 CET	443	49733	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.936448097 CET	443	49732	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.937103033 CET	49732	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.937125921 CET	443	49732	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.938916922 CET	443	49732	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.938981056 CET	49732	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.939338923 CET	49732	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.939428091 CET	443	49732	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.939512014 CET	49732	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.939519882 CET	443	49732	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.941514015 CET	443	49727	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.941736937 CET	443	49730	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.941756964 CET	49727	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.941766977 CET	443	49727	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.941900015 CET	49730	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.941912889 CET	443	49730	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.942255974 CET	443	49727	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.942555904 CET	49727	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.942641020 CET	443	49727	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.942653894 CET	49727	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.942801952 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.942868948 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.942881107 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.942922115 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.943186998 CET	443	49730	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.943244934 CET	49730	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.943555117 CET	49730	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.943696022 CET	49730	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.943701982 CET	443	49730	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.949738026 CET	49731	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.965740919 CET	49729	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.980716944 CET	49733	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.980735064 CET	49732	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.985069990 CET	49738	443	192.168.2.16	142.251.167.103
Mar 29, 2024 14:44:56.985105038 CET	443	49738	142.251.167.103	192.168.2.16
Mar 29, 2024 14:44:56.985173941 CET	49738	443	192.168.2.16	142.251.167.103
Mar 29, 2024 14:44:56.985356092 CET	49738	443	192.168.2.16	142.251.167.103
Mar 29, 2024 14:44:56.985368967 CET	443	49738	142.251.167.103	192.168.2.16
Mar 29, 2024 14:44:56.988225937 CET	443	49727	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.988238096 CET	443	49730	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:56.996721983 CET	49727	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.996731043 CET	49730	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:56.996737003 CET	443	49730	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.040693045 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.040745974 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.040756941 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.040769100 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.040791035 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.040833950 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.040843964 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.040848970 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.040868998 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.040882111 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.040915012 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.040919065 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.040930033 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.040980101 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.040981054 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.041004896 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.041011095 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.041023016 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.041023970 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.041063070 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.041069031 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.041084051 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.041124105 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.041130066 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.041171074 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.042830944 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.042882919 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.042902946 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.042915106 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.042927027 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.042929888 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.042957067 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.042962074 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.042979002 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.042987108 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.043024063 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.043032885 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.043039083 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.043056965 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.043068886 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.043107986 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.043112040 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.043150902 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.044769049 CET	49730	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.045080900 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.045134068 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.045140028 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.045145035 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.045202017 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.045214891 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.045219898 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.045252085 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.045272112 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.045298100 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.045346022 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.045352936 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.045365095 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.045383930 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.045413971 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.045418978 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.045430899 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.045449018 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.045480013 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.045484066 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.045521021 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.050885916 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.050904989 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.050939083 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.050960064 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.050968885 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.051018953 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.051024914 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.051054955 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.053780079 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.053797007 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.053844929 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.053853035 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.053881884 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.055974960 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.055994987 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.056022882 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.056036949 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.056037903 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.056046963 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.056083918 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.056195021 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.060336113 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.060353041 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.060395956 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.060426950 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.060431004 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.060441971 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.060467005 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.060476065 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.060487032 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.060518026 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.060549021 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.089087009 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.089103937 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.089157104 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.089165926 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.089179993 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.089202881 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.089210987 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.089236975 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.089238882 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.089247942 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.089266062 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.089296103 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.089301109 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.089339972 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.089345932 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.089397907 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.089589119 CET	49721	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.089603901 CET	443	49721	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.091593981 CET	443	49722	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.091713905 CET	443	49722	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.091757059 CET	443	49722	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.091762066 CET	49722	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.091778994 CET	443	49722	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.091823101 CET	49722	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.091833115 CET	443	49722	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.091862917 CET	443	49722	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.091903925 CET	49722	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.094997883 CET	443	49723	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.095068932 CET	443	49723	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.095114946 CET	49723	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.095118999 CET	443	49725	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:57.096427917 CET	49725	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:57.096442938 CET	443	49725	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:57.097462893 CET	443	49725	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:57.097520113 CET	49725	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:57.097924948 CET	443	49731	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.097965956 CET	443	49731	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.098006010 CET	49731	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.098016977 CET	443	49731	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.098037004 CET	443	49731	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.098074913 CET	49731	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.098885059 CET	49725	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:57.098943949 CET	443	49725	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:57.099024057 CET	49722	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.099035978 CET	443	49722	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.099440098 CET	49723	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.099447966 CET	443	49723	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.100003004 CET	49725	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:57.100009918 CET	443	49725	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:57.101073027 CET	49731	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.101077080 CET	443	49731	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.101361990 CET	49739	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.101380110 CET	443	49739	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.101448059 CET	49739	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.102066040 CET	49739	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.102077961 CET	443	49739	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.106741905 CET	49740	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.106775045 CET	443	49740	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.106848001 CET	49740	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.107037067 CET	49740	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.107048988 CET	443	49740	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.112385988 CET	443	49729	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.112447977 CET	443	49729	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.112504005 CET	49729	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.113013029 CET	49729	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.113019943 CET	443	49729	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.113286972 CET	49741	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.113312006 CET	443	49741	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.113370895 CET	49741	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.113899946 CET	49741	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.113912106 CET	443	49741	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.116657019 CET	49742	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.116676092 CET	443	49742	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.116735935 CET	49742	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.116923094 CET	49742	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.116931915 CET	443	49742	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.122360945 CET	443	49736	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.122598886 CET	49736	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.122623920 CET	443	49736	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.122972012 CET	443	49736	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.123358965 CET	49736	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.123435974 CET	443	49736	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.123549938 CET	49736	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.126532078 CET	443	49732	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.126629114 CET	443	49732	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.126704931 CET	49732	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.127129078 CET	49732	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.127137899 CET	443	49732	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.127439022 CET	49743	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.127461910 CET	443	49743	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.127513885 CET	49743	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.127795935 CET	49743	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.127805948 CET	443	49743	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.128309965 CET	443	49735	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.128510952 CET	49735	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.128516912 CET	443	49735	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.129065990 CET	443	49735	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.129489899 CET	49735	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.129575968 CET	443	49735	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.129802942 CET	49744	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.129826069 CET	443	49744	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.129888058 CET	49744	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.129955053 CET	49735	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.130131960 CET	49744	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.130143881 CET	443	49744	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.136296034 CET	443	49727	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.136461973 CET	443	49727	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.136553049 CET	49727	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.141506910 CET	49725	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:57.141685009 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.141735077 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.141758919 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.141777039 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.141787052 CET	49728	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.141818047 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.141827106 CET	49728	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.141874075 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.141910076 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.141916037 CET	49728	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.141916037 CET	443	49730	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.141922951 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.141989946 CET	49728	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.141997099 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.142039061 CET	443	49730	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.142083883 CET	49730	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.142528057 CET	49727	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.142538071 CET	443	49727	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.142554045 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.142585993 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.142597914 CET	49728	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.142604113 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.142628908 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.142653942 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.142653942 CET	49728	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.142663002 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.142703056 CET	49728	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.142895937 CET	49745	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.142915964 CET	443	49745	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.142973900 CET	49745	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.143480062 CET	49745	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.143491983 CET	443	49745	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.143549919 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.143589020 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.143593073 CET	49728	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.143599033 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.143636942 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.143646955 CET	49728	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.143654108 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.143717051 CET	49728	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.143723965 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.144459009 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.144504070 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.144506931 CET	49728	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.144514084 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.144558907 CET	49728	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.144565105 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.144593954 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.144632101 CET	49728	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.144639015 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.144785881 CET	49730	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.144792080 CET	443	49730	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.145035982 CET	49746	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.145049095 CET	443	49746	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.145103931 CET	49746	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.145303965 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.145354986 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.145386934 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.145405054 CET	49728	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.145411015 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.145438910 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.145450115 CET	49728	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.145478964 CET	49746	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.145495892 CET	443	49746	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.145533085 CET	49728	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.145538092 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.146368980 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.146399021 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.146424055 CET	49728	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.146429062 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.146445036 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.146472931 CET	49728	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.146492004 CET	49728	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.146559954 CET	49728	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.146565914 CET	443	49728	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.146850109 CET	49747	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.146859884 CET	443	49747	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.146914959 CET	49747	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.147242069 CET	49747	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.147253990 CET	443	49747	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.150290012 CET	49748	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.150305986 CET	443	49748	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.150361061 CET	49748	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.150600910 CET	49748	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.150614023 CET	443	49748	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.153728008 CET	49749	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:57.153739929 CET	443	49749	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:57.153803110 CET	49749	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:57.153975964 CET	49749	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:57.153981924 CET	443	49749	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:57.163033009 CET	49750	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.163057089 CET	443	49750	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.163120031 CET	49750	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.163301945 CET	49750	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.163312912 CET	443	49750	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.168224096 CET	443	49736	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.176234007 CET	443	49735	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.248615980 CET	443	49726	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.248655081 CET	443	49726	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.248681068 CET	443	49726	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.248707056 CET	443	49726	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.248714924 CET	49726	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.248723984 CET	443	49726	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.248745918 CET	443	49726	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.248791933 CET	49726	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.248799086 CET	443	49726	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.248816967 CET	49726	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.249362946 CET	443	49726	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.249413013 CET	49726	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.249553919 CET	49726	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.249563932 CET	443	49726	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.249892950 CET	49751	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.249916077 CET	443	49751	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.249980927 CET	49751	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.250291109 CET	49751	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.250298023 CET	443	49751	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.250775099 CET	49752	443	192.168.2.16	108.138.64.17
Mar 29, 2024 14:44:57.250796080 CET	443	49752	108.138.64.17	192.168.2.16
Mar 29, 2024 14:44:57.250855923 CET	49752	443	192.168.2.16	108.138.64.17
Mar 29, 2024 14:44:57.251070976 CET	49752	443	192.168.2.16	108.138.64.17
Mar 29, 2024 14:44:57.251080990 CET	443	49752	108.138.64.17	192.168.2.16
Mar 29, 2024 14:44:57.278477907 CET	443	49738	142.251.167.103	192.168.2.16
Mar 29, 2024 14:44:57.278886080 CET	49738	443	192.168.2.16	142.251.167.103
Mar 29, 2024 14:44:57.278914928 CET	443	49738	142.251.167.103	192.168.2.16
Mar 29, 2024 14:44:57.279927015 CET	443	49738	142.251.167.103	192.168.2.16
Mar 29, 2024 14:44:57.280016899 CET	49738	443	192.168.2.16	142.251.167.103
Mar 29, 2024 14:44:57.281049013 CET	49738	443	192.168.2.16	142.251.167.103
Mar 29, 2024 14:44:57.281132936 CET	443	49738	142.251.167.103	192.168.2.16
Mar 29, 2024 14:44:57.304688931 CET	443	49739	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.305075884 CET	49739	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.305087090 CET	443	49739	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.305449009 CET	443	49739	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.305746078 CET	49739	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.305815935 CET	443	49739	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.305882931 CET	49739	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.310004950 CET	443	49740	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.310209036 CET	49740	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.310233116 CET	443	49740	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.310779095 CET	443	49740	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.314076900 CET	49740	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.314212084 CET	443	49740	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.314214945 CET	49740	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.314989090 CET	443	49741	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.315169096 CET	49741	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.315197945 CET	443	49741	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.315505981 CET	443	49741	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.315860033 CET	49741	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.315937042 CET	443	49741	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.316049099 CET	49741	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.320326090 CET	443	49742	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.321134090 CET	49742	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.321146965 CET	443	49742	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.321481943 CET	443	49742	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.321757078 CET	49742	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.321816921 CET	443	49742	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.321882010 CET	49742	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.328564882 CET	443	49743	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.328790903 CET	49743	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.328814030 CET	443	49743	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.330053091 CET	443	49743	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.330135107 CET	49743	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.330379963 CET	49743	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.330467939 CET	443	49743	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.330523014 CET	49743	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.330756903 CET	49738	443	192.168.2.16	142.251.167.103
Mar 29, 2024 14:44:57.330779076 CET	443	49738	142.251.167.103	192.168.2.16
Mar 29, 2024 14:44:57.331060886 CET	443	49744	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.331304073 CET	49744	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.331314087 CET	443	49744	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.332288027 CET	443	49744	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.332371950 CET	49744	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.332679987 CET	49744	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.332731009 CET	443	49744	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.332830906 CET	49744	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.347434998 CET	443	49745	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.347749949 CET	49745	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.347769976 CET	443	49745	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.349524021 CET	443	49745	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.349591017 CET	49745	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.349922895 CET	49745	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.350061893 CET	49745	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.350065947 CET	443	49745	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.350143909 CET	443	49745	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.352229118 CET	443	49739	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.356234074 CET	443	49741	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.360233068 CET	443	49740	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.362766981 CET	49741	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.362766981 CET	49740	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.368237972 CET	443	49742	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.372239113 CET	443	49743	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.378793001 CET	49738	443	192.168.2.16	142.251.167.103
Mar 29, 2024 14:44:57.380228996 CET	443	49744	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.380284071 CET	49744	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.380294085 CET	443	49744	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.380295992 CET	49743	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.380340099 CET	443	49743	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.387135029 CET	443	49747	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.387501001 CET	49747	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.387516975 CET	443	49747	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.388979912 CET	443	49747	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.389062881 CET	49747	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.389384031 CET	49747	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.389559031 CET	443	49747	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.389568090 CET	49747	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.392112970 CET	443	49749	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:57.392383099 CET	49749	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:57.392402887 CET	443	49749	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:57.393956900 CET	443	49749	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:57.394025087 CET	49749	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:57.394399881 CET	49749	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:57.394520044 CET	443	49749	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:57.394561052 CET	49749	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:57.394758940 CET	49745	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.394773006 CET	443	49745	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.400671005 CET	443	49750	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.400871038 CET	443	49748	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.400957108 CET	49750	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.400970936 CET	443	49750	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.401108027 CET	49748	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.401140928 CET	443	49748	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.401366949 CET	443	49750	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.401690006 CET	49750	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.401751995 CET	443	49750	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.401825905 CET	49750	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.402532101 CET	443	49748	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.402614117 CET	49748	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.402884007 CET	49748	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.402977943 CET	443	49748	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.402991056 CET	49748	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.420968056 CET	443	49733	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.426765919 CET	49744	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.426772118 CET	49743	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.436239004 CET	443	49747	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.440241098 CET	443	49749	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:57.441756010 CET	49745	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.441756010 CET	49747	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.441771984 CET	443	49747	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.441802979 CET	49749	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:57.441817999 CET	443	49749	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:57.444236994 CET	443	49750	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.445410967 CET	443	49746	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.445678949 CET	49746	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.445712090 CET	443	49746	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.447289944 CET	443	49746	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.447382927 CET	49746	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.447767019 CET	49746	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.447835922 CET	443	49746	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.447957993 CET	49746	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.448247910 CET	443	49748	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.452157021 CET	443	49751	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.452403069 CET	49751	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.452415943 CET	443	49751	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.453452110 CET	443	49751	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.453531027 CET	49751	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.453883886 CET	49751	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.453931093 CET	443	49751	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.454037905 CET	49751	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.454042912 CET	443	49751	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.456731081 CET	49748	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.456754923 CET	443	49748	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.471579075 CET	443	49736	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.471630096 CET	443	49736	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.472434044 CET	49736	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.472476959 CET	49736	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.472496033 CET	443	49736	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.472507000 CET	49736	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.472748041 CET	49733	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.472759008 CET	443	49733	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.472771883 CET	49736	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.488240004 CET	443	49746	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.488739967 CET	49747	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.488754034 CET	49746	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.488756895 CET	49749	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:57.488770962 CET	443	49746	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.492082119 CET	443	49735	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.492117882 CET	443	49735	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.492156029 CET	443	49735	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.492187977 CET	49735	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.492202997 CET	443	49735	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.492259979 CET	49735	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.492301941 CET	443	49735	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.492669106 CET	443	49735	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.492764950 CET	443	49735	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.492784023 CET	443	49735	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.492803097 CET	443	49735	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.492808104 CET	49735	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.492811918 CET	443	49735	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.492825985 CET	49735	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.493457079 CET	49735	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.504738092 CET	49748	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.504803896 CET	49751	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.517241001 CET	443	49733	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.517307997 CET	49733	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.517317057 CET	443	49733	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.517478943 CET	443	49733	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.517503977 CET	443	49733	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.517525911 CET	443	49733	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.517529964 CET	49733	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.517534018 CET	443	49733	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.517565012 CET	49733	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.517570972 CET	443	49733	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.517606974 CET	49733	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.518256903 CET	443	49733	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.518296957 CET	443	49733	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.518316984 CET	443	49733	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.518359900 CET	49733	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.518364906 CET	443	49733	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.518384933 CET	443	49733	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.518425941 CET	49733	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.518632889 CET	49733	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.518644094 CET	443	49733	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.536760092 CET	49746	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.541623116 CET	443	49725	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:57.541698933 CET	443	49725	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:57.542015076 CET	49725	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:57.542121887 CET	49725	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:57.542133093 CET	443	49725	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:57.556819916 CET	443	49739	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.556900978 CET	443	49739	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.557044029 CET	49739	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.557559013 CET	49739	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.557576895 CET	443	49739	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.557960987 CET	49753	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.557995081 CET	443	49753	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.560129881 CET	49753	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.560405970 CET	49753	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.560422897 CET	443	49753	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.560861111 CET	49754	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.560888052 CET	443	49754	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.560955048 CET	49754	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.561177969 CET	49754	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.561192989 CET	443	49754	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.564985037 CET	443	49741	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.565104961 CET	443	49741	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.566031933 CET	49741	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.566252947 CET	49741	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.566265106 CET	443	49741	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.566574097 CET	49755	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.566591978 CET	443	49755	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.568814993 CET	49755	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.569084883 CET	49755	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.569099903 CET	443	49755	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.580279112 CET	443	49743	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.580388069 CET	443	49743	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.580857038 CET	49743	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.581079006 CET	49743	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.581084967 CET	443	49743	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.581331968 CET	49756	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.581362963 CET	443	49756	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.583350897 CET	49756	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.583530903 CET	49756	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.583543062 CET	443	49756	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.589446068 CET	443	49735	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.589483976 CET	443	49735	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.589502096 CET	443	49735	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.589521885 CET	443	49735	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.589551926 CET	443	49735	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.589571953 CET	443	49735	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.589574099 CET	49735	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.589595079 CET	443	49735	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.589605093 CET	443	49735	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.589620113 CET	49735	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.589620113 CET	49735	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.589631081 CET	49735	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.589639902 CET	443	49735	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.589694977 CET	443	49735	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.589956045 CET	49735	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.589966059 CET	443	49735	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.589973927 CET	49735	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.590010881 CET	49735	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.592916965 CET	49757	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.592950106 CET	443	49757	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.593039989 CET	49757	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.593215942 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.593250036 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.593328953 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.593475103 CET	49757	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.593491077 CET	443	49757	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.593678951 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.593691111 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.600656033 CET	443	49745	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.600708008 CET	443	49745	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.600848913 CET	49745	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.601370096 CET	49745	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.601386070 CET	443	49745	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.601656914 CET	49759	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.601672888 CET	443	49759	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.603574038 CET	49759	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.603809118 CET	49759	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.603818893 CET	443	49759	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.606570005 CET	443	49747	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.606686115 CET	443	49747	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.607606888 CET	49747	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.607809067 CET	49747	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.607817888 CET	443	49747	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.608114958 CET	49760	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.608146906 CET	443	49760	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.609083891 CET	49760	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.609256029 CET	49760	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.609271049 CET	443	49760	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.609285116 CET	443	49749	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:57.609339952 CET	443	49749	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:57.609365940 CET	443	49749	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:57.609390974 CET	443	49749	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:57.609407902 CET	49749	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:57.609419107 CET	443	49749	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:57.609438896 CET	49749	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:57.609474897 CET	443	49749	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:57.609500885 CET	443	49749	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:57.609515905 CET	49749	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:57.609519958 CET	443	49749	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:57.609558105 CET	443	49749	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:57.609589100 CET	443	49749	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:57.609596014 CET	49749	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:57.609601021 CET	443	49749	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:57.609627008 CET	49749	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:57.610106945 CET	443	49749	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:57.610140085 CET	443	49749	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:57.610146999 CET	49749	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:57.610152960 CET	443	49749	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:57.610181093 CET	49749	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:57.610186100 CET	443	49749	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:57.610235929 CET	443	49749	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:57.610301018 CET	443	49749	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:57.610337019 CET	49749	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:57.610693932 CET	49749	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:57.610702038 CET	443	49749	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:57.698290110 CET	443	49746	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.698332071 CET	443	49746	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.698440075 CET	49746	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.698466063 CET	443	49746	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.698481083 CET	443	49746	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.698517084 CET	49746	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.699048042 CET	49746	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.699063063 CET	443	49746	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.699407101 CET	49761	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.699434996 CET	443	49761	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.700946093 CET	49761	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.701191902 CET	49761	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.701205969 CET	443	49761	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.711349010 CET	49762	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:57.711368084 CET	443	49762	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:57.711429119 CET	49762	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:57.711637020 CET	49762	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:57.711646080 CET	443	49762	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:57.735177994 CET	49763	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:57.735194921 CET	443	49763	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:57.735285997 CET	49763	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:57.735472918 CET	49763	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:57.735486031 CET	443	49763	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:57.771188974 CET	443	49753	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.771476030 CET	49753	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.771492004 CET	443	49753	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.772365093 CET	443	49753	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.773228884 CET	49753	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.773329973 CET	443	49753	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.773416042 CET	49753	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.775437117 CET	443	49754	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.775854111 CET	443	49755	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.776055098 CET	49755	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.776071072 CET	443	49755	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.776158094 CET	49754	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.776182890 CET	443	49754	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.776422024 CET	443	49755	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.776691914 CET	443	49754	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.777017117 CET	49754	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.777100086 CET	443	49754	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.777250051 CET	49755	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.777314901 CET	443	49755	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.777379990 CET	49754	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.777422905 CET	49755	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.782402992 CET	443	49756	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.785320044 CET	49756	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.785343885 CET	443	49756	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.786349058 CET	443	49756	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.786418915 CET	49756	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.786829948 CET	49756	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.786889076 CET	443	49756	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.787049055 CET	49756	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.787055016 CET	443	49756	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.820235014 CET	443	49753	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.822776079 CET	443	49757	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.823035955 CET	49757	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.823045015 CET	443	49757	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.823388100 CET	443	49757	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.823879957 CET	49757	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.823956013 CET	443	49757	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.824145079 CET	49757	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.824244022 CET	443	49755	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.824246883 CET	443	49754	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.830071926 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.830287933 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.830296993 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.830789089 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.831070900 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.831156969 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.831171989 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.837527990 CET	443	49740	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.837569952 CET	443	49740	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.837654114 CET	443	49740	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.837723017 CET	49740	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.838231087 CET	49740	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.838244915 CET	443	49740	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.838578939 CET	49764	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.838598967 CET	443	49764	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.839745998 CET	49764	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.839745998 CET	49756	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.839914083 CET	49764	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.839925051 CET	443	49764	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.853151083 CET	443	49742	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.853213072 CET	443	49742	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.854434013 CET	49742	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.854557037 CET	49742	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.854569912 CET	443	49742	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.854902983 CET	49765	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.854922056 CET	443	49765	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.855757952 CET	49765	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.855827093 CET	443	49760	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.856045961 CET	49765	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.856055975 CET	443	49765	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.856254101 CET	49760	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.856271029 CET	443	49760	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.857697964 CET	443	49760	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.857791901 CET	49760	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.858068943 CET	49760	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.858174086 CET	49760	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.858179092 CET	443	49760	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.858189106 CET	443	49760	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.864234924 CET	443	49757	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.867958069 CET	443	49759	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.868133068 CET	49759	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.868149996 CET	443	49759	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.869875908 CET	443	49759	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.870049953 CET	49759	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.870187044 CET	49759	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.870263100 CET	49759	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.870264053 CET	443	49759	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.871561050 CET	443	49744	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.871675014 CET	443	49744	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.871747017 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.871752977 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.871767044 CET	49744	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.872391939 CET	49744	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.872404099 CET	443	49744	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.872709990 CET	49766	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.872721910 CET	443	49766	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.872792959 CET	49766	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.873176098 CET	49766	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.873186111 CET	443	49766	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.900796890 CET	443	49748	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.900942087 CET	443	49748	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.901817083 CET	49748	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.901895046 CET	49748	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.901902914 CET	443	49748	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.902124882 CET	49767	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.902156115 CET	443	49767	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.902759075 CET	49760	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.902767897 CET	443	49760	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.902791977 CET	49767	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.902981043 CET	49767	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.902997017 CET	443	49767	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.910679102 CET	443	49750	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.910720110 CET	443	49750	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.910742998 CET	443	49750	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.910763979 CET	49750	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.910772085 CET	443	49750	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.910873890 CET	443	49750	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.910895109 CET	443	49750	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.910934925 CET	49750	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.910939932 CET	443	49750	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.910949945 CET	49750	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.911262035 CET	443	49750	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.911286116 CET	443	49750	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.911303043 CET	443	49750	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.911329031 CET	49750	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.911334991 CET	443	49750	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.911356926 CET	49750	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.911890030 CET	443	49750	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.911963940 CET	443	49750	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.912014961 CET	49750	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.912230015 CET	49750	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.912235975 CET	443	49750	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.914859056 CET	49768	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.914885044 CET	443	49768	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.914961100 CET	49768	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.915148973 CET	49768	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.915163040 CET	443	49768	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.916233063 CET	443	49759	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.918747902 CET	49759	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.918771982 CET	443	49759	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.935584068 CET	443	49762	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:57.935856104 CET	49762	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:57.935863018 CET	443	49762	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:57.937335968 CET	443	49762	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:57.937499046 CET	49762	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:57.937766075 CET	49762	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:57.937907934 CET	49762	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:57.937958956 CET	443	49762	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:57.939966917 CET	443	49761	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.940180063 CET	49761	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.940195084 CET	443	49761	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.941354036 CET	443	49761	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.941416979 CET	49761	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.941762924 CET	49761	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.941822052 CET	443	49761	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.941896915 CET	49761	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.950730085 CET	49760	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.966826916 CET	49759	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.982825041 CET	49762	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:57.982829094 CET	49761	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.982831001 CET	443	49762	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:57.982836962 CET	443	49761	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.985462904 CET	443	49751	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.985605001 CET	443	49751	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.985779047 CET	49751	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.986160994 CET	49751	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.986180067 CET	443	49751	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.986455917 CET	49769	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.986480951 CET	443	49769	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:57.987273932 CET	49769	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.987535954 CET	49769	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:57.987550020 CET	443	49769	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.018136024 CET	443	49753	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.018178940 CET	443	49753	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.018251896 CET	443	49753	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.018402100 CET	49753	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.018872023 CET	49753	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.018887043 CET	443	49753	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.019248962 CET	49770	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.019309998 CET	443	49770	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.020951033 CET	49770	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.021264076 CET	49770	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.021281004 CET	443	49770	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.030730009 CET	49762	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:58.030981064 CET	49761	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.031379938 CET	443	49755	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.031456947 CET	443	49755	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.032493114 CET	49755	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.032710075 CET	49755	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.032721043 CET	443	49755	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.033008099 CET	49771	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.033021927 CET	443	49771	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.033083916 CET	49771	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.033458948 CET	49771	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.033472061 CET	443	49771	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.037193060 CET	443	49756	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.037367105 CET	443	49756	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.037902117 CET	49756	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.038127899 CET	49756	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.038136005 CET	443	49756	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.038371086 CET	49772	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.038384914 CET	443	49772	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.040046930 CET	49772	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.040286064 CET	49772	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.040296078 CET	443	49772	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.065005064 CET	443	49764	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.065318108 CET	49764	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.065325975 CET	443	49764	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.065705061 CET	443	49764	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.066068888 CET	49764	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.066138983 CET	443	49764	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.066205978 CET	49764	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.078368902 CET	443	49765	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.078629971 CET	49765	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.078638077 CET	443	49765	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.079263926 CET	443	49765	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.079611063 CET	49765	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.079735041 CET	49765	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.079741001 CET	443	49765	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.079766989 CET	443	49765	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.080240011 CET	443	49766	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.081536055 CET	49766	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.081546068 CET	443	49766	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.082585096 CET	443	49766	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.082653046 CET	49766	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.083066940 CET	49766	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.083122015 CET	443	49766	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.083215952 CET	49766	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.087929010 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.087981939 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.088009119 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.088041067 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.088049889 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.088092089 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.088097095 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.088184118 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.088234901 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.088260889 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.088277102 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.088284016 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.088303089 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.088857889 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.088923931 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.088970900 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.088977098 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.089015961 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.089037895 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.089232922 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.089658976 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.089689016 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.089719057 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.089725971 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.089750051 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.089807034 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.089859962 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.089889050 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.089904070 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.089910030 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.089932919 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.090601921 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.090636015 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.090660095 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.090677023 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.090684891 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.090717077 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.090744972 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.090789080 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.090805054 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.091572046 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.091651917 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.091718912 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.091718912 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.091732025 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.091758966 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.091811895 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.091839075 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.091850042 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.091855049 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.092437029 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.092480898 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.092487097 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.092523098 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.092528105 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.092752934 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.092793941 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.092835903 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.092847109 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.092886925 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.093343973 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.093632936 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.093687057 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.093693018 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.096244097 CET	443	49759	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.096339941 CET	443	49759	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.096420050 CET	49759	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.097017050 CET	49759	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.097042084 CET	443	49759	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.097448111 CET	49773	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.097465992 CET	443	49773	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.097529888 CET	49773	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.097944975 CET	49773	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.097954988 CET	443	49773	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.112234116 CET	443	49764	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.124238014 CET	443	49766	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.125751019 CET	49766	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.125751972 CET	49765	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.125756979 CET	443	49766	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.129318953 CET	443	49767	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.129551888 CET	49767	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.129575014 CET	443	49767	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.130769014 CET	443	49767	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.131464958 CET	49767	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.131820917 CET	49767	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.131897926 CET	443	49767	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.131968975 CET	49767	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.138803005 CET	443	49768	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.141602039 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.142184019 CET	49768	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.142209053 CET	443	49768	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.142786980 CET	443	49768	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.145519972 CET	49768	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.145595074 CET	443	49768	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.145634890 CET	49768	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.155241966 CET	443	49761	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.155375004 CET	443	49761	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.156843901 CET	49761	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.157038927 CET	49761	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.157053947 CET	443	49761	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.157399893 CET	49774	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.157418966 CET	443	49774	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.157486916 CET	49774	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.158024073 CET	49774	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.158034086 CET	443	49774	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.171756029 CET	49766	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.176238060 CET	443	49767	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.179497004 CET	443	49757	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.179572105 CET	443	49757	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.180330992 CET	49757	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.180342913 CET	443	49757	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.180358887 CET	49757	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.180394888 CET	49757	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.183971882 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.184053898 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.184061050 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.184103966 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.184928894 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.184993982 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.185137033 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.185200930 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.185842991 CET	443	49762	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:58.185894966 CET	443	49762	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:58.186017990 CET	443	49762	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:58.186039925 CET	443	49762	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:58.186074018 CET	49762	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:58.186080933 CET	443	49762	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:58.186108112 CET	49762	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:58.186223984 CET	443	49762	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:58.186389923 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.186461926 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.186903954 CET	443	49762	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:58.186932087 CET	49762	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:58.186938047 CET	443	49762	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:58.186975956 CET	49762	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:58.186980009 CET	443	49762	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:58.187078953 CET	443	49762	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:58.187630892 CET	443	49762	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:58.187683105 CET	49762	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:58.187693119 CET	443	49762	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:58.187715054 CET	443	49762	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:58.187738895 CET	49762	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:58.187743902 CET	443	49762	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:58.187789917 CET	49762	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:58.187793970 CET	443	49762	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:58.187838078 CET	443	49762	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:58.187846899 CET	49767	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.187870026 CET	49768	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.187872887 CET	49762	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:58.187877893 CET	443	49762	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:58.187880993 CET	443	49768	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.187889099 CET	443	49767	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.187906027 CET	443	49762	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:58.187946081 CET	49762	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:58.188168049 CET	49762	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:58.188174963 CET	443	49762	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:58.190705061 CET	443	49769	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.190922976 CET	49769	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.190937042 CET	443	49769	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.191973925 CET	443	49769	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.192034006 CET	49769	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.192413092 CET	49769	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.192478895 CET	443	49769	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.192565918 CET	49769	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.192574024 CET	443	49769	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.221081018 CET	443	49770	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.221311092 CET	49770	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.221330881 CET	443	49770	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.221683979 CET	443	49770	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.222477913 CET	49770	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.222544909 CET	443	49770	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.222589970 CET	49770	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.234813929 CET	49769	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.235883951 CET	443	49771	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.237627029 CET	49771	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.237638950 CET	443	49771	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.238194942 CET	443	49771	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.239746094 CET	49767	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.240016937 CET	49771	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.240128994 CET	49771	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.240197897 CET	443	49771	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.240957022 CET	443	49772	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.241153002 CET	49772	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.241173029 CET	443	49772	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.242217064 CET	443	49772	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.242285967 CET	49772	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.242541075 CET	49772	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.242599010 CET	443	49772	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.242636919 CET	49772	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.264239073 CET	443	49770	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.266765118 CET	49770	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.282754898 CET	49771	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.282808065 CET	49772	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.282826900 CET	443	49772	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.285181046 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.285213947 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.285238981 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.285248041 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.285260916 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.285275936 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.285300970 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.285305977 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.285326958 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.285331011 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.285342932 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.285348892 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.285387993 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.285393953 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.285401106 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.285430908 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.285438061 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.285482883 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.285490036 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.285531998 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.287877083 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.287918091 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.287935019 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.287949085 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.287954092 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.287987947 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.298521996 CET	443	49754	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.298629045 CET	443	49754	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.298688889 CET	49754	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.299458027 CET	49754	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.299474001 CET	443	49754	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.299845934 CET	49775	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.299881935 CET	443	49775	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.299952984 CET	49775	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.300390005 CET	49775	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.300403118 CET	443	49775	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.305109978 CET	443	49773	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.305381060 CET	49773	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.305397987 CET	443	49773	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.306451082 CET	443	49773	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.306514978 CET	49773	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.306932926 CET	49773	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.306991100 CET	443	49773	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.307070971 CET	49773	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.307077885 CET	443	49773	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.329734087 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.329735994 CET	49772	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.332681894 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.332720041 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.332732916 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.332762957 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.332762957 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.332772017 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.332801104 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.332808971 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.332823038 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.332829952 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.332853079 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.333971977 CET	443	49763	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:58.334175110 CET	49763	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:58.334197998 CET	443	49763	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:58.335249901 CET	443	49763	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:58.335314989 CET	49763	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:58.336231947 CET	49763	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:58.336296082 CET	443	49763	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:58.336358070 CET	49763	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:58.336366892 CET	443	49763	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:58.360773087 CET	49773	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.361156940 CET	443	49774	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.361388922 CET	49774	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.361416101 CET	443	49774	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.362588882 CET	443	49774	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.362658978 CET	49774	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.362941980 CET	49774	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.363007069 CET	443	49774	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.363084078 CET	49774	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.363092899 CET	443	49774	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.366442919 CET	443	49760	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.366533995 CET	443	49760	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.366581917 CET	49760	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.367221117 CET	49760	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.367238998 CET	443	49760	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.367644072 CET	49777	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.367669106 CET	443	49777	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.367738008 CET	49777	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.368056059 CET	49777	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.368071079 CET	443	49777	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.376705885 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.376750946 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.376760006 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.376770973 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.376775026 CET	49763	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:58.376784086 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.376825094 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.376830101 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.376847982 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.376872063 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.376876116 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.376888990 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.376902103 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.376934052 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.376949072 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.376954079 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.376976967 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.376977921 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.377012968 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.377016068 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.377027035 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.377072096 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.380158901 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.380203962 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.380224943 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.380229950 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.380245924 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.381187916 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.381232977 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.381247044 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.381252050 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.381268024 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.381294966 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.381302118 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.381325960 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.381330967 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.381350040 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.381367922 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.381417036 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.381419897 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.381433010 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.381469011 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.385190010 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.385240078 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.385250092 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.385253906 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.385302067 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.385320902 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.385380030 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.385394096 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.385427952 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.385452032 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.385457993 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.385478973 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.385478973 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.385500908 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.385528088 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.385533094 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.385569096 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.385576963 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.385600090 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.385634899 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.385638952 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.385657072 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.385662079 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.385675907 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.385723114 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.385727882 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.385742903 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.385762930 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.385791063 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.385796070 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.385821104 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.385829926 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.385847092 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.385874987 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.385879993 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.385905027 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.386904001 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.386938095 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.386976004 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.386981010 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.387006998 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.408749104 CET	49774	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.427318096 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.427345037 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.427433968 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.427442074 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.471757889 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.471788883 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.471858025 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.471868038 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.474306107 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.474348068 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.474380016 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.474406958 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.474415064 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.474432945 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.474451065 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.474451065 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.477097034 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.477137089 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.477210045 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.477232933 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.477247000 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.477283955 CET	443	49770	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.477828026 CET	443	49770	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.477893114 CET	49770	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.478435993 CET	49770	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.478441000 CET	443	49770	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.478840113 CET	49778	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.478854895 CET	443	49778	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.478924990 CET	49778	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.479336977 CET	49778	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.479347944 CET	443	49778	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.479516029 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.479546070 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.479579926 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.479587078 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.479624033 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.481699944 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.481720924 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.481807947 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.481815100 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.482767105 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.482788086 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.482858896 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.482865095 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.483800888 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.483819008 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.483880997 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.483892918 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.484695911 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.484716892 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.484761000 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.484766006 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.484793901 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.485519886 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.485538006 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.485594988 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.485600948 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.487210989 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.487227917 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.487293959 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.487299919 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.488578081 CET	443	49771	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.488686085 CET	443	49771	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.488761902 CET	49771	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.488830090 CET	443	49772	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.489149094 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.489170074 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.489228010 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.489233971 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.489412069 CET	443	49772	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.489464045 CET	49772	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.489968061 CET	49771	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.489980936 CET	443	49771	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.490376949 CET	49779	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.490391970 CET	443	49779	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.490466118 CET	49779	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.490534067 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.490551949 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.490597010 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.490603924 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.490788937 CET	49772	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.490804911 CET	443	49772	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.491266012 CET	49779	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.491276026 CET	443	49779	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.492398977 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.492423058 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.492490053 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.492496014 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.492532015 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.494261026 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.494282007 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.494357109 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.494363070 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.495572090 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.495600939 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.495641947 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.495646954 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.495666981 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.501116991 CET	443	49775	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.501360893 CET	49775	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.501384020 CET	443	49775	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.501725912 CET	443	49775	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.502015114 CET	49775	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.502073050 CET	443	49775	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.502157927 CET	49775	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.521752119 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.521781921 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.521832943 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.521843910 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.521878958 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.532855988 CET	443	49763	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:58.532964945 CET	443	49763	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:58.533025980 CET	49763	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:58.533514023 CET	49763	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:58.533528090 CET	443	49763	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:58.548233032 CET	443	49775	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.553668022 CET	49782	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:58.553697109 CET	443	49782	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:58.553755999 CET	49782	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:58.554020882 CET	49782	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:58.554039955 CET	443	49782	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:58.560368061 CET	443	49773	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.560513973 CET	443	49773	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.560570002 CET	49773	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.561006069 CET	49773	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.561016083 CET	443	49773	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.566409111 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.566447973 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.566494942 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.566504955 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.566562891 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.567698002 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.567722082 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.567753077 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.567759037 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.567766905 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.567790985 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.567810059 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.569231033 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.569267035 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.569308996 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.569314003 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.569340944 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.571162939 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.571192026 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.571237087 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.571242094 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.571274996 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.571885109 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.571944952 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.571949959 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.571985960 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.571994066 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.572024107 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.572105885 CET	49758	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.572113991 CET	443	49758	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.589184046 CET	443	49752	108.138.64.17	192.168.2.16
Mar 29, 2024 14:44:58.589355946 CET	443	49777	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.589427948 CET	49752	443	192.168.2.16	108.138.64.17
Mar 29, 2024 14:44:58.589437962 CET	443	49752	108.138.64.17	192.168.2.16
Mar 29, 2024 14:44:58.589545012 CET	49777	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.589559078 CET	443	49777	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.589929104 CET	443	49777	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.590418100 CET	49777	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.590491056 CET	443	49777	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.590568066 CET	49777	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.590733051 CET	443	49752	108.138.64.17	192.168.2.16
Mar 29, 2024 14:44:58.590806961 CET	49752	443	192.168.2.16	108.138.64.17
Mar 29, 2024 14:44:58.591691971 CET	49752	443	192.168.2.16	108.138.64.17
Mar 29, 2024 14:44:58.591823101 CET	443	49752	108.138.64.17	192.168.2.16
Mar 29, 2024 14:44:58.591840982 CET	49752	443	192.168.2.16	108.138.64.17
Mar 29, 2024 14:44:58.592559099 CET	443	49764	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.592789888 CET	443	49764	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.592844009 CET	49764	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.593209028 CET	49764	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.593223095 CET	443	49764	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.593558073 CET	49783	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.593592882 CET	443	49783	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.593662024 CET	49783	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.594034910 CET	49783	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.594048977 CET	443	49783	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.605459929 CET	49784	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.605489969 CET	443	49784	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.605590105 CET	49784	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.605776072 CET	49784	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.605792046 CET	443	49784	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.606987000 CET	443	49765	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.607084036 CET	443	49765	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.607142925 CET	49765	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.607589006 CET	49765	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.607609987 CET	443	49765	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.607877970 CET	49785	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.607899904 CET	443	49785	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.607969046 CET	49785	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.608284950 CET	49785	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.608297110 CET	443	49785	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.623022079 CET	443	49766	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.623111010 CET	443	49766	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.623163939 CET	49766	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.623636961 CET	49766	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.623644114 CET	443	49766	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.623879910 CET	49786	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.623899937 CET	443	49786	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.623966932 CET	49786	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.624263048 CET	49786	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.624277115 CET	443	49786	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.627063990 CET	443	49774	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.627199888 CET	443	49774	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.627247095 CET	49774	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.627697945 CET	49774	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.627701998 CET	443	49774	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.632745981 CET	49752	443	192.168.2.16	108.138.64.17
Mar 29, 2024 14:44:58.632754087 CET	443	49752	108.138.64.17	192.168.2.16
Mar 29, 2024 14:44:58.636236906 CET	443	49777	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.639550924 CET	49787	443	192.168.2.16	146.75.28.157
Mar 29, 2024 14:44:58.639583111 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:58.639695883 CET	49787	443	192.168.2.16	146.75.28.157
Mar 29, 2024 14:44:58.639878035 CET	49787	443	192.168.2.16	146.75.28.157
Mar 29, 2024 14:44:58.639893055 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:58.640486956 CET	49788	443	192.168.2.16	18.160.41.53
Mar 29, 2024 14:44:58.640500069 CET	443	49788	18.160.41.53	192.168.2.16
Mar 29, 2024 14:44:58.640563011 CET	49788	443	192.168.2.16	18.160.41.53
Mar 29, 2024 14:44:58.640743971 CET	49788	443	192.168.2.16	18.160.41.53
Mar 29, 2024 14:44:58.640755892 CET	443	49788	18.160.41.53	192.168.2.16
Mar 29, 2024 14:44:58.641256094 CET	49789	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:44:58.641262054 CET	443	49789	151.101.129.140	192.168.2.16
Mar 29, 2024 14:44:58.641318083 CET	49789	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:44:58.641491890 CET	49790	443	192.168.2.16	3.162.129.245
Mar 29, 2024 14:44:58.641503096 CET	443	49790	3.162.129.245	192.168.2.16
Mar 29, 2024 14:44:58.641566038 CET	49790	443	192.168.2.16	3.162.129.245
Mar 29, 2024 14:44:58.641685963 CET	49789	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:44:58.641697884 CET	443	49789	151.101.129.140	192.168.2.16
Mar 29, 2024 14:44:58.641818047 CET	49790	443	192.168.2.16	3.162.129.245
Mar 29, 2024 14:44:58.641829967 CET	443	49790	3.162.129.245	192.168.2.16
Mar 29, 2024 14:44:58.644726038 CET	49791	443	192.168.2.16	3.162.103.76
Mar 29, 2024 14:44:58.644733906 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:58.644798040 CET	49791	443	192.168.2.16	3.162.103.76
Mar 29, 2024 14:44:58.644957066 CET	49791	443	192.168.2.16	3.162.103.76
Mar 29, 2024 14:44:58.644967079 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:58.646481037 CET	49792	443	192.168.2.16	3.162.103.56
Mar 29, 2024 14:44:58.646488905 CET	443	49792	3.162.103.56	192.168.2.16
Mar 29, 2024 14:44:58.646591902 CET	49792	443	192.168.2.16	3.162.103.56
Mar 29, 2024 14:44:58.646727085 CET	49792	443	192.168.2.16	3.162.103.56
Mar 29, 2024 14:44:58.646738052 CET	443	49792	3.162.103.56	192.168.2.16
Mar 29, 2024 14:44:58.650290966 CET	49793	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:58.650320053 CET	443	49793	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:58.650394917 CET	49793	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:58.650573969 CET	49793	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:58.650585890 CET	443	49793	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:58.656111956 CET	443	49767	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.656260014 CET	443	49767	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.656317949 CET	49767	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.656752110 CET	49767	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.656765938 CET	443	49767	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.657035112 CET	49794	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.657066107 CET	443	49794	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.657124996 CET	49794	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.657444954 CET	49794	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.657458067 CET	443	49794	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.669384956 CET	443	49768	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.669457912 CET	443	49768	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.669495106 CET	443	49768	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.669518948 CET	443	49768	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.669519901 CET	49768	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.669543982 CET	443	49768	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.669572115 CET	49768	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.669750929 CET	443	49768	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.669809103 CET	49768	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.669816971 CET	443	49768	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.669872046 CET	443	49768	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.669926882 CET	49768	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.669933081 CET	443	49768	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.670116901 CET	443	49768	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.670164108 CET	49768	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.670171022 CET	443	49768	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.670202017 CET	443	49768	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.670239925 CET	49768	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.670245886 CET	443	49768	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.670269966 CET	443	49768	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.670312881 CET	49768	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.670408964 CET	49768	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.670418978 CET	443	49768	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.679752111 CET	49752	443	192.168.2.16	108.138.64.17
Mar 29, 2024 14:44:58.707489967 CET	443	49778	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.707781076 CET	49778	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.707803965 CET	443	49778	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.708389997 CET	443	49778	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.708754063 CET	49778	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.708836079 CET	443	49778	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.708865881 CET	49778	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.709013939 CET	443	49779	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.709181070 CET	49779	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.709196091 CET	443	49779	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.710304976 CET	443	49779	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.710391998 CET	49779	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.710673094 CET	49779	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.710732937 CET	443	49779	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.710758924 CET	49779	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.726166964 CET	443	49769	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.726212978 CET	443	49769	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.726311922 CET	49769	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.726321936 CET	443	49769	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.726335049 CET	443	49769	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.726401091 CET	49769	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.727039099 CET	49769	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.727046967 CET	443	49769	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.727363110 CET	49796	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.727382898 CET	443	49796	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.727449894 CET	49796	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.727823973 CET	49796	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.727839947 CET	443	49796	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.752237082 CET	443	49778	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.756232023 CET	443	49779	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.759757042 CET	49778	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.759759903 CET	49779	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.759767056 CET	443	49779	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.787856102 CET	443	49782	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:58.788176060 CET	49782	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:58.788194895 CET	443	49782	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:58.788618088 CET	443	49782	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:58.788925886 CET	49782	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:58.788996935 CET	443	49782	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:58.789079905 CET	49782	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:58.805768967 CET	49779	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.814364910 CET	443	49784	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.814554930 CET	49784	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.814594030 CET	443	49784	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.814990997 CET	443	49784	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.815263987 CET	49784	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.815346956 CET	443	49784	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.815567970 CET	49784	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.816175938 CET	443	49785	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.816365957 CET	49785	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.816385031 CET	443	49785	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.816778898 CET	443	49785	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.817105055 CET	49785	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.817169905 CET	443	49785	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.817235947 CET	49785	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.827811003 CET	443	49786	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.828025103 CET	49786	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.828037977 CET	443	49786	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.829104900 CET	443	49786	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.829180002 CET	49786	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.829432964 CET	49786	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.829499006 CET	443	49786	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.829538107 CET	49786	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.833406925 CET	443	49777	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.833513975 CET	443	49777	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.833565950 CET	49777	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.834068060 CET	49777	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.834083080 CET	443	49777	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.836234093 CET	443	49782	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:58.848038912 CET	443	49788	18.160.41.53	192.168.2.16
Mar 29, 2024 14:44:58.848285913 CET	49788	443	192.168.2.16	18.160.41.53
Mar 29, 2024 14:44:58.848304987 CET	443	49788	18.160.41.53	192.168.2.16
Mar 29, 2024 14:44:58.849345922 CET	443	49788	18.160.41.53	192.168.2.16
Mar 29, 2024 14:44:58.849412918 CET	49788	443	192.168.2.16	18.160.41.53
Mar 29, 2024 14:44:58.850467920 CET	49788	443	192.168.2.16	18.160.41.53
Mar 29, 2024 14:44:58.850552082 CET	443	49788	18.160.41.53	192.168.2.16
Mar 29, 2024 14:44:58.850655079 CET	49788	443	192.168.2.16	18.160.41.53
Mar 29, 2024 14:44:58.850663900 CET	443	49788	18.160.41.53	192.168.2.16
Mar 29, 2024 14:44:58.856230021 CET	443	49784	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.860235929 CET	443	49785	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.870085001 CET	443	49752	108.138.64.17	192.168.2.16
Mar 29, 2024 14:44:58.870121956 CET	443	49752	108.138.64.17	192.168.2.16
Mar 29, 2024 14:44:58.870166063 CET	49752	443	192.168.2.16	108.138.64.17
Mar 29, 2024 14:44:58.870186090 CET	443	49752	108.138.64.17	192.168.2.16
Mar 29, 2024 14:44:58.870382071 CET	443	49752	108.138.64.17	192.168.2.16
Mar 29, 2024 14:44:58.870429039 CET	49752	443	192.168.2.16	108.138.64.17
Mar 29, 2024 14:44:58.870855093 CET	49752	443	192.168.2.16	108.138.64.17
Mar 29, 2024 14:44:58.870863914 CET	443	49752	108.138.64.17	192.168.2.16
Mar 29, 2024 14:44:58.876235008 CET	443	49786	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.877980947 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:58.878226042 CET	49791	443	192.168.2.16	3.162.103.76
Mar 29, 2024 14:44:58.878246069 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:58.879049063 CET	443	49792	3.162.103.56	192.168.2.16
Mar 29, 2024 14:44:58.879282951 CET	49792	443	192.168.2.16	3.162.103.56
Mar 29, 2024 14:44:58.879292011 CET	443	49792	3.162.103.56	192.168.2.16
Mar 29, 2024 14:44:58.879364014 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:58.879426003 CET	49791	443	192.168.2.16	3.162.103.76
Mar 29, 2024 14:44:58.880304098 CET	443	49792	3.162.103.56	192.168.2.16
Mar 29, 2024 14:44:58.880357027 CET	49792	443	192.168.2.16	3.162.103.56
Mar 29, 2024 14:44:58.881921053 CET	49791	443	192.168.2.16	3.162.103.76
Mar 29, 2024 14:44:58.881984949 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:58.883090019 CET	49791	443	192.168.2.16	3.162.103.76
Mar 29, 2024 14:44:58.883097887 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:58.883745909 CET	49786	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.883759975 CET	443	49786	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.883826017 CET	49792	443	192.168.2.16	3.162.103.56
Mar 29, 2024 14:44:58.883898973 CET	443	49792	3.162.103.56	192.168.2.16
Mar 29, 2024 14:44:58.884056091 CET	49792	443	192.168.2.16	3.162.103.56
Mar 29, 2024 14:44:58.884063005 CET	443	49792	3.162.103.56	192.168.2.16
Mar 29, 2024 14:44:58.895420074 CET	443	49790	3.162.129.245	192.168.2.16
Mar 29, 2024 14:44:58.895642042 CET	49790	443	192.168.2.16	3.162.129.245
Mar 29, 2024 14:44:58.895649910 CET	443	49790	3.162.129.245	192.168.2.16
Mar 29, 2024 14:44:58.896758080 CET	443	49790	3.162.129.245	192.168.2.16
Mar 29, 2024 14:44:58.896822929 CET	49790	443	192.168.2.16	3.162.129.245
Mar 29, 2024 14:44:58.897660971 CET	49790	443	192.168.2.16	3.162.129.245
Mar 29, 2024 14:44:58.897723913 CET	443	49790	3.162.129.245	192.168.2.16
Mar 29, 2024 14:44:58.897800922 CET	49790	443	192.168.2.16	3.162.129.245
Mar 29, 2024 14:44:58.897808075 CET	443	49790	3.162.129.245	192.168.2.16
Mar 29, 2024 14:44:58.899723053 CET	49788	443	192.168.2.16	18.160.41.53
Mar 29, 2024 14:44:58.905361891 CET	443	49794	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.905560017 CET	49794	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.905580044 CET	443	49794	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.906625032 CET	443	49794	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.906689882 CET	49794	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.906969070 CET	49794	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.907028913 CET	443	49794	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.907092094 CET	49794	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.907099962 CET	443	49794	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.931761980 CET	49791	443	192.168.2.16	3.162.103.76
Mar 29, 2024 14:44:58.931762934 CET	49792	443	192.168.2.16	3.162.103.56
Mar 29, 2024 14:44:58.931761980 CET	49786	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.933104038 CET	443	49796	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.933305979 CET	49796	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.933315039 CET	443	49796	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.934374094 CET	443	49796	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.934438944 CET	49796	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.934706926 CET	49796	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.934772968 CET	443	49796	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.934875965 CET	49796	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.934883118 CET	443	49796	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.944365978 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:58.944574118 CET	49787	443	192.168.2.16	146.75.28.157
Mar 29, 2024 14:44:58.944595098 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:58.945703030 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:58.945760965 CET	49787	443	192.168.2.16	146.75.28.157
Mar 29, 2024 14:44:58.946691036 CET	49787	443	192.168.2.16	146.75.28.157
Mar 29, 2024 14:44:58.946758986 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:58.946916103 CET	49787	443	192.168.2.16	146.75.28.157
Mar 29, 2024 14:44:58.946928024 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:58.947726011 CET	49790	443	192.168.2.16	3.162.129.245
Mar 29, 2024 14:44:58.947756052 CET	49794	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.951133013 CET	443	49778	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.951203108 CET	443	49778	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.951273918 CET	49778	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.951287985 CET	443	49778	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.951308012 CET	443	49778	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.951349020 CET	49778	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.951901913 CET	49778	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.951911926 CET	443	49778	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.960211039 CET	443	49779	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.960263014 CET	443	49779	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.960290909 CET	443	49779	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.960316896 CET	49779	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.960319042 CET	443	49779	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.960338116 CET	443	49779	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.960362911 CET	49779	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.960602045 CET	443	49779	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.960633993 CET	443	49779	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.960648060 CET	49779	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.960654020 CET	443	49779	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.960695028 CET	49779	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.960728884 CET	443	49779	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.960783005 CET	443	49779	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.960827112 CET	49779	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.961009026 CET	49779	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.961018085 CET	443	49779	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:58.961033106 CET	49779	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.961062908 CET	49779	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.978823900 CET	49797	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:58.978842020 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:58.978916883 CET	49797	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:58.978996038 CET	49798	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:58.979021072 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:58.979074955 CET	49798	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:58.979216099 CET	49797	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:58.979233980 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:58.979345083 CET	49798	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:58.979360104 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:58.979758024 CET	49796	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:58.995748043 CET	49787	443	192.168.2.16	146.75.28.157
Mar 29, 2024 14:44:59.032458067 CET	443	49782	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:59.032514095 CET	443	49782	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:59.032552004 CET	443	49782	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:59.032567978 CET	49782	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:59.032584906 CET	443	49782	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:59.032594919 CET	443	49782	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:59.032628059 CET	49782	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:59.032653093 CET	443	49782	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:59.032708883 CET	49782	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:59.032721043 CET	443	49782	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:59.032793999 CET	443	49782	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:59.032834053 CET	49782	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:59.032840967 CET	443	49782	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:59.033432007 CET	443	49782	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:59.033459902 CET	443	49782	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:59.033474922 CET	49782	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:59.033483982 CET	443	49782	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:59.033515930 CET	49782	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:59.033519983 CET	443	49782	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:59.033591032 CET	443	49782	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:59.033627987 CET	49782	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:59.033632994 CET	443	49782	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:59.033767939 CET	443	49782	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:59.033813953 CET	49782	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:59.033910990 CET	49782	443	192.168.2.16	172.67.20.8
Mar 29, 2024 14:44:59.033921957 CET	443	49782	172.67.20.8	192.168.2.16
Mar 29, 2024 14:44:59.036623001 CET	49799	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:59.036648989 CET	443	49799	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:59.036745071 CET	49799	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:59.036947966 CET	49799	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:59.036961079 CET	443	49799	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:59.044538975 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.044701099 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.044744015 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.044758081 CET	49787	443	192.168.2.16	146.75.28.157
Mar 29, 2024 14:44:59.044779062 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.044821024 CET	49787	443	192.168.2.16	146.75.28.157
Mar 29, 2024 14:44:59.044822931 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.044838905 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.044898033 CET	49787	443	192.168.2.16	146.75.28.157
Mar 29, 2024 14:44:59.047647953 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.048515081 CET	443	49775	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.048563004 CET	443	49775	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.048614979 CET	49775	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.048638105 CET	443	49775	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.048650980 CET	443	49775	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.048723936 CET	49775	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.049231052 CET	49775	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.049243927 CET	443	49775	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.049602032 CET	49800	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.049621105 CET	443	49800	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.049674988 CET	49800	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.050045013 CET	49800	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.050056934 CET	443	49800	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.050966978 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.051028013 CET	49787	443	192.168.2.16	146.75.28.157
Mar 29, 2024 14:44:59.051054955 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.054260015 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.054317951 CET	49787	443	192.168.2.16	146.75.28.157
Mar 29, 2024 14:44:59.054336071 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.057679892 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.057759047 CET	49787	443	192.168.2.16	146.75.28.157
Mar 29, 2024 14:44:59.057777882 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.061074972 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.061148882 CET	49787	443	192.168.2.16	146.75.28.157
Mar 29, 2024 14:44:59.061165094 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.064105988 CET	443	49793	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:59.064131975 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.064204931 CET	49787	443	192.168.2.16	146.75.28.157
Mar 29, 2024 14:44:59.064228058 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.064336061 CET	49793	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:59.064344883 CET	443	49793	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:59.065423012 CET	443	49793	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:59.065505981 CET	49793	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:59.065773964 CET	49793	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:59.065833092 CET	443	49793	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:59.065917969 CET	49793	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:59.065924883 CET	443	49793	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:59.067259073 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.067311049 CET	49787	443	192.168.2.16	146.75.28.157
Mar 29, 2024 14:44:59.067334890 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.070590973 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.070656061 CET	49787	443	192.168.2.16	146.75.28.157
Mar 29, 2024 14:44:59.070672035 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.077768087 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.077821970 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.077864885 CET	49787	443	192.168.2.16	146.75.28.157
Mar 29, 2024 14:44:59.077888966 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.077936888 CET	49787	443	192.168.2.16	146.75.28.157
Mar 29, 2024 14:44:59.080398083 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.081094980 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.081118107 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.081178904 CET	49791	443	192.168.2.16	3.162.103.76
Mar 29, 2024 14:44:59.081204891 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.083520889 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.083595991 CET	49787	443	192.168.2.16	146.75.28.157
Mar 29, 2024 14:44:59.083617926 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.101809025 CET	443	49790	3.162.129.245	192.168.2.16
Mar 29, 2024 14:44:59.106776953 CET	49793	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:59.115484953 CET	443	49790	3.162.129.245	192.168.2.16
Mar 29, 2024 14:44:59.115493059 CET	443	49790	3.162.129.245	192.168.2.16
Mar 29, 2024 14:44:59.115503073 CET	443	49790	3.162.129.245	192.168.2.16
Mar 29, 2024 14:44:59.115577936 CET	49790	443	192.168.2.16	3.162.129.245
Mar 29, 2024 14:44:59.115592003 CET	443	49790	3.162.129.245	192.168.2.16
Mar 29, 2024 14:44:59.115658045 CET	49790	443	192.168.2.16	3.162.129.245
Mar 29, 2024 14:44:59.123020887 CET	49791	443	192.168.2.16	3.162.103.76
Mar 29, 2024 14:44:59.140388012 CET	49787	443	192.168.2.16	146.75.28.157
Mar 29, 2024 14:44:59.140678883 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.185759068 CET	49787	443	192.168.2.16	146.75.28.157
Mar 29, 2024 14:44:59.185789108 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.192748070 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.192763090 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.192800045 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.192815065 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.192825079 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.192847967 CET	49791	443	192.168.2.16	3.162.103.76
Mar 29, 2024 14:44:59.192862034 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.192873001 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.192884922 CET	49791	443	192.168.2.16	3.162.103.76
Mar 29, 2024 14:44:59.192889929 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.192899942 CET	49791	443	192.168.2.16	3.162.103.76
Mar 29, 2024 14:44:59.192902088 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.192914963 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.192924976 CET	49791	443	192.168.2.16	3.162.103.76
Mar 29, 2024 14:44:59.192945004 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.192951918 CET	49791	443	192.168.2.16	3.162.103.76
Mar 29, 2024 14:44:59.192960978 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.192984104 CET	49791	443	192.168.2.16	3.162.103.76
Mar 29, 2024 14:44:59.195576906 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.195810080 CET	49797	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.195822954 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.196885109 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.196960926 CET	49797	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.197989941 CET	49797	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.198057890 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.198195934 CET	49797	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.198204041 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.228368044 CET	443	49790	3.162.129.245	192.168.2.16
Mar 29, 2024 14:44:59.228400946 CET	443	49790	3.162.129.245	192.168.2.16
Mar 29, 2024 14:44:59.228432894 CET	443	49790	3.162.129.245	192.168.2.16
Mar 29, 2024 14:44:59.228483915 CET	49790	443	192.168.2.16	3.162.129.245
Mar 29, 2024 14:44:59.228538990 CET	49790	443	192.168.2.16	3.162.129.245
Mar 29, 2024 14:44:59.232758999 CET	49787	443	192.168.2.16	146.75.28.157
Mar 29, 2024 14:44:59.236901999 CET	443	49799	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:59.237154961 CET	49799	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:59.237179041 CET	443	49799	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:59.237546921 CET	443	49799	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:59.237867117 CET	49799	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:59.237937927 CET	443	49799	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:59.237977028 CET	49799	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:59.241020918 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.241125107 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.241167068 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.241170883 CET	49787	443	192.168.2.16	146.75.28.157
Mar 29, 2024 14:44:59.241192102 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.241228104 CET	49787	443	192.168.2.16	146.75.28.157
Mar 29, 2024 14:44:59.247716904 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.247742891 CET	49791	443	192.168.2.16	3.162.103.76
Mar 29, 2024 14:44:59.247745037 CET	49797	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.249268055 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.249310017 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.249324083 CET	49787	443	192.168.2.16	146.75.28.157
Mar 29, 2024 14:44:59.249346018 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.249392033 CET	49787	443	192.168.2.16	146.75.28.157
Mar 29, 2024 14:44:59.249398947 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.249420881 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.249463081 CET	49787	443	192.168.2.16	146.75.28.157
Mar 29, 2024 14:44:59.249480963 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.249583006 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.249625921 CET	49787	443	192.168.2.16	146.75.28.157
Mar 29, 2024 14:44:59.249633074 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.249702930 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.249744892 CET	49787	443	192.168.2.16	146.75.28.157
Mar 29, 2024 14:44:59.249932051 CET	49787	443	192.168.2.16	146.75.28.157
Mar 29, 2024 14:44:59.249948978 CET	443	49787	146.75.28.157	192.168.2.16
Mar 29, 2024 14:44:59.250781059 CET	49801	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:59.250808954 CET	443	49801	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:59.250873089 CET	49801	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:59.251086950 CET	49801	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:59.251099110 CET	443	49801	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:59.276189089 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.276201963 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.276238918 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.276256084 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.276263952 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.276278019 CET	49791	443	192.168.2.16	3.162.103.76
Mar 29, 2024 14:44:59.276278973 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.276292086 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.276313066 CET	49791	443	192.168.2.16	3.162.103.76
Mar 29, 2024 14:44:59.276341915 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.276350975 CET	49791	443	192.168.2.16	3.162.103.76
Mar 29, 2024 14:44:59.276361942 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.276370049 CET	443	49788	18.160.41.53	192.168.2.16
Mar 29, 2024 14:44:59.276377916 CET	443	49788	18.160.41.53	192.168.2.16
Mar 29, 2024 14:44:59.276391029 CET	49791	443	192.168.2.16	3.162.103.76
Mar 29, 2024 14:44:59.276434898 CET	443	49788	18.160.41.53	192.168.2.16
Mar 29, 2024 14:44:59.276439905 CET	49788	443	192.168.2.16	18.160.41.53
Mar 29, 2024 14:44:59.276448965 CET	443	49788	18.160.41.53	192.168.2.16
Mar 29, 2024 14:44:59.276463032 CET	443	49788	18.160.41.53	192.168.2.16
Mar 29, 2024 14:44:59.276479959 CET	443	49788	18.160.41.53	192.168.2.16
Mar 29, 2024 14:44:59.276498079 CET	49788	443	192.168.2.16	18.160.41.53
Mar 29, 2024 14:44:59.276524067 CET	49788	443	192.168.2.16	18.160.41.53
Mar 29, 2024 14:44:59.276534081 CET	443	49788	18.160.41.53	192.168.2.16
Mar 29, 2024 14:44:59.276578903 CET	49788	443	192.168.2.16	18.160.41.53
Mar 29, 2024 14:44:59.276586056 CET	443	49788	18.160.41.53	192.168.2.16
Mar 29, 2024 14:44:59.276613951 CET	443	49788	18.160.41.53	192.168.2.16
Mar 29, 2024 14:44:59.276654959 CET	49788	443	192.168.2.16	18.160.41.53
Mar 29, 2024 14:44:59.277479887 CET	49788	443	192.168.2.16	18.160.41.53
Mar 29, 2024 14:44:59.277488947 CET	443	49788	18.160.41.53	192.168.2.16
Mar 29, 2024 14:44:59.279747963 CET	49799	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:59.279767990 CET	443	49799	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:59.299516916 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.299531937 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.299592972 CET	49791	443	192.168.2.16	3.162.103.76
Mar 29, 2024 14:44:59.299602985 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.299911022 CET	443	49790	3.162.129.245	192.168.2.16
Mar 29, 2024 14:44:59.299946070 CET	443	49790	3.162.129.245	192.168.2.16
Mar 29, 2024 14:44:59.299973965 CET	49790	443	192.168.2.16	3.162.129.245
Mar 29, 2024 14:44:59.299978018 CET	443	49790	3.162.129.245	192.168.2.16
Mar 29, 2024 14:44:59.299993038 CET	443	49790	3.162.129.245	192.168.2.16
Mar 29, 2024 14:44:59.300008059 CET	49790	443	192.168.2.16	3.162.129.245
Mar 29, 2024 14:44:59.300034046 CET	49790	443	192.168.2.16	3.162.129.245
Mar 29, 2024 14:44:59.300314903 CET	49790	443	192.168.2.16	3.162.129.245
Mar 29, 2024 14:44:59.300324917 CET	443	49790	3.162.129.245	192.168.2.16
Mar 29, 2024 14:44:59.319550991 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.319833994 CET	49798	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.319854021 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.320957899 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.321043968 CET	49798	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.321623087 CET	49798	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.321691036 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.321871042 CET	49798	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.321885109 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.343751907 CET	49791	443	192.168.2.16	3.162.103.76
Mar 29, 2024 14:44:59.351902008 CET	443	49785	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.352001905 CET	443	49785	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.352055073 CET	49785	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.352088928 CET	443	49786	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.352169037 CET	443	49786	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.352212906 CET	49786	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.352875948 CET	49785	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.352889061 CET	443	49785	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.353202105 CET	49802	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.353236914 CET	443	49802	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.353313923 CET	49802	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.353467941 CET	49786	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.353477955 CET	443	49786	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.353665113 CET	49803	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.353687048 CET	443	49803	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.353743076 CET	49803	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.354013920 CET	49802	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.354028940 CET	443	49802	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.354196072 CET	49803	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.354207993 CET	443	49803	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.375768900 CET	49798	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.376612902 CET	49804	443	192.168.2.16	104.244.42.69
Mar 29, 2024 14:44:59.376636028 CET	443	49804	104.244.42.69	192.168.2.16
Mar 29, 2024 14:44:59.376689911 CET	49804	443	192.168.2.16	104.244.42.69
Mar 29, 2024 14:44:59.376895905 CET	49804	443	192.168.2.16	104.244.42.69
Mar 29, 2024 14:44:59.376908064 CET	443	49804	104.244.42.69	192.168.2.16
Mar 29, 2024 14:44:59.378333092 CET	443	49784	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.378395081 CET	443	49784	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.378441095 CET	49784	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.378551960 CET	49784	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.378561974 CET	443	49784	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.384179115 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.384202957 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.384274960 CET	49791	443	192.168.2.16	3.162.103.76
Mar 29, 2024 14:44:59.384289026 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.384336948 CET	49791	443	192.168.2.16	3.162.103.76
Mar 29, 2024 14:44:59.394478083 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.394520044 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.394551039 CET	49791	443	192.168.2.16	3.162.103.76
Mar 29, 2024 14:44:59.394562960 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.394576073 CET	49791	443	192.168.2.16	3.162.103.76
Mar 29, 2024 14:44:59.399344921 CET	49805	443	192.168.2.16	104.244.42.67
Mar 29, 2024 14:44:59.399363041 CET	443	49805	104.244.42.67	192.168.2.16
Mar 29, 2024 14:44:59.399431944 CET	49805	443	192.168.2.16	104.244.42.67
Mar 29, 2024 14:44:59.399637938 CET	49805	443	192.168.2.16	104.244.42.67
Mar 29, 2024 14:44:59.399652958 CET	443	49805	104.244.42.67	192.168.2.16
Mar 29, 2024 14:44:59.400934935 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.400983095 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.401010990 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.401092052 CET	49791	443	192.168.2.16	3.162.103.76
Mar 29, 2024 14:44:59.401093006 CET	49791	443	192.168.2.16	3.162.103.76
Mar 29, 2024 14:44:59.401252031 CET	49791	443	192.168.2.16	3.162.103.76
Mar 29, 2024 14:44:59.401266098 CET	443	49791	3.162.103.76	192.168.2.16
Mar 29, 2024 14:44:59.402414083 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.405096054 CET	443	49792	3.162.103.56	192.168.2.16
Mar 29, 2024 14:44:59.405121088 CET	443	49792	3.162.103.56	192.168.2.16
Mar 29, 2024 14:44:59.405127048 CET	443	49792	3.162.103.56	192.168.2.16
Mar 29, 2024 14:44:59.405162096 CET	443	49792	3.162.103.56	192.168.2.16
Mar 29, 2024 14:44:59.405189991 CET	443	49792	3.162.103.56	192.168.2.16
Mar 29, 2024 14:44:59.405204058 CET	49792	443	192.168.2.16	3.162.103.56
Mar 29, 2024 14:44:59.405214071 CET	443	49792	3.162.103.56	192.168.2.16
Mar 29, 2024 14:44:59.405251026 CET	49792	443	192.168.2.16	3.162.103.56
Mar 29, 2024 14:44:59.405262947 CET	49792	443	192.168.2.16	3.162.103.56
Mar 29, 2024 14:44:59.416112900 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.416124105 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.416136980 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.416213036 CET	49797	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.416228056 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.416289091 CET	49797	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.420703888 CET	49806	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:44:59.420718908 CET	443	49806	35.190.43.134	192.168.2.16
Mar 29, 2024 14:44:59.420784950 CET	49806	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:44:59.420984983 CET	49806	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:44:59.420999050 CET	443	49806	35.190.43.134	192.168.2.16
Mar 29, 2024 14:44:59.432382107 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.432403088 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.432439089 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.432477951 CET	49797	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.432528019 CET	49797	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.433760881 CET	443	49794	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.433855057 CET	443	49794	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.433900118 CET	49794	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.434452057 CET	49794	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.434468985 CET	443	49794	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.434884071 CET	49807	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.434910059 CET	443	49807	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.434972048 CET	49807	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.435102940 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.435153008 CET	49797	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.435503960 CET	49807	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.435518026 CET	443	49807	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.446151972 CET	443	49793	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:59.446213961 CET	443	49793	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:59.446304083 CET	49793	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:59.447261095 CET	49793	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:59.447278023 CET	443	49793	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:59.465056896 CET	443	49792	3.162.103.56	192.168.2.16
Mar 29, 2024 14:44:59.465084076 CET	443	49792	3.162.103.56	192.168.2.16
Mar 29, 2024 14:44:59.465152025 CET	49792	443	192.168.2.16	3.162.103.56
Mar 29, 2024 14:44:59.465162039 CET	443	49792	3.162.103.56	192.168.2.16
Mar 29, 2024 14:44:59.465212107 CET	49792	443	192.168.2.16	3.162.103.56
Mar 29, 2024 14:44:59.475320101 CET	443	49796	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.475533962 CET	443	49796	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.475584030 CET	49796	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.476066113 CET	49796	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.476073980 CET	443	49796	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.476447105 CET	49808	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.476471901 CET	443	49808	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.476526976 CET	49808	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.476978064 CET	49808	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.476984978 CET	443	49808	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.495745897 CET	443	49792	3.162.103.56	192.168.2.16
Mar 29, 2024 14:44:59.495764017 CET	443	49792	3.162.103.56	192.168.2.16
Mar 29, 2024 14:44:59.495846987 CET	49792	443	192.168.2.16	3.162.103.56
Mar 29, 2024 14:44:59.495855093 CET	443	49792	3.162.103.56	192.168.2.16
Mar 29, 2024 14:44:59.495897055 CET	49792	443	192.168.2.16	3.162.103.56
Mar 29, 2024 14:44:59.498450041 CET	443	49792	3.162.103.56	192.168.2.16
Mar 29, 2024 14:44:59.498512983 CET	49792	443	192.168.2.16	3.162.103.56
Mar 29, 2024 14:44:59.499851942 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:44:59.499877930 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:44:59.499953032 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:44:59.500189066 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:44:59.500200987 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:44:59.508538961 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.508568048 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.508637905 CET	49797	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.508646011 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.508692980 CET	49797	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.521090031 CET	49810	443	192.168.2.16	52.85.151.23
Mar 29, 2024 14:44:59.521130085 CET	443	49810	52.85.151.23	192.168.2.16
Mar 29, 2024 14:44:59.521203995 CET	49810	443	192.168.2.16	52.85.151.23
Mar 29, 2024 14:44:59.521508932 CET	49810	443	192.168.2.16	52.85.151.23
Mar 29, 2024 14:44:59.521522045 CET	443	49810	52.85.151.23	192.168.2.16
Mar 29, 2024 14:44:59.524971008 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.524992943 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.525063992 CET	49797	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.525079012 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.525125980 CET	49797	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.527724028 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.527786970 CET	49797	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.539005995 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.545737982 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.545759916 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.545799017 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.545845032 CET	49797	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.545852900 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.545880079 CET	49797	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.547807932 CET	443	49792	3.162.103.56	192.168.2.16
Mar 29, 2024 14:44:59.547833920 CET	443	49792	3.162.103.56	192.168.2.16
Mar 29, 2024 14:44:59.547871113 CET	443	49792	3.162.103.56	192.168.2.16
Mar 29, 2024 14:44:59.547905922 CET	49792	443	192.168.2.16	3.162.103.56
Mar 29, 2024 14:44:59.547913074 CET	443	49792	3.162.103.56	192.168.2.16
Mar 29, 2024 14:44:59.547938108 CET	49792	443	192.168.2.16	3.162.103.56
Mar 29, 2024 14:44:59.555998087 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.556010008 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.556035042 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.556046009 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.556057930 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.556085110 CET	49798	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.556097984 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.556112051 CET	49798	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.556147099 CET	49798	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.572309971 CET	443	49802	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.572604895 CET	49802	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.572626114 CET	443	49802	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.573151112 CET	443	49802	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.573455095 CET	49802	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.573523998 CET	443	49802	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.573591948 CET	49802	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.573750019 CET	443	49803	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.573921919 CET	49803	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.573936939 CET	443	49803	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.574961901 CET	443	49803	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.575035095 CET	49803	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.575311899 CET	49803	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.575382948 CET	443	49803	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.575419903 CET	49803	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.577656031 CET	443	49799	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:59.577701092 CET	443	49799	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:59.577744961 CET	49799	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:59.577760935 CET	443	49799	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:59.577826977 CET	443	49799	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:59.577867985 CET	49799	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:59.577876091 CET	443	49799	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:59.578186989 CET	443	49799	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:59.578221083 CET	443	49799	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:59.578234911 CET	49799	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:59.578243971 CET	443	49799	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:59.578284979 CET	49799	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:59.578294992 CET	443	49799	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:59.578783989 CET	443	49799	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:59.578834057 CET	49799	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:59.578846931 CET	443	49799	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:59.598753929 CET	49797	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.598763943 CET	49792	443	192.168.2.16	3.162.103.56
Mar 29, 2024 14:44:59.599025965 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.599052906 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.599085093 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.599129915 CET	49797	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.599144936 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.599169016 CET	49797	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.612567902 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.612597942 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.612683058 CET	49797	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.612695932 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.617754936 CET	443	49804	104.244.42.69	192.168.2.16
Mar 29, 2024 14:44:59.618009090 CET	49804	443	192.168.2.16	104.244.42.69
Mar 29, 2024 14:44:59.618031979 CET	443	49804	104.244.42.69	192.168.2.16
Mar 29, 2024 14:44:59.619066954 CET	443	49804	104.244.42.69	192.168.2.16
Mar 29, 2024 14:44:59.619152069 CET	49804	443	192.168.2.16	104.244.42.69
Mar 29, 2024 14:44:59.620090961 CET	49804	443	192.168.2.16	104.244.42.69
Mar 29, 2024 14:44:59.620155096 CET	443	49804	104.244.42.69	192.168.2.16
Mar 29, 2024 14:44:59.620234013 CET	443	49803	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.620234013 CET	443	49802	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.620331049 CET	49804	443	192.168.2.16	104.244.42.69
Mar 29, 2024 14:44:59.620338917 CET	443	49804	104.244.42.69	192.168.2.16
Mar 29, 2024 14:44:59.626792908 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.626833916 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.626883030 CET	49797	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.626893044 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.626933098 CET	49797	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.628077984 CET	443	49805	104.244.42.67	192.168.2.16
Mar 29, 2024 14:44:59.628299952 CET	49805	443	192.168.2.16	104.244.42.67
Mar 29, 2024 14:44:59.628308058 CET	443	49805	104.244.42.67	192.168.2.16
Mar 29, 2024 14:44:59.629388094 CET	443	49805	104.244.42.67	192.168.2.16
Mar 29, 2024 14:44:59.629451990 CET	49805	443	192.168.2.16	104.244.42.67
Mar 29, 2024 14:44:59.630289078 CET	49805	443	192.168.2.16	104.244.42.67
Mar 29, 2024 14:44:59.630377054 CET	443	49805	104.244.42.67	192.168.2.16
Mar 29, 2024 14:44:59.630496979 CET	49805	443	192.168.2.16	104.244.42.67
Mar 29, 2024 14:44:59.630503893 CET	443	49805	104.244.42.67	192.168.2.16
Mar 29, 2024 14:44:59.630755901 CET	49803	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.630781889 CET	443	49803	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.630795956 CET	49799	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:59.635382891 CET	443	49807	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.635620117 CET	49807	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.635629892 CET	443	49807	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.636894941 CET	443	49807	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.636961937 CET	49807	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.637250900 CET	49807	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.637348890 CET	443	49807	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.637398005 CET	49807	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.647515059 CET	443	49800	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.647772074 CET	49800	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.647779942 CET	443	49800	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.648132086 CET	443	49800	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.648421049 CET	49800	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.648484945 CET	443	49800	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.648535013 CET	49800	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.662985086 CET	49804	443	192.168.2.16	104.244.42.69
Mar 29, 2024 14:44:59.665540934 CET	443	49792	3.162.103.56	192.168.2.16
Mar 29, 2024 14:44:59.665574074 CET	443	49792	3.162.103.56	192.168.2.16
Mar 29, 2024 14:44:59.665621042 CET	443	49792	3.162.103.56	192.168.2.16
Mar 29, 2024 14:44:59.665635109 CET	49792	443	192.168.2.16	3.162.103.56
Mar 29, 2024 14:44:59.665642977 CET	443	49792	3.162.103.56	192.168.2.16
Mar 29, 2024 14:44:59.665688992 CET	49792	443	192.168.2.16	3.162.103.56
Mar 29, 2024 14:44:59.665715933 CET	443	49792	3.162.103.56	192.168.2.16
Mar 29, 2024 14:44:59.665740967 CET	49792	443	192.168.2.16	3.162.103.56
Mar 29, 2024 14:44:59.665770054 CET	49792	443	192.168.2.16	3.162.103.56
Mar 29, 2024 14:44:59.666138887 CET	49792	443	192.168.2.16	3.162.103.56
Mar 29, 2024 14:44:59.666146994 CET	443	49792	3.162.103.56	192.168.2.16
Mar 29, 2024 14:44:59.668957949 CET	443	49806	35.190.43.134	192.168.2.16
Mar 29, 2024 14:44:59.669214010 CET	49806	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:44:59.669223070 CET	443	49806	35.190.43.134	192.168.2.16
Mar 29, 2024 14:44:59.670516014 CET	443	49806	35.190.43.134	192.168.2.16
Mar 29, 2024 14:44:59.670593977 CET	49806	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:44:59.671581030 CET	49806	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:44:59.671761036 CET	443	49806	35.190.43.134	192.168.2.16
Mar 29, 2024 14:44:59.671947956 CET	49806	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:44:59.671955109 CET	443	49806	35.190.43.134	192.168.2.16
Mar 29, 2024 14:44:59.677150965 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.677174091 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.677247047 CET	49798	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.677261114 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.677273989 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.677295923 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.677309990 CET	49798	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.677316904 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.677331924 CET	49798	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.677345991 CET	49798	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.677352905 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.677380085 CET	49798	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.677386045 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.677397966 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.677405119 CET	49798	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.677417040 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.677459955 CET	49798	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.677465916 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.677489042 CET	49798	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.678039074 CET	443	49808	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.678589106 CET	49808	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.678612947 CET	443	49808	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.678735971 CET	49805	443	192.168.2.16	104.244.42.67
Mar 29, 2024 14:44:59.678742886 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.678774118 CET	49797	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.678778887 CET	49807	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.678786039 CET	443	49807	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.678797960 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.678801060 CET	49803	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.678807020 CET	49798	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.678812981 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.678843021 CET	49798	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.679629087 CET	443	49808	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.679681063 CET	49808	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.680031061 CET	49808	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.680079937 CET	443	49808	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.680179119 CET	49808	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.680183887 CET	443	49808	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.682149887 CET	443	49799	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:59.682265043 CET	443	49799	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:59.682311058 CET	49799	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:59.682329893 CET	443	49799	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:59.682388067 CET	443	49799	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:59.682435989 CET	49799	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:59.682852030 CET	49799	443	192.168.2.16	104.22.58.91
Mar 29, 2024 14:44:59.682864904 CET	443	49799	104.22.58.91	192.168.2.16
Mar 29, 2024 14:44:59.696238995 CET	443	49800	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.725745916 CET	49806	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:44:59.725825071 CET	49808	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.725826025 CET	49807	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.727071047 CET	443	49810	52.85.151.23	192.168.2.16
Mar 29, 2024 14:44:59.727287054 CET	49810	443	192.168.2.16	52.85.151.23
Mar 29, 2024 14:44:59.727298021 CET	443	49810	52.85.151.23	192.168.2.16
Mar 29, 2024 14:44:59.728368044 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.728400946 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.728436947 CET	49797	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.728446007 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.728470087 CET	49797	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.728490114 CET	49797	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.728743076 CET	49797	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.728754997 CET	443	49797	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.728924990 CET	443	49810	52.85.151.23	192.168.2.16
Mar 29, 2024 14:44:59.728971004 CET	49810	443	192.168.2.16	52.85.151.23
Mar 29, 2024 14:44:59.730386972 CET	49810	443	192.168.2.16	52.85.151.23
Mar 29, 2024 14:44:59.730437040 CET	443	49810	52.85.151.23	192.168.2.16
Mar 29, 2024 14:44:59.730612040 CET	49810	443	192.168.2.16	52.85.151.23
Mar 29, 2024 14:44:59.730616093 CET	443	49810	52.85.151.23	192.168.2.16
Mar 29, 2024 14:44:59.766741991 CET	49811	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:44:59.766765118 CET	443	49811	35.190.43.134	192.168.2.16
Mar 29, 2024 14:44:59.766829014 CET	49811	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:44:59.766905069 CET	49812	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:44:59.766943932 CET	443	49812	35.190.43.134	192.168.2.16
Mar 29, 2024 14:44:59.767030001 CET	49812	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:44:59.767137051 CET	49811	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:44:59.767148018 CET	443	49811	35.190.43.134	192.168.2.16
Mar 29, 2024 14:44:59.767287970 CET	49812	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:44:59.767308950 CET	443	49812	35.190.43.134	192.168.2.16
Mar 29, 2024 14:44:59.773761988 CET	49810	443	192.168.2.16	52.85.151.23
Mar 29, 2024 14:44:59.773799896 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.773830891 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.773881912 CET	49798	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.773893118 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.773941994 CET	49798	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.773941994 CET	49798	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.776000977 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.787637949 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.787663937 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.787760019 CET	49798	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.787769079 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.787800074 CET	49798	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.795303106 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.795344114 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.795419931 CET	49798	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.795428991 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.795439005 CET	49798	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.800231934 CET	443	49783	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.800514936 CET	49783	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.800538063 CET	443	49783	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.800919056 CET	443	49783	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.801224947 CET	49783	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.801295042 CET	443	49783	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.801354885 CET	49783	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:44:59.819133043 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:44:59.819336891 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:44:59.819350004 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:44:59.820552111 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:44:59.820630074 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:44:59.822041988 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:44:59.822156906 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:44:59.822312117 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:44:59.822320938 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:44:59.828077078 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.828093052 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.828136921 CET	49798	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.828157902 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.828170061 CET	49798	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.828879118 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.828921080 CET	49798	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.828927994 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.830642939 CET	443	49801	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:59.831336975 CET	49801	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:59.831362963 CET	443	49801	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:59.831876993 CET	443	49801	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:59.832202911 CET	49801	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:59.832300901 CET	443	49801	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:59.832359076 CET	49801	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:59.834326029 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.834392071 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.834412098 CET	49798	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.834458113 CET	49798	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.834701061 CET	49798	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:44:59.834711075 CET	443	49798	18.154.227.129	192.168.2.16
Mar 29, 2024 14:44:59.848239899 CET	443	49783	104.20.0.37	192.168.2.16
Mar 29, 2024 14:44:59.872431040 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:44:59.876236916 CET	443	49801	54.229.44.173	192.168.2.16
Mar 29, 2024 14:44:59.883028984 CET	49813	443	192.168.2.16	172.253.62.101
Mar 29, 2024 14:44:59.883064032 CET	443	49813	172.253.62.101	192.168.2.16
Mar 29, 2024 14:44:59.883146048 CET	49813	443	192.168.2.16	172.253.62.101
Mar 29, 2024 14:44:59.883337021 CET	49813	443	192.168.2.16	172.253.62.101
Mar 29, 2024 14:44:59.883349895 CET	443	49813	172.253.62.101	192.168.2.16
Mar 29, 2024 14:44:59.885755062 CET	49801	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:44:59.889493942 CET	443	49804	104.244.42.69	192.168.2.16
Mar 29, 2024 14:44:59.889564037 CET	443	49804	104.244.42.69	192.168.2.16
Mar 29, 2024 14:44:59.889625072 CET	49804	443	192.168.2.16	104.244.42.69
Mar 29, 2024 14:44:59.890047073 CET	49804	443	192.168.2.16	104.244.42.69
Mar 29, 2024 14:44:59.890060902 CET	443	49804	104.244.42.69	192.168.2.16
Mar 29, 2024 14:44:59.923779964 CET	443	49810	52.85.151.23	192.168.2.16
Mar 29, 2024 14:44:59.923849106 CET	443	49810	52.85.151.23	192.168.2.16
Mar 29, 2024 14:44:59.923923016 CET	49810	443	192.168.2.16	52.85.151.23
Mar 29, 2024 14:44:59.924834013 CET	49810	443	192.168.2.16	52.85.151.23
Mar 29, 2024 14:44:59.924854994 CET	443	49810	52.85.151.23	192.168.2.16
Mar 29, 2024 14:44:59.927891970 CET	49814	443	192.168.2.16	52.85.151.23
Mar 29, 2024 14:44:59.927927017 CET	443	49814	52.85.151.23	192.168.2.16
Mar 29, 2024 14:44:59.928004980 CET	49814	443	192.168.2.16	52.85.151.23
Mar 29, 2024 14:44:59.928714991 CET	49814	443	192.168.2.16	52.85.151.23
Mar 29, 2024 14:44:59.928730965 CET	443	49814	52.85.151.23	192.168.2.16
Mar 29, 2024 14:44:59.933705091 CET	49815	443	192.168.2.16	142.250.31.155
Mar 29, 2024 14:44:59.933727026 CET	443	49815	142.250.31.155	192.168.2.16
Mar 29, 2024 14:44:59.933809042 CET	49815	443	192.168.2.16	142.250.31.155
Mar 29, 2024 14:44:59.933991909 CET	49815	443	192.168.2.16	142.250.31.155
Mar 29, 2024 14:44:59.934005022 CET	443	49815	142.250.31.155	192.168.2.16
Mar 29, 2024 14:44:59.938528061 CET	443	49806	35.190.43.134	192.168.2.16
Mar 29, 2024 14:44:59.938694954 CET	443	49806	35.190.43.134	192.168.2.16
Mar 29, 2024 14:44:59.938762903 CET	49806	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:44:59.939558029 CET	443	49789	151.101.129.140	192.168.2.16
Mar 29, 2024 14:44:59.943463087 CET	49789	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:44:59.943474054 CET	443	49789	151.101.129.140	192.168.2.16
Mar 29, 2024 14:44:59.944619894 CET	49806	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:44:59.944628954 CET	443	49806	35.190.43.134	192.168.2.16
Mar 29, 2024 14:44:59.944668055 CET	443	49789	151.101.129.140	192.168.2.16
Mar 29, 2024 14:44:59.944778919 CET	49789	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:44:59.946530104 CET	49789	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:44:59.946609974 CET	443	49789	151.101.129.140	192.168.2.16
Mar 29, 2024 14:44:59.946702003 CET	49789	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:44:59.946708918 CET	443	49789	151.101.129.140	192.168.2.16
Mar 29, 2024 14:44:59.969578028 CET	443	49805	104.244.42.67	192.168.2.16
Mar 29, 2024 14:44:59.969645977 CET	443	49805	104.244.42.67	192.168.2.16
Mar 29, 2024 14:44:59.969738007 CET	49805	443	192.168.2.16	104.244.42.67
Mar 29, 2024 14:44:59.970168114 CET	49805	443	192.168.2.16	104.244.42.67
Mar 29, 2024 14:44:59.970176935 CET	443	49805	104.244.42.67	192.168.2.16
Mar 29, 2024 14:44:59.992536068 CET	49816	443	192.168.2.16	142.251.179.157
Mar 29, 2024 14:44:59.992575884 CET	443	49816	142.251.179.157	192.168.2.16
Mar 29, 2024 14:44:59.992666006 CET	49816	443	192.168.2.16	142.251.179.157
Mar 29, 2024 14:44:59.992891073 CET	49816	443	192.168.2.16	142.251.179.157
Mar 29, 2024 14:44:59.992906094 CET	443	49816	142.251.179.157	192.168.2.16
Mar 29, 2024 14:44:59.996568918 CET	49817	443	192.168.2.16	104.244.42.5
Mar 29, 2024 14:44:59.996587992 CET	443	49817	104.244.42.5	192.168.2.16
Mar 29, 2024 14:44:59.996654987 CET	49817	443	192.168.2.16	104.244.42.5
Mar 29, 2024 14:44:59.997033119 CET	49817	443	192.168.2.16	104.244.42.5
Mar 29, 2024 14:44:59.997051001 CET	443	49817	104.244.42.5	192.168.2.16
Mar 29, 2024 14:44:59.997766972 CET	49789	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:00.013420105 CET	49818	443	192.168.2.16	142.251.16.157
Mar 29, 2024 14:45:00.013432980 CET	443	49818	142.251.16.157	192.168.2.16
Mar 29, 2024 14:45:00.013529062 CET	49818	443	192.168.2.16	142.251.16.157
Mar 29, 2024 14:45:00.014403105 CET	49818	443	192.168.2.16	142.251.16.157
Mar 29, 2024 14:45:00.014415979 CET	443	49818	142.251.16.157	192.168.2.16
Mar 29, 2024 14:45:00.030947924 CET	443	49812	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:00.031228065 CET	49812	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:00.031246901 CET	443	49812	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:00.032331944 CET	443	49812	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:00.032409906 CET	49812	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:00.032696962 CET	49812	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:00.032756090 CET	443	49812	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:00.032866955 CET	49812	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:00.032872915 CET	443	49812	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:00.032924891 CET	49812	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:00.068591118 CET	49819	443	192.168.2.16	142.251.16.106
Mar 29, 2024 14:45:00.068624020 CET	443	49819	142.251.16.106	192.168.2.16
Mar 29, 2024 14:45:00.068727016 CET	49819	443	192.168.2.16	142.251.16.106
Mar 29, 2024 14:45:00.068917036 CET	49819	443	192.168.2.16	142.251.16.106
Mar 29, 2024 14:45:00.068924904 CET	443	49819	142.251.16.106	192.168.2.16
Mar 29, 2024 14:45:00.076783895 CET	49812	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:00.076793909 CET	443	49812	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:00.078996897 CET	49820	443	192.168.2.16	104.244.42.67
Mar 29, 2024 14:45:00.079021931 CET	443	49820	104.244.42.67	192.168.2.16
Mar 29, 2024 14:45:00.079107046 CET	49820	443	192.168.2.16	104.244.42.67
Mar 29, 2024 14:45:00.079343081 CET	49820	443	192.168.2.16	104.244.42.67
Mar 29, 2024 14:45:00.079354048 CET	443	49820	104.244.42.67	192.168.2.16
Mar 29, 2024 14:45:00.096942902 CET	443	49802	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.097084045 CET	443	49802	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.097160101 CET	49802	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.097803116 CET	49802	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.097824097 CET	443	49802	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.098140955 CET	49821	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.098150969 CET	443	49821	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.098227024 CET	49821	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.098582029 CET	49821	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.098593950 CET	443	49821	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.108401060 CET	443	49813	172.253.62.101	192.168.2.16
Mar 29, 2024 14:45:00.108721018 CET	49813	443	192.168.2.16	172.253.62.101
Mar 29, 2024 14:45:00.108732939 CET	443	49813	172.253.62.101	192.168.2.16
Mar 29, 2024 14:45:00.109160900 CET	443	49813	172.253.62.101	192.168.2.16
Mar 29, 2024 14:45:00.109239101 CET	49813	443	192.168.2.16	172.253.62.101
Mar 29, 2024 14:45:00.109894991 CET	443	49813	172.253.62.101	192.168.2.16
Mar 29, 2024 14:45:00.109957933 CET	49813	443	192.168.2.16	172.253.62.101
Mar 29, 2024 14:45:00.110986948 CET	49813	443	192.168.2.16	172.253.62.101
Mar 29, 2024 14:45:00.111084938 CET	443	49813	172.253.62.101	192.168.2.16
Mar 29, 2024 14:45:00.111193895 CET	49813	443	192.168.2.16	172.253.62.101
Mar 29, 2024 14:45:00.111202955 CET	443	49813	172.253.62.101	192.168.2.16
Mar 29, 2024 14:45:00.112441063 CET	443	49803	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.112540960 CET	443	49803	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.112648010 CET	49803	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.113020897 CET	49822	443	192.168.2.16	3.162.129.245
Mar 29, 2024 14:45:00.113054037 CET	443	49822	3.162.129.245	192.168.2.16
Mar 29, 2024 14:45:00.113123894 CET	49822	443	192.168.2.16	3.162.129.245
Mar 29, 2024 14:45:00.113337994 CET	49822	443	192.168.2.16	3.162.129.245
Mar 29, 2024 14:45:00.113352060 CET	443	49822	3.162.129.245	192.168.2.16
Mar 29, 2024 14:45:00.113775015 CET	49803	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.113795042 CET	443	49803	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.114092112 CET	49823	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.114120007 CET	443	49823	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.114185095 CET	49823	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.114521980 CET	49823	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.114537001 CET	443	49823	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.114825964 CET	49824	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:00.114835978 CET	443	49824	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:00.114896059 CET	49824	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:00.115045071 CET	49824	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:00.115055084 CET	443	49824	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:00.122119904 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.122148991 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.122157097 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.122195959 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.122221947 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.122258902 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:45:00.122283936 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.122297049 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.122308969 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:45:00.122313976 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.122319937 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.122334957 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.122356892 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:45:00.122361898 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.122406006 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:45:00.129348993 CET	443	49814	52.85.151.23	192.168.2.16
Mar 29, 2024 14:45:00.136986971 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.137018919 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.138020039 CET	49814	443	192.168.2.16	52.85.151.23
Mar 29, 2024 14:45:00.138040066 CET	443	49814	52.85.151.23	192.168.2.16
Mar 29, 2024 14:45:00.138075113 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:45:00.138098955 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.138489962 CET	443	49814	52.85.151.23	192.168.2.16
Mar 29, 2024 14:45:00.139187098 CET	49814	443	192.168.2.16	52.85.151.23
Mar 29, 2024 14:45:00.139261961 CET	443	49814	52.85.151.23	192.168.2.16
Mar 29, 2024 14:45:00.139355898 CET	49814	443	192.168.2.16	52.85.151.23
Mar 29, 2024 14:45:00.154809952 CET	49813	443	192.168.2.16	172.253.62.101
Mar 29, 2024 14:45:00.165332079 CET	443	49807	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.165447950 CET	443	49807	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.165543079 CET	49807	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.166219950 CET	49807	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.166234016 CET	443	49807	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.166608095 CET	49825	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.166642904 CET	443	49825	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.166728973 CET	49825	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.167093992 CET	49825	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.167107105 CET	443	49825	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.169873953 CET	443	49789	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:00.169966936 CET	443	49789	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:00.170023918 CET	49789	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:00.170026064 CET	443	49789	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:00.170042992 CET	443	49789	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:00.170097113 CET	49789	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:00.170106888 CET	443	49789	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:00.177572012 CET	443	49800	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.177675009 CET	443	49800	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.177757978 CET	49800	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.178270102 CET	49800	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.178286076 CET	443	49800	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.184241056 CET	443	49814	52.85.151.23	192.168.2.16
Mar 29, 2024 14:45:00.185789108 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:45:00.189728022 CET	443	49811	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:00.189990044 CET	49811	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:00.190011978 CET	443	49811	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:00.191071033 CET	443	49811	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:00.191145897 CET	49811	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:00.191438913 CET	49811	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:00.191504002 CET	443	49811	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:00.191571951 CET	49811	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:00.191579103 CET	443	49811	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:00.207266092 CET	443	49808	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.207617998 CET	443	49808	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.207706928 CET	49808	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.208129883 CET	49808	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.208148003 CET	443	49808	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.217798948 CET	49789	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:00.217812061 CET	443	49789	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:00.224251986 CET	443	49816	142.251.179.157	192.168.2.16
Mar 29, 2024 14:45:00.224555969 CET	49816	443	192.168.2.16	142.251.179.157
Mar 29, 2024 14:45:00.224579096 CET	443	49816	142.251.179.157	192.168.2.16
Mar 29, 2024 14:45:00.224891901 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.224917889 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.224977016 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:45:00.224992990 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.225027084 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:45:00.225044012 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:45:00.225893021 CET	443	49816	142.251.179.157	192.168.2.16
Mar 29, 2024 14:45:00.225961924 CET	49816	443	192.168.2.16	142.251.179.157
Mar 29, 2024 14:45:00.226898909 CET	49816	443	192.168.2.16	142.251.179.157
Mar 29, 2024 14:45:00.226995945 CET	443	49816	142.251.179.157	192.168.2.16
Mar 29, 2024 14:45:00.227065086 CET	49816	443	192.168.2.16	142.251.179.157
Mar 29, 2024 14:45:00.235096931 CET	443	49817	104.244.42.5	192.168.2.16
Mar 29, 2024 14:45:00.235398054 CET	49817	443	192.168.2.16	104.244.42.5
Mar 29, 2024 14:45:00.235409975 CET	443	49817	104.244.42.5	192.168.2.16
Mar 29, 2024 14:45:00.236557007 CET	443	49817	104.244.42.5	192.168.2.16
Mar 29, 2024 14:45:00.236644030 CET	49817	443	192.168.2.16	104.244.42.5
Mar 29, 2024 14:45:00.236928940 CET	49817	443	192.168.2.16	104.244.42.5
Mar 29, 2024 14:45:00.236995935 CET	443	49817	104.244.42.5	192.168.2.16
Mar 29, 2024 14:45:00.237082005 CET	49817	443	192.168.2.16	104.244.42.5
Mar 29, 2024 14:45:00.237090111 CET	443	49817	104.244.42.5	192.168.2.16
Mar 29, 2024 14:45:00.237539053 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.237565994 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.237629890 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:45:00.237648964 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.237694979 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:45:00.237767935 CET	49811	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:00.251283884 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.251305103 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.251390934 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:45:00.251403093 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.251441002 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:45:00.257800102 CET	443	49801	54.229.44.173	192.168.2.16
Mar 29, 2024 14:45:00.257991076 CET	443	49801	54.229.44.173	192.168.2.16
Mar 29, 2024 14:45:00.258061886 CET	49801	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:45:00.258280993 CET	49801	443	192.168.2.16	54.229.44.173
Mar 29, 2024 14:45:00.258299112 CET	443	49801	54.229.44.173	192.168.2.16
Mar 29, 2024 14:45:00.264775038 CET	49789	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:00.266463995 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.266491890 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.266561031 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:45:00.266567945 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.266609907 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:45:00.272008896 CET	443	49818	142.251.16.157	192.168.2.16
Mar 29, 2024 14:45:00.272244930 CET	443	49816	142.251.179.157	192.168.2.16
Mar 29, 2024 14:45:00.272249937 CET	49818	443	192.168.2.16	142.251.16.157
Mar 29, 2024 14:45:00.272265911 CET	443	49818	142.251.16.157	192.168.2.16
Mar 29, 2024 14:45:00.273320913 CET	443	49818	142.251.16.157	192.168.2.16
Mar 29, 2024 14:45:00.273399115 CET	49818	443	192.168.2.16	142.251.16.157
Mar 29, 2024 14:45:00.274403095 CET	49818	443	192.168.2.16	142.251.16.157
Mar 29, 2024 14:45:00.274490118 CET	443	49818	142.251.16.157	192.168.2.16
Mar 29, 2024 14:45:00.274569988 CET	49818	443	192.168.2.16	142.251.16.157
Mar 29, 2024 14:45:00.274578094 CET	443	49818	142.251.16.157	192.168.2.16
Mar 29, 2024 14:45:00.280782938 CET	49817	443	192.168.2.16	104.244.42.5
Mar 29, 2024 14:45:00.280788898 CET	49816	443	192.168.2.16	142.251.179.157
Mar 29, 2024 14:45:00.280812025 CET	443	49816	142.251.179.157	192.168.2.16
Mar 29, 2024 14:45:00.298363924 CET	443	49821	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.298619032 CET	49821	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.298629045 CET	443	49821	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.298976898 CET	443	49821	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.299273968 CET	49821	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.299344063 CET	443	49821	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.299422026 CET	49821	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.305006027 CET	443	49812	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:00.305073023 CET	443	49812	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:00.305135012 CET	49812	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:00.305389881 CET	49812	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:00.305413008 CET	443	49812	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:00.310774088 CET	443	49789	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:00.310870886 CET	443	49789	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:00.310931921 CET	49789	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:00.310941935 CET	443	49789	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:00.310959101 CET	443	49789	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:00.311014891 CET	49789	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:00.311218977 CET	443	49822	3.162.129.245	192.168.2.16
Mar 29, 2024 14:45:00.311378956 CET	49789	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:00.311389923 CET	443	49789	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:00.311908007 CET	49822	443	192.168.2.16	3.162.129.245
Mar 29, 2024 14:45:00.311918974 CET	443	49822	3.162.129.245	192.168.2.16
Mar 29, 2024 14:45:00.312983990 CET	443	49822	3.162.129.245	192.168.2.16
Mar 29, 2024 14:45:00.313057899 CET	49822	443	192.168.2.16	3.162.129.245
Mar 29, 2024 14:45:00.313359976 CET	49822	443	192.168.2.16	3.162.129.245
Mar 29, 2024 14:45:00.313417912 CET	443	49822	3.162.129.245	192.168.2.16
Mar 29, 2024 14:45:00.313482046 CET	49822	443	192.168.2.16	3.162.129.245
Mar 29, 2024 14:45:00.313489914 CET	443	49822	3.162.129.245	192.168.2.16
Mar 29, 2024 14:45:00.316230059 CET	443	49820	104.244.42.67	192.168.2.16
Mar 29, 2024 14:45:00.316440105 CET	49820	443	192.168.2.16	104.244.42.67
Mar 29, 2024 14:45:00.316447973 CET	443	49820	104.244.42.67	192.168.2.16
Mar 29, 2024 14:45:00.317497015 CET	443	49820	104.244.42.67	192.168.2.16
Mar 29, 2024 14:45:00.317584038 CET	49820	443	192.168.2.16	104.244.42.67
Mar 29, 2024 14:45:00.318001032 CET	49820	443	192.168.2.16	104.244.42.67
Mar 29, 2024 14:45:00.318069935 CET	443	49820	104.244.42.67	192.168.2.16
Mar 29, 2024 14:45:00.318402052 CET	49826	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:00.318420887 CET	443	49826	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:00.318495035 CET	49826	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:00.319272041 CET	49826	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:00.319283009 CET	443	49826	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:00.319348097 CET	49820	443	192.168.2.16	104.244.42.67
Mar 29, 2024 14:45:00.319355011 CET	443	49820	104.244.42.67	192.168.2.16
Mar 29, 2024 14:45:00.319483042 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.319504976 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.319550037 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:45:00.319566011 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.319583893 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:45:00.319606066 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:45:00.328751087 CET	49818	443	192.168.2.16	142.251.16.157
Mar 29, 2024 14:45:00.328775883 CET	49816	443	192.168.2.16	142.251.179.157
Mar 29, 2024 14:45:00.335037947 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.335062981 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.335122108 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:45:00.335131884 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.335161924 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:45:00.335177898 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:45:00.344230890 CET	443	49821	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.348957062 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.348978996 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.349046946 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:45:00.349055052 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.349095106 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:45:00.350534916 CET	443	49813	172.253.62.101	192.168.2.16
Mar 29, 2024 14:45:00.350774050 CET	443	49813	172.253.62.101	192.168.2.16
Mar 29, 2024 14:45:00.350835085 CET	49813	443	192.168.2.16	172.253.62.101
Mar 29, 2024 14:45:00.350913048 CET	49813	443	192.168.2.16	172.253.62.101
Mar 29, 2024 14:45:00.350925922 CET	443	49813	172.253.62.101	192.168.2.16
Mar 29, 2024 14:45:00.350935936 CET	49813	443	192.168.2.16	172.253.62.101
Mar 29, 2024 14:45:00.350965023 CET	49813	443	192.168.2.16	172.253.62.101
Mar 29, 2024 14:45:00.354032040 CET	443	49819	142.251.16.106	192.168.2.16
Mar 29, 2024 14:45:00.354254007 CET	49819	443	192.168.2.16	142.251.16.106
Mar 29, 2024 14:45:00.354259014 CET	443	49819	142.251.16.106	192.168.2.16
Mar 29, 2024 14:45:00.355570078 CET	443	49819	142.251.16.106	192.168.2.16
Mar 29, 2024 14:45:00.355644941 CET	49819	443	192.168.2.16	142.251.16.106
Mar 29, 2024 14:45:00.355958939 CET	49819	443	192.168.2.16	142.251.16.106
Mar 29, 2024 14:45:00.356059074 CET	443	49819	142.251.16.106	192.168.2.16
Mar 29, 2024 14:45:00.356089115 CET	49819	443	192.168.2.16	142.251.16.106
Mar 29, 2024 14:45:00.360743999 CET	49822	443	192.168.2.16	3.162.129.245
Mar 29, 2024 14:45:00.360927105 CET	49820	443	192.168.2.16	104.244.42.67
Mar 29, 2024 14:45:00.361588001 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.361610889 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.361660957 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:45:00.361668110 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.361686945 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:45:00.361716032 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:45:00.366111994 CET	443	49824	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:00.366327047 CET	49824	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:00.366343021 CET	443	49824	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:00.366751909 CET	443	49823	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.366949081 CET	49823	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.366971970 CET	443	49823	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.367511034 CET	443	49823	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.367605925 CET	443	49824	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:00.367664099 CET	49824	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:00.367810011 CET	49823	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.367887974 CET	443	49823	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.368204117 CET	49823	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.368709087 CET	49824	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:00.368834019 CET	49824	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:00.368839025 CET	443	49824	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:00.368933916 CET	443	49824	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:00.368952990 CET	443	49783	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.369060040 CET	443	49783	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.369240046 CET	49783	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.369453907 CET	443	49825	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.369609118 CET	49825	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.369620085 CET	443	49825	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.369683981 CET	49783	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.369700909 CET	443	49783	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.370734930 CET	443	49825	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.370806932 CET	49825	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.371119976 CET	49825	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.371181011 CET	443	49825	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.371239901 CET	49825	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.371247053 CET	443	49825	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.374537945 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.374563932 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.374620914 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:45:00.374625921 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.374664068 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:45:00.383611917 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.383650064 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.383702993 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.383718967 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:45:00.383734941 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:45:00.383753061 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:45:00.383992910 CET	49809	443	192.168.2.16	18.160.18.77
Mar 29, 2024 14:45:00.384004116 CET	443	49809	18.160.18.77	192.168.2.16
Mar 29, 2024 14:45:00.385071993 CET	49827	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.385108948 CET	443	49827	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.385179996 CET	49827	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.385368109 CET	49827	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.385377884 CET	443	49827	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.400232077 CET	443	49819	142.251.16.106	192.168.2.16
Mar 29, 2024 14:45:00.406790972 CET	49819	443	192.168.2.16	142.251.16.106
Mar 29, 2024 14:45:00.406800985 CET	443	49819	142.251.16.106	192.168.2.16
Mar 29, 2024 14:45:00.408236980 CET	443	49823	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.417239904 CET	49828	443	192.168.2.16	151.101.65.140
Mar 29, 2024 14:45:00.417272091 CET	443	49828	151.101.65.140	192.168.2.16
Mar 29, 2024 14:45:00.417345047 CET	49828	443	192.168.2.16	151.101.65.140
Mar 29, 2024 14:45:00.417571068 CET	49828	443	192.168.2.16	151.101.65.140
Mar 29, 2024 14:45:00.417586088 CET	443	49828	151.101.65.140	192.168.2.16
Mar 29, 2024 14:45:00.422770977 CET	49824	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:00.422791958 CET	443	49824	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:00.422818899 CET	49825	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.434619904 CET	443	49814	52.85.151.23	192.168.2.16
Mar 29, 2024 14:45:00.434647083 CET	443	49814	52.85.151.23	192.168.2.16
Mar 29, 2024 14:45:00.434720993 CET	49814	443	192.168.2.16	52.85.151.23
Mar 29, 2024 14:45:00.434743881 CET	443	49814	52.85.151.23	192.168.2.16
Mar 29, 2024 14:45:00.434784889 CET	49814	443	192.168.2.16	52.85.151.23
Mar 29, 2024 14:45:00.435509920 CET	49814	443	192.168.2.16	52.85.151.23
Mar 29, 2024 14:45:00.435576916 CET	443	49814	52.85.151.23	192.168.2.16
Mar 29, 2024 14:45:00.435636997 CET	49814	443	192.168.2.16	52.85.151.23
Mar 29, 2024 14:45:00.454782009 CET	49819	443	192.168.2.16	142.251.16.106
Mar 29, 2024 14:45:00.462064981 CET	443	49816	142.251.179.157	192.168.2.16
Mar 29, 2024 14:45:00.462116957 CET	443	49816	142.251.179.157	192.168.2.16
Mar 29, 2024 14:45:00.462177992 CET	49816	443	192.168.2.16	142.251.179.157
Mar 29, 2024 14:45:00.462193012 CET	443	49816	142.251.179.157	192.168.2.16
Mar 29, 2024 14:45:00.462276936 CET	443	49816	142.251.179.157	192.168.2.16
Mar 29, 2024 14:45:00.462322950 CET	49816	443	192.168.2.16	142.251.179.157
Mar 29, 2024 14:45:00.463018894 CET	49816	443	192.168.2.16	142.251.179.157
Mar 29, 2024 14:45:00.463033915 CET	443	49816	142.251.179.157	192.168.2.16
Mar 29, 2024 14:45:00.465845108 CET	49829	443	192.168.2.16	142.251.16.106
Mar 29, 2024 14:45:00.465856075 CET	443	49829	142.251.16.106	192.168.2.16
Mar 29, 2024 14:45:00.465948105 CET	49829	443	192.168.2.16	142.251.16.106
Mar 29, 2024 14:45:00.466173887 CET	49829	443	192.168.2.16	142.251.16.106
Mar 29, 2024 14:45:00.466188908 CET	443	49829	142.251.16.106	192.168.2.16
Mar 29, 2024 14:45:00.470757961 CET	49824	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:00.519908905 CET	443	49822	3.162.129.245	192.168.2.16
Mar 29, 2024 14:45:00.519933939 CET	443	49822	3.162.129.245	192.168.2.16
Mar 29, 2024 14:45:00.519942045 CET	443	49822	3.162.129.245	192.168.2.16
Mar 29, 2024 14:45:00.519972086 CET	443	49822	3.162.129.245	192.168.2.16
Mar 29, 2024 14:45:00.520009041 CET	443	49822	3.162.129.245	192.168.2.16
Mar 29, 2024 14:45:00.520045042 CET	49822	443	192.168.2.16	3.162.129.245
Mar 29, 2024 14:45:00.520066977 CET	443	49822	3.162.129.245	192.168.2.16
Mar 29, 2024 14:45:00.520087004 CET	49822	443	192.168.2.16	3.162.129.245
Mar 29, 2024 14:45:00.520112038 CET	49822	443	192.168.2.16	3.162.129.245
Mar 29, 2024 14:45:00.523571014 CET	443	49811	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:00.523652077 CET	443	49811	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:00.523746967 CET	49811	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:00.524632931 CET	49811	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:00.524652004 CET	443	49811	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:00.535648108 CET	443	49822	3.162.129.245	192.168.2.16
Mar 29, 2024 14:45:00.535677910 CET	443	49822	3.162.129.245	192.168.2.16
Mar 29, 2024 14:45:00.535763979 CET	49822	443	192.168.2.16	3.162.129.245
Mar 29, 2024 14:45:00.535778999 CET	443	49822	3.162.129.245	192.168.2.16
Mar 29, 2024 14:45:00.535821915 CET	49822	443	192.168.2.16	3.162.129.245
Mar 29, 2024 14:45:00.536648989 CET	49831	443	192.168.2.16	52.85.151.82
Mar 29, 2024 14:45:00.536674023 CET	443	49831	52.85.151.82	192.168.2.16
Mar 29, 2024 14:45:00.536755085 CET	49831	443	192.168.2.16	52.85.151.82
Mar 29, 2024 14:45:00.536942959 CET	49831	443	192.168.2.16	52.85.151.82
Mar 29, 2024 14:45:00.536952972 CET	443	49831	52.85.151.82	192.168.2.16
Mar 29, 2024 14:45:00.538763046 CET	443	49818	142.251.16.157	192.168.2.16
Mar 29, 2024 14:45:00.538938999 CET	443	49818	142.251.16.157	192.168.2.16
Mar 29, 2024 14:45:00.539000034 CET	49818	443	192.168.2.16	142.251.16.157
Mar 29, 2024 14:45:00.539588928 CET	49818	443	192.168.2.16	142.251.16.157
Mar 29, 2024 14:45:00.539606094 CET	443	49818	142.251.16.157	192.168.2.16
Mar 29, 2024 14:45:00.556197882 CET	49832	443	192.168.2.16	52.22.248.30
Mar 29, 2024 14:45:00.556226969 CET	443	49832	52.22.248.30	192.168.2.16
Mar 29, 2024 14:45:00.556396008 CET	49832	443	192.168.2.16	52.22.248.30
Mar 29, 2024 14:45:00.556541920 CET	49832	443	192.168.2.16	52.22.248.30
Mar 29, 2024 14:45:00.556560040 CET	443	49832	52.22.248.30	192.168.2.16
Mar 29, 2024 14:45:00.589258909 CET	443	49827	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.589593887 CET	49827	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.589617014 CET	443	49827	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.590071917 CET	443	49819	142.251.16.106	192.168.2.16
Mar 29, 2024 14:45:00.590145111 CET	443	49819	142.251.16.106	192.168.2.16
Mar 29, 2024 14:45:00.590193033 CET	49819	443	192.168.2.16	142.251.16.106
Mar 29, 2024 14:45:00.590235949 CET	443	49827	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.590785980 CET	49827	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.590866089 CET	443	49817	104.244.42.5	192.168.2.16
Mar 29, 2024 14:45:00.590867043 CET	443	49827	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.590926886 CET	443	49817	104.244.42.5	192.168.2.16
Mar 29, 2024 14:45:00.590989113 CET	49817	443	192.168.2.16	104.244.42.5
Mar 29, 2024 14:45:00.591779947 CET	49827	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.591814041 CET	443	49827	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.591937065 CET	49817	443	192.168.2.16	104.244.42.5
Mar 29, 2024 14:45:00.591953039 CET	443	49817	104.244.42.5	192.168.2.16
Mar 29, 2024 14:45:00.592247963 CET	49819	443	192.168.2.16	142.251.16.106
Mar 29, 2024 14:45:00.592267036 CET	443	49819	142.251.16.106	192.168.2.16
Mar 29, 2024 14:45:00.592278004 CET	49819	443	192.168.2.16	142.251.16.106
Mar 29, 2024 14:45:00.592308044 CET	49819	443	192.168.2.16	142.251.16.106
Mar 29, 2024 14:45:00.592921972 CET	49833	443	192.168.2.16	142.251.179.157
Mar 29, 2024 14:45:00.592943907 CET	443	49833	142.251.179.157	192.168.2.16
Mar 29, 2024 14:45:00.593003035 CET	49833	443	192.168.2.16	142.251.179.157
Mar 29, 2024 14:45:00.593255043 CET	49833	443	192.168.2.16	142.251.179.157
Mar 29, 2024 14:45:00.593267918 CET	443	49833	142.251.179.157	192.168.2.16
Mar 29, 2024 14:45:00.605506897 CET	443	49822	3.162.129.245	192.168.2.16
Mar 29, 2024 14:45:00.605545998 CET	443	49822	3.162.129.245	192.168.2.16
Mar 29, 2024 14:45:00.605619907 CET	443	49822	3.162.129.245	192.168.2.16
Mar 29, 2024 14:45:00.605626106 CET	49822	443	192.168.2.16	3.162.129.245
Mar 29, 2024 14:45:00.605679989 CET	49822	443	192.168.2.16	3.162.129.245
Mar 29, 2024 14:45:00.605962992 CET	49822	443	192.168.2.16	3.162.129.245
Mar 29, 2024 14:45:00.605981112 CET	443	49822	3.162.129.245	192.168.2.16
Mar 29, 2024 14:45:00.619616985 CET	443	49828	151.101.65.140	192.168.2.16
Mar 29, 2024 14:45:00.619925976 CET	49828	443	192.168.2.16	151.101.65.140
Mar 29, 2024 14:45:00.619939089 CET	443	49828	151.101.65.140	192.168.2.16
Mar 29, 2024 14:45:00.620969057 CET	443	49828	151.101.65.140	192.168.2.16
Mar 29, 2024 14:45:00.621071100 CET	49828	443	192.168.2.16	151.101.65.140
Mar 29, 2024 14:45:00.622045040 CET	49828	443	192.168.2.16	151.101.65.140
Mar 29, 2024 14:45:00.622100115 CET	443	49828	151.101.65.140	192.168.2.16
Mar 29, 2024 14:45:00.622193098 CET	49828	443	192.168.2.16	151.101.65.140
Mar 29, 2024 14:45:00.622200012 CET	443	49828	151.101.65.140	192.168.2.16
Mar 29, 2024 14:45:00.662192106 CET	443	49820	104.244.42.67	192.168.2.16
Mar 29, 2024 14:45:00.662261009 CET	443	49820	104.244.42.67	192.168.2.16
Mar 29, 2024 14:45:00.662365913 CET	49820	443	192.168.2.16	104.244.42.67
Mar 29, 2024 14:45:00.662889957 CET	49820	443	192.168.2.16	104.244.42.67
Mar 29, 2024 14:45:00.662904024 CET	443	49820	104.244.42.67	192.168.2.16
Mar 29, 2024 14:45:00.674763918 CET	49828	443	192.168.2.16	151.101.65.140
Mar 29, 2024 14:45:00.692397118 CET	443	49829	142.251.16.106	192.168.2.16
Mar 29, 2024 14:45:00.692672968 CET	49829	443	192.168.2.16	142.251.16.106
Mar 29, 2024 14:45:00.692682028 CET	443	49829	142.251.16.106	192.168.2.16
Mar 29, 2024 14:45:00.693027973 CET	443	49829	142.251.16.106	192.168.2.16
Mar 29, 2024 14:45:00.693330050 CET	49829	443	192.168.2.16	142.251.16.106
Mar 29, 2024 14:45:00.693396091 CET	443	49829	142.251.16.106	192.168.2.16
Mar 29, 2024 14:45:00.693485022 CET	49829	443	192.168.2.16	142.251.16.106
Mar 29, 2024 14:45:00.733077049 CET	443	49831	52.85.151.82	192.168.2.16
Mar 29, 2024 14:45:00.733357906 CET	49831	443	192.168.2.16	52.85.151.82
Mar 29, 2024 14:45:00.733375072 CET	443	49831	52.85.151.82	192.168.2.16
Mar 29, 2024 14:45:00.734424114 CET	443	49831	52.85.151.82	192.168.2.16
Mar 29, 2024 14:45:00.734497070 CET	49831	443	192.168.2.16	52.85.151.82
Mar 29, 2024 14:45:00.734771013 CET	49831	443	192.168.2.16	52.85.151.82
Mar 29, 2024 14:45:00.734834909 CET	443	49831	52.85.151.82	192.168.2.16
Mar 29, 2024 14:45:00.734899998 CET	49831	443	192.168.2.16	52.85.151.82
Mar 29, 2024 14:45:00.734908104 CET	443	49831	52.85.151.82	192.168.2.16
Mar 29, 2024 14:45:00.736242056 CET	443	49829	142.251.16.106	192.168.2.16
Mar 29, 2024 14:45:00.758550882 CET	443	49832	52.22.248.30	192.168.2.16
Mar 29, 2024 14:45:00.758785963 CET	49832	443	192.168.2.16	52.22.248.30
Mar 29, 2024 14:45:00.758810997 CET	443	49832	52.22.248.30	192.168.2.16
Mar 29, 2024 14:45:00.759818077 CET	443	49832	52.22.248.30	192.168.2.16
Mar 29, 2024 14:45:00.759884119 CET	49832	443	192.168.2.16	52.22.248.30
Mar 29, 2024 14:45:00.760881901 CET	49832	443	192.168.2.16	52.22.248.30
Mar 29, 2024 14:45:00.760945082 CET	443	49832	52.22.248.30	192.168.2.16
Mar 29, 2024 14:45:00.761044025 CET	49832	443	192.168.2.16	52.22.248.30
Mar 29, 2024 14:45:00.761056900 CET	443	49832	52.22.248.30	192.168.2.16
Mar 29, 2024 14:45:00.778959036 CET	443	49824	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:00.778980970 CET	443	49824	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:00.778987885 CET	443	49824	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:00.779061079 CET	49824	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:00.779076099 CET	443	49824	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:00.779102087 CET	443	49824	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:00.779144049 CET	49824	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:00.779570103 CET	49824	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:00.779578924 CET	443	49824	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:00.786782026 CET	49831	443	192.168.2.16	52.85.151.82
Mar 29, 2024 14:45:00.802784920 CET	49832	443	192.168.2.16	52.22.248.30
Mar 29, 2024 14:45:00.806103945 CET	443	49828	151.101.65.140	192.168.2.16
Mar 29, 2024 14:45:00.806227922 CET	443	49828	151.101.65.140	192.168.2.16
Mar 29, 2024 14:45:00.806293964 CET	49828	443	192.168.2.16	151.101.65.140
Mar 29, 2024 14:45:00.807049990 CET	49828	443	192.168.2.16	151.101.65.140
Mar 29, 2024 14:45:00.807060957 CET	443	49828	151.101.65.140	192.168.2.16
Mar 29, 2024 14:45:00.817374945 CET	443	49833	142.251.179.157	192.168.2.16
Mar 29, 2024 14:45:00.817629099 CET	49833	443	192.168.2.16	142.251.179.157
Mar 29, 2024 14:45:00.817642927 CET	443	49833	142.251.179.157	192.168.2.16
Mar 29, 2024 14:45:00.817982912 CET	443	49833	142.251.179.157	192.168.2.16
Mar 29, 2024 14:45:00.818280935 CET	49833	443	192.168.2.16	142.251.179.157
Mar 29, 2024 14:45:00.818347931 CET	443	49833	142.251.179.157	192.168.2.16
Mar 29, 2024 14:45:00.818409920 CET	49833	443	192.168.2.16	142.251.179.157
Mar 29, 2024 14:45:00.822427988 CET	49836	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:00.822448969 CET	443	49836	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:00.822524071 CET	49836	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:00.822735071 CET	49836	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:00.822746992 CET	443	49836	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:00.860238075 CET	443	49833	142.251.179.157	192.168.2.16
Mar 29, 2024 14:45:00.879515886 CET	49837	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:00.879554033 CET	443	49837	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:00.879632950 CET	49837	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:00.880089998 CET	49837	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:00.880099058 CET	443	49837	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:00.885972977 CET	49838	443	192.168.2.16	35.174.127.31
Mar 29, 2024 14:45:00.885992050 CET	443	49838	35.174.127.31	192.168.2.16
Mar 29, 2024 14:45:00.886056900 CET	49838	443	192.168.2.16	35.174.127.31
Mar 29, 2024 14:45:00.886334896 CET	49838	443	192.168.2.16	35.174.127.31
Mar 29, 2024 14:45:00.886349916 CET	443	49838	35.174.127.31	192.168.2.16
Mar 29, 2024 14:45:00.889841080 CET	443	49823	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.889897108 CET	443	49823	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.889941931 CET	49823	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.889951944 CET	443	49823	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.889990091 CET	443	49823	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.890036106 CET	49823	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.890898943 CET	49823	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.890908003 CET	443	49823	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.894886971 CET	49839	443	192.168.2.16	3.33.152.127
Mar 29, 2024 14:45:00.894908905 CET	443	49839	3.33.152.127	192.168.2.16
Mar 29, 2024 14:45:00.894965887 CET	49839	443	192.168.2.16	3.33.152.127
Mar 29, 2024 14:45:00.895272970 CET	49839	443	192.168.2.16	3.33.152.127
Mar 29, 2024 14:45:00.895281076 CET	443	49839	3.33.152.127	192.168.2.16
Mar 29, 2024 14:45:00.895716906 CET	443	49825	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.909009933 CET	49840	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:00.909045935 CET	443	49840	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:00.909115076 CET	49840	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:00.909284115 CET	49840	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:00.909305096 CET	443	49840	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:00.921195984 CET	443	49821	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.921298027 CET	443	49821	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.921356916 CET	49821	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.921822071 CET	49821	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.921839952 CET	443	49821	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.928348064 CET	49841	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:00.928375959 CET	443	49841	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:00.928450108 CET	49841	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:00.928642988 CET	49841	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:00.928653002 CET	443	49841	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:00.938182116 CET	443	49831	52.85.151.82	192.168.2.16
Mar 29, 2024 14:45:00.938370943 CET	443	49831	52.85.151.82	192.168.2.16
Mar 29, 2024 14:45:00.938426971 CET	49831	443	192.168.2.16	52.85.151.82
Mar 29, 2024 14:45:00.938927889 CET	49831	443	192.168.2.16	52.85.151.82
Mar 29, 2024 14:45:00.938942909 CET	443	49831	52.85.151.82	192.168.2.16
Mar 29, 2024 14:45:00.942748070 CET	49825	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.942771912 CET	443	49825	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.946930885 CET	49842	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:00.946945906 CET	443	49842	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:00.947009087 CET	49842	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:00.947215080 CET	49842	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:00.947227955 CET	443	49842	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:00.975481033 CET	49673	443	192.168.2.16	204.79.197.203
Mar 29, 2024 14:45:00.987549067 CET	443	49829	142.251.16.106	192.168.2.16
Mar 29, 2024 14:45:00.987633944 CET	443	49829	142.251.16.106	192.168.2.16
Mar 29, 2024 14:45:00.987705946 CET	49829	443	192.168.2.16	142.251.16.106
Mar 29, 2024 14:45:00.988076925 CET	49829	443	192.168.2.16	142.251.16.106
Mar 29, 2024 14:45:00.988085985 CET	443	49829	142.251.16.106	192.168.2.16
Mar 29, 2024 14:45:00.990741014 CET	49825	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.991055965 CET	443	49825	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.991126060 CET	443	49825	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.991158962 CET	443	49825	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.991168976 CET	49825	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.991182089 CET	443	49825	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.991225958 CET	49825	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:00.991230965 CET	443	49825	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:00.992072105 CET	443	49832	52.22.248.30	192.168.2.16
Mar 29, 2024 14:45:00.992145061 CET	443	49832	52.22.248.30	192.168.2.16
Mar 29, 2024 14:45:00.992204905 CET	49832	443	192.168.2.16	52.22.248.30
Mar 29, 2024 14:45:00.992477894 CET	49832	443	192.168.2.16	52.22.248.30
Mar 29, 2024 14:45:00.992492914 CET	443	49832	52.22.248.30	192.168.2.16
Mar 29, 2024 14:45:00.993061066 CET	49843	443	192.168.2.16	52.22.248.30
Mar 29, 2024 14:45:00.993094921 CET	443	49843	52.22.248.30	192.168.2.16
Mar 29, 2024 14:45:00.993155003 CET	49843	443	192.168.2.16	52.22.248.30
Mar 29, 2024 14:45:00.993359089 CET	49843	443	192.168.2.16	52.22.248.30
Mar 29, 2024 14:45:00.993371010 CET	443	49843	52.22.248.30	192.168.2.16
Mar 29, 2024 14:45:01.038795948 CET	49825	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:01.052994013 CET	443	49833	142.251.179.157	192.168.2.16
Mar 29, 2024 14:45:01.053076982 CET	443	49833	142.251.179.157	192.168.2.16
Mar 29, 2024 14:45:01.053132057 CET	49833	443	192.168.2.16	142.251.179.157
Mar 29, 2024 14:45:01.053575039 CET	49833	443	192.168.2.16	142.251.179.157
Mar 29, 2024 14:45:01.053587914 CET	443	49833	142.251.179.157	192.168.2.16
Mar 29, 2024 14:45:01.063966036 CET	443	49836	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:01.064229965 CET	49836	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:01.064254045 CET	443	49836	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:01.065489054 CET	443	49836	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:01.065567017 CET	49836	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:01.066483021 CET	49836	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:01.066545963 CET	443	49836	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:01.066653013 CET	49836	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:01.066659927 CET	443	49836	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:01.066675901 CET	49836	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:01.075654984 CET	443	49827	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:01.075719118 CET	443	49827	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:01.075778008 CET	49827	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:01.075833082 CET	49827	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:01.075848103 CET	443	49827	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:01.078088045 CET	443	49837	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:01.078283072 CET	49837	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:01.078294039 CET	443	49837	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:01.079689026 CET	443	49837	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:01.079760075 CET	49837	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:01.080045938 CET	49837	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:01.080111027 CET	443	49837	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:01.080167055 CET	49837	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:01.080173016 CET	443	49837	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:01.086309910 CET	443	49825	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:01.086415052 CET	443	49825	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:01.086462021 CET	49825	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:01.086543083 CET	49825	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:01.086553097 CET	443	49825	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:01.087317944 CET	49844	443	192.168.2.16	172.253.62.104
Mar 29, 2024 14:45:01.087336063 CET	443	49844	172.253.62.104	192.168.2.16
Mar 29, 2024 14:45:01.087399006 CET	49844	443	192.168.2.16	172.253.62.104
Mar 29, 2024 14:45:01.087605953 CET	49844	443	192.168.2.16	172.253.62.104
Mar 29, 2024 14:45:01.087616920 CET	443	49844	172.253.62.104	192.168.2.16
Mar 29, 2024 14:45:01.098022938 CET	443	49839	3.33.152.127	192.168.2.16
Mar 29, 2024 14:45:01.098227978 CET	49839	443	192.168.2.16	3.33.152.127
Mar 29, 2024 14:45:01.098238945 CET	443	49839	3.33.152.127	192.168.2.16
Mar 29, 2024 14:45:01.099313021 CET	443	49839	3.33.152.127	192.168.2.16
Mar 29, 2024 14:45:01.099433899 CET	49839	443	192.168.2.16	3.33.152.127
Mar 29, 2024 14:45:01.099441051 CET	443	49839	3.33.152.127	192.168.2.16
Mar 29, 2024 14:45:01.099484921 CET	49839	443	192.168.2.16	3.33.152.127
Mar 29, 2024 14:45:01.100264072 CET	49839	443	192.168.2.16	3.33.152.127
Mar 29, 2024 14:45:01.100322008 CET	443	49839	3.33.152.127	192.168.2.16
Mar 29, 2024 14:45:01.100460052 CET	49839	443	192.168.2.16	3.33.152.127
Mar 29, 2024 14:45:01.100471020 CET	443	49839	3.33.152.127	192.168.2.16
Mar 29, 2024 14:45:01.108246088 CET	443	49836	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:01.118745089 CET	49836	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:01.139178038 CET	443	49840	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:01.140840054 CET	49837	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:01.140984058 CET	49839	443	192.168.2.16	3.33.152.127
Mar 29, 2024 14:45:01.141182899 CET	49840	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:01.141204119 CET	443	49840	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:01.142296076 CET	443	49840	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:01.142374992 CET	49840	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:01.142678022 CET	49840	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:01.142750978 CET	443	49840	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:01.142832994 CET	49840	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:01.142841101 CET	443	49840	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:01.167228937 CET	443	49841	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:01.169423103 CET	49841	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:01.169435024 CET	443	49841	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:01.169800043 CET	443	49841	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:01.170145035 CET	49841	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:01.170206070 CET	443	49841	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:01.170408010 CET	49841	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:01.170443058 CET	49841	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:01.170480013 CET	443	49841	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:01.186220884 CET	443	49838	35.174.127.31	192.168.2.16
Mar 29, 2024 14:45:01.186431885 CET	49838	443	192.168.2.16	35.174.127.31
Mar 29, 2024 14:45:01.186444044 CET	443	49838	35.174.127.31	192.168.2.16
Mar 29, 2024 14:45:01.187565088 CET	443	49838	35.174.127.31	192.168.2.16
Mar 29, 2024 14:45:01.187639952 CET	49838	443	192.168.2.16	35.174.127.31
Mar 29, 2024 14:45:01.188627958 CET	49838	443	192.168.2.16	35.174.127.31
Mar 29, 2024 14:45:01.188685894 CET	443	49838	35.174.127.31	192.168.2.16
Mar 29, 2024 14:45:01.188937902 CET	49838	443	192.168.2.16	35.174.127.31
Mar 29, 2024 14:45:01.188944101 CET	443	49838	35.174.127.31	192.168.2.16
Mar 29, 2024 14:45:01.189753056 CET	49840	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:01.191124916 CET	443	49843	52.22.248.30	192.168.2.16
Mar 29, 2024 14:45:01.191415071 CET	49843	443	192.168.2.16	52.22.248.30
Mar 29, 2024 14:45:01.191435099 CET	443	49843	52.22.248.30	192.168.2.16
Mar 29, 2024 14:45:01.191790104 CET	443	49843	52.22.248.30	192.168.2.16
Mar 29, 2024 14:45:01.192078114 CET	49843	443	192.168.2.16	52.22.248.30
Mar 29, 2024 14:45:01.192142963 CET	443	49843	52.22.248.30	192.168.2.16
Mar 29, 2024 14:45:01.192195892 CET	49843	443	192.168.2.16	52.22.248.30
Mar 29, 2024 14:45:01.192229986 CET	49843	443	192.168.2.16	52.22.248.30
Mar 29, 2024 14:45:01.192238092 CET	443	49843	52.22.248.30	192.168.2.16
Mar 29, 2024 14:45:01.228770971 CET	49838	443	192.168.2.16	35.174.127.31
Mar 29, 2024 14:45:01.242444038 CET	443	49815	142.250.31.155	192.168.2.16
Mar 29, 2024 14:45:01.242758036 CET	49815	443	192.168.2.16	142.250.31.155
Mar 29, 2024 14:45:01.242784977 CET	443	49815	142.250.31.155	192.168.2.16
Mar 29, 2024 14:45:01.243863106 CET	443	49815	142.250.31.155	192.168.2.16
Mar 29, 2024 14:45:01.243947029 CET	49815	443	192.168.2.16	142.250.31.155
Mar 29, 2024 14:45:01.245066881 CET	49815	443	192.168.2.16	142.250.31.155
Mar 29, 2024 14:45:01.245151997 CET	443	49815	142.250.31.155	192.168.2.16
Mar 29, 2024 14:45:01.245349884 CET	49815	443	192.168.2.16	142.250.31.155
Mar 29, 2024 14:45:01.245363951 CET	443	49815	142.250.31.155	192.168.2.16
Mar 29, 2024 14:45:01.247071028 CET	443	49842	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.247279882 CET	49842	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:01.247298956 CET	443	49842	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.248416901 CET	443	49842	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.248482943 CET	49842	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:01.249402046 CET	49842	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:01.249469995 CET	443	49842	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.249542952 CET	49842	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:01.249550104 CET	443	49842	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.276799917 CET	49673	443	192.168.2.16	204.79.197.203
Mar 29, 2024 14:45:01.291379929 CET	443	49837	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:01.291392088 CET	443	49837	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:01.291467905 CET	49837	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:01.291490078 CET	443	49837	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:01.291522980 CET	443	49837	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:01.291546106 CET	49837	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:01.291582108 CET	49837	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:01.292538881 CET	49837	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:01.292555094 CET	443	49837	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:01.292772055 CET	49842	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:01.292826891 CET	49815	443	192.168.2.16	142.250.31.155
Mar 29, 2024 14:45:01.312999964 CET	443	49844	172.253.62.104	192.168.2.16
Mar 29, 2024 14:45:01.313263893 CET	49844	443	192.168.2.16	172.253.62.104
Mar 29, 2024 14:45:01.313286066 CET	443	49844	172.253.62.104	192.168.2.16
Mar 29, 2024 14:45:01.314313889 CET	443	49844	172.253.62.104	192.168.2.16
Mar 29, 2024 14:45:01.314383030 CET	49844	443	192.168.2.16	172.253.62.104
Mar 29, 2024 14:45:01.314665079 CET	49844	443	192.168.2.16	172.253.62.104
Mar 29, 2024 14:45:01.314728975 CET	443	49844	172.253.62.104	192.168.2.16
Mar 29, 2024 14:45:01.314811945 CET	49844	443	192.168.2.16	172.253.62.104
Mar 29, 2024 14:45:01.314820051 CET	443	49844	172.253.62.104	192.168.2.16
Mar 29, 2024 14:45:01.336354017 CET	443	49836	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:01.336472034 CET	443	49836	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:01.336553097 CET	49836	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:01.336848021 CET	49836	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:01.336863995 CET	443	49836	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:01.348128080 CET	443	49842	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.348202944 CET	443	49842	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.348268986 CET	49842	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:01.348810911 CET	49842	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:01.348826885 CET	443	49842	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.356992006 CET	49844	443	192.168.2.16	172.253.62.104
Mar 29, 2024 14:45:01.363467932 CET	443	49839	3.33.152.127	192.168.2.16
Mar 29, 2024 14:45:01.364973068 CET	443	49840	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:01.376162052 CET	49845	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:01.376204014 CET	443	49845	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.376291990 CET	49845	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:01.376493931 CET	49845	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:01.376511097 CET	443	49845	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.378284931 CET	49846	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:01.378314972 CET	443	49846	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.378411055 CET	49846	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:01.378582001 CET	49846	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:01.378593922 CET	443	49846	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.378930092 CET	49847	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:01.378964901 CET	443	49847	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.379024982 CET	49847	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:01.379203081 CET	49847	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:01.379216909 CET	443	49847	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.403800964 CET	49839	443	192.168.2.16	3.33.152.127
Mar 29, 2024 14:45:01.406894922 CET	443	49843	52.22.248.30	192.168.2.16
Mar 29, 2024 14:45:01.406966925 CET	443	49843	52.22.248.30	192.168.2.16
Mar 29, 2024 14:45:01.407011986 CET	49843	443	192.168.2.16	52.22.248.30
Mar 29, 2024 14:45:01.407325029 CET	49843	443	192.168.2.16	52.22.248.30
Mar 29, 2024 14:45:01.407344103 CET	443	49843	52.22.248.30	192.168.2.16
Mar 29, 2024 14:45:01.419765949 CET	49840	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:01.419781923 CET	443	49840	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:01.420159101 CET	49840	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:01.420245886 CET	443	49840	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:01.420306921 CET	49840	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:01.442507029 CET	443	49841	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:01.442574978 CET	443	49841	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:01.442631960 CET	49841	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:01.443011045 CET	49841	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:01.443026066 CET	443	49841	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:01.459639072 CET	443	49839	3.33.152.127	192.168.2.16
Mar 29, 2024 14:45:01.459652901 CET	443	49839	3.33.152.127	192.168.2.16
Mar 29, 2024 14:45:01.459731102 CET	443	49839	3.33.152.127	192.168.2.16
Mar 29, 2024 14:45:01.459760904 CET	49839	443	192.168.2.16	3.33.152.127
Mar 29, 2024 14:45:01.459875107 CET	49839	443	192.168.2.16	3.33.152.127
Mar 29, 2024 14:45:01.460134983 CET	49839	443	192.168.2.16	3.33.152.127
Mar 29, 2024 14:45:01.460150957 CET	443	49839	3.33.152.127	192.168.2.16
Mar 29, 2024 14:45:01.468252897 CET	49848	443	192.168.2.16	35.175.89.38
Mar 29, 2024 14:45:01.468281031 CET	443	49848	35.175.89.38	192.168.2.16
Mar 29, 2024 14:45:01.468353987 CET	49848	443	192.168.2.16	35.175.89.38
Mar 29, 2024 14:45:01.468574047 CET	49848	443	192.168.2.16	35.175.89.38
Mar 29, 2024 14:45:01.468585968 CET	443	49848	35.175.89.38	192.168.2.16
Mar 29, 2024 14:45:01.496247053 CET	443	49815	142.250.31.155	192.168.2.16
Mar 29, 2024 14:45:01.496328115 CET	443	49815	142.250.31.155	192.168.2.16
Mar 29, 2024 14:45:01.496393919 CET	49815	443	192.168.2.16	142.250.31.155
Mar 29, 2024 14:45:01.496691942 CET	49815	443	192.168.2.16	142.250.31.155
Mar 29, 2024 14:45:01.496705055 CET	443	49815	142.250.31.155	192.168.2.16
Mar 29, 2024 14:45:01.518776894 CET	49849	443	192.168.2.16	151.101.1.140
Mar 29, 2024 14:45:01.518815994 CET	443	49849	151.101.1.140	192.168.2.16
Mar 29, 2024 14:45:01.518896103 CET	49849	443	192.168.2.16	151.101.1.140
Mar 29, 2024 14:45:01.519088984 CET	49849	443	192.168.2.16	151.101.1.140
Mar 29, 2024 14:45:01.519109964 CET	443	49849	151.101.1.140	192.168.2.16
Mar 29, 2024 14:45:01.521230936 CET	49850	443	192.168.2.16	52.22.248.30
Mar 29, 2024 14:45:01.521259069 CET	443	49850	52.22.248.30	192.168.2.16
Mar 29, 2024 14:45:01.521330118 CET	49850	443	192.168.2.16	52.22.248.30
Mar 29, 2024 14:45:01.521473885 CET	49850	443	192.168.2.16	52.22.248.30
Mar 29, 2024 14:45:01.521482944 CET	443	49850	52.22.248.30	192.168.2.16
Mar 29, 2024 14:45:01.551338911 CET	49851	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:01.551390886 CET	443	49851	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:01.551481009 CET	49851	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:01.551712990 CET	49851	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:01.551726103 CET	443	49851	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:01.562555075 CET	49852	443	192.168.2.16	3.33.152.127
Mar 29, 2024 14:45:01.562582970 CET	443	49852	3.33.152.127	192.168.2.16
Mar 29, 2024 14:45:01.562679052 CET	49852	443	192.168.2.16	3.33.152.127
Mar 29, 2024 14:45:01.562880993 CET	49852	443	192.168.2.16	3.33.152.127
Mar 29, 2024 14:45:01.562894106 CET	443	49852	3.33.152.127	192.168.2.16
Mar 29, 2024 14:45:01.570521116 CET	443	49845	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.570812941 CET	49845	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:01.570838928 CET	443	49845	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.571185112 CET	443	49845	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.572145939 CET	49845	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:01.572206020 CET	443	49845	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.572326899 CET	49845	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:01.588515043 CET	443	49846	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.588548899 CET	443	49847	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.588778973 CET	49846	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:01.588808060 CET	443	49846	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.588932991 CET	49847	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:01.588956118 CET	443	49847	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.589241028 CET	443	49846	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.589539051 CET	49846	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:01.589605093 CET	443	49846	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.589672089 CET	49846	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:01.590187073 CET	443	49847	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.590255976 CET	49847	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:01.590521097 CET	49847	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:01.590589046 CET	443	49847	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.590615034 CET	49847	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:01.592081070 CET	443	49826	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:01.592305899 CET	49826	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:01.592330933 CET	443	49826	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:01.593365908 CET	443	49826	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:01.593431950 CET	49826	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:01.593708038 CET	49826	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:01.593782902 CET	443	49826	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:01.593827963 CET	49826	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:01.612627029 CET	443	49844	172.253.62.104	192.168.2.16
Mar 29, 2024 14:45:01.612770081 CET	443	49844	172.253.62.104	192.168.2.16
Mar 29, 2024 14:45:01.612828016 CET	49844	443	192.168.2.16	172.253.62.104
Mar 29, 2024 14:45:01.613440037 CET	49844	443	192.168.2.16	172.253.62.104
Mar 29, 2024 14:45:01.613454103 CET	443	49844	172.253.62.104	192.168.2.16
Mar 29, 2024 14:45:01.620234966 CET	443	49845	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.636234999 CET	443	49847	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.636245966 CET	443	49826	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:01.636250973 CET	443	49846	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.637770891 CET	49847	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:01.637772083 CET	49826	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:01.637778997 CET	443	49847	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.637798071 CET	443	49826	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:01.685751915 CET	49847	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:01.685859919 CET	49826	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:01.715075016 CET	443	49849	151.101.1.140	192.168.2.16
Mar 29, 2024 14:45:01.715379953 CET	49849	443	192.168.2.16	151.101.1.140
Mar 29, 2024 14:45:01.715401888 CET	443	49849	151.101.1.140	192.168.2.16
Mar 29, 2024 14:45:01.716434956 CET	443	49849	151.101.1.140	192.168.2.16
Mar 29, 2024 14:45:01.716510057 CET	49849	443	192.168.2.16	151.101.1.140
Mar 29, 2024 14:45:01.717535973 CET	49849	443	192.168.2.16	151.101.1.140
Mar 29, 2024 14:45:01.717598915 CET	443	49849	151.101.1.140	192.168.2.16
Mar 29, 2024 14:45:01.717920065 CET	49849	443	192.168.2.16	151.101.1.140
Mar 29, 2024 14:45:01.717926025 CET	443	49849	151.101.1.140	192.168.2.16
Mar 29, 2024 14:45:01.720866919 CET	443	49850	52.22.248.30	192.168.2.16
Mar 29, 2024 14:45:01.721076965 CET	49850	443	192.168.2.16	52.22.248.30
Mar 29, 2024 14:45:01.721097946 CET	443	49850	52.22.248.30	192.168.2.16
Mar 29, 2024 14:45:01.722141981 CET	443	49850	52.22.248.30	192.168.2.16
Mar 29, 2024 14:45:01.722210884 CET	49850	443	192.168.2.16	52.22.248.30
Mar 29, 2024 14:45:01.722570896 CET	49850	443	192.168.2.16	52.22.248.30
Mar 29, 2024 14:45:01.722634077 CET	443	49850	52.22.248.30	192.168.2.16
Mar 29, 2024 14:45:01.722721100 CET	49850	443	192.168.2.16	52.22.248.30
Mar 29, 2024 14:45:01.722732067 CET	443	49850	52.22.248.30	192.168.2.16
Mar 29, 2024 14:45:01.762440920 CET	443	49852	3.33.152.127	192.168.2.16
Mar 29, 2024 14:45:01.762723923 CET	49852	443	192.168.2.16	3.33.152.127
Mar 29, 2024 14:45:01.762738943 CET	443	49852	3.33.152.127	192.168.2.16
Mar 29, 2024 14:45:01.763820887 CET	443	49852	3.33.152.127	192.168.2.16
Mar 29, 2024 14:45:01.763895988 CET	49852	443	192.168.2.16	3.33.152.127
Mar 29, 2024 14:45:01.763911009 CET	443	49852	3.33.152.127	192.168.2.16
Mar 29, 2024 14:45:01.763952971 CET	49852	443	192.168.2.16	3.33.152.127
Mar 29, 2024 14:45:01.764221907 CET	49852	443	192.168.2.16	3.33.152.127
Mar 29, 2024 14:45:01.764302015 CET	443	49852	3.33.152.127	192.168.2.16
Mar 29, 2024 14:45:01.764374971 CET	49852	443	192.168.2.16	3.33.152.127
Mar 29, 2024 14:45:01.764384031 CET	443	49852	3.33.152.127	192.168.2.16
Mar 29, 2024 14:45:01.764508963 CET	443	49845	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.764579058 CET	443	49845	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.764655113 CET	49845	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:01.765340090 CET	49845	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:01.765357018 CET	443	49845	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.765733957 CET	49850	443	192.168.2.16	52.22.248.30
Mar 29, 2024 14:45:01.766483068 CET	443	49848	35.175.89.38	192.168.2.16
Mar 29, 2024 14:45:01.766527891 CET	49849	443	192.168.2.16	151.101.1.140
Mar 29, 2024 14:45:01.766750097 CET	49848	443	192.168.2.16	35.175.89.38
Mar 29, 2024 14:45:01.766769886 CET	443	49848	35.175.89.38	192.168.2.16
Mar 29, 2024 14:45:01.767884970 CET	443	49848	35.175.89.38	192.168.2.16
Mar 29, 2024 14:45:01.768004894 CET	49848	443	192.168.2.16	35.175.89.38
Mar 29, 2024 14:45:01.769541025 CET	443	49846	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.769542933 CET	443	49847	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.769628048 CET	443	49847	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.769630909 CET	443	49846	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.769678116 CET	49846	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:01.769840956 CET	49847	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:01.770068884 CET	49848	443	192.168.2.16	35.175.89.38
Mar 29, 2024 14:45:01.770143032 CET	443	49848	35.175.89.38	192.168.2.16
Mar 29, 2024 14:45:01.770915031 CET	49846	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:01.770929098 CET	443	49846	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.771260977 CET	49848	443	192.168.2.16	35.175.89.38
Mar 29, 2024 14:45:01.771269083 CET	443	49848	35.175.89.38	192.168.2.16
Mar 29, 2024 14:45:01.771307945 CET	49847	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:01.771317959 CET	443	49847	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:01.795609951 CET	443	49851	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:01.795893908 CET	49851	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:01.795919895 CET	443	49851	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:01.796277046 CET	443	49851	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:01.796562910 CET	49851	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:01.796626091 CET	443	49851	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:01.796685934 CET	49851	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:01.813765049 CET	49848	443	192.168.2.16	35.175.89.38
Mar 29, 2024 14:45:01.817747116 CET	49852	443	192.168.2.16	3.33.152.127
Mar 29, 2024 14:45:01.824035883 CET	443	49826	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:01.824165106 CET	443	49826	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:01.824234962 CET	49826	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:01.825040102 CET	49826	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:01.825056076 CET	443	49826	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:01.840246916 CET	443	49851	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:01.868042946 CET	443	49848	35.175.89.38	192.168.2.16
Mar 29, 2024 14:45:01.869446039 CET	49853	443	192.168.2.16	34.197.113.183
Mar 29, 2024 14:45:01.869493961 CET	443	49853	34.197.113.183	192.168.2.16
Mar 29, 2024 14:45:01.869560003 CET	49853	443	192.168.2.16	34.197.113.183
Mar 29, 2024 14:45:01.869637012 CET	443	49848	35.175.89.38	192.168.2.16
Mar 29, 2024 14:45:01.869685888 CET	49848	443	192.168.2.16	35.175.89.38
Mar 29, 2024 14:45:01.869889975 CET	49854	443	192.168.2.16	142.251.179.157
Mar 29, 2024 14:45:01.869929075 CET	443	49854	142.251.179.157	192.168.2.16
Mar 29, 2024 14:45:01.869977951 CET	49854	443	192.168.2.16	142.251.179.157
Mar 29, 2024 14:45:01.870589972 CET	49854	443	192.168.2.16	142.251.179.157
Mar 29, 2024 14:45:01.870606899 CET	443	49854	142.251.179.157	192.168.2.16
Mar 29, 2024 14:45:01.872397900 CET	49853	443	192.168.2.16	34.197.113.183
Mar 29, 2024 14:45:01.872409105 CET	443	49853	34.197.113.183	192.168.2.16
Mar 29, 2024 14:45:01.872795105 CET	49855	443	192.168.2.16	172.64.151.101
Mar 29, 2024 14:45:01.872817993 CET	443	49855	172.64.151.101	192.168.2.16
Mar 29, 2024 14:45:01.872889996 CET	49855	443	192.168.2.16	172.64.151.101
Mar 29, 2024 14:45:01.873202085 CET	49855	443	192.168.2.16	172.64.151.101
Mar 29, 2024 14:45:01.873217106 CET	443	49855	172.64.151.101	192.168.2.16
Mar 29, 2024 14:45:01.873706102 CET	49848	443	192.168.2.16	35.175.89.38
Mar 29, 2024 14:45:01.873722076 CET	443	49848	35.175.89.38	192.168.2.16
Mar 29, 2024 14:45:01.877787113 CET	49673	443	192.168.2.16	204.79.197.203
Mar 29, 2024 14:45:01.887170076 CET	49856	443	192.168.2.16	54.204.205.163
Mar 29, 2024 14:45:01.887186050 CET	443	49856	54.204.205.163	192.168.2.16
Mar 29, 2024 14:45:01.887253046 CET	49856	443	192.168.2.16	54.204.205.163
Mar 29, 2024 14:45:01.887500048 CET	49856	443	192.168.2.16	54.204.205.163
Mar 29, 2024 14:45:01.887511969 CET	443	49856	54.204.205.163	192.168.2.16
Mar 29, 2024 14:45:01.888638020 CET	49857	443	192.168.2.16	35.175.89.38
Mar 29, 2024 14:45:01.888672113 CET	443	49857	35.175.89.38	192.168.2.16
Mar 29, 2024 14:45:01.888750076 CET	49857	443	192.168.2.16	35.175.89.38
Mar 29, 2024 14:45:01.888922930 CET	49857	443	192.168.2.16	35.175.89.38
Mar 29, 2024 14:45:01.888935089 CET	443	49857	35.175.89.38	192.168.2.16
Mar 29, 2024 14:45:01.912868977 CET	443	49849	151.101.1.140	192.168.2.16
Mar 29, 2024 14:45:01.912945032 CET	443	49849	151.101.1.140	192.168.2.16
Mar 29, 2024 14:45:01.913007975 CET	49849	443	192.168.2.16	151.101.1.140
Mar 29, 2024 14:45:01.913224936 CET	49849	443	192.168.2.16	151.101.1.140
Mar 29, 2024 14:45:01.913240910 CET	443	49849	151.101.1.140	192.168.2.16
Mar 29, 2024 14:45:01.913717985 CET	49858	443	192.168.2.16	151.101.1.140
Mar 29, 2024 14:45:01.913736105 CET	443	49858	151.101.1.140	192.168.2.16
Mar 29, 2024 14:45:01.913805962 CET	49858	443	192.168.2.16	151.101.1.140
Mar 29, 2024 14:45:01.914006948 CET	49858	443	192.168.2.16	151.101.1.140
Mar 29, 2024 14:45:01.914019108 CET	443	49858	151.101.1.140	192.168.2.16
Mar 29, 2024 14:45:01.930290937 CET	49859	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:01.930322886 CET	443	49859	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:01.930416107 CET	49859	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:01.930583000 CET	49859	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:01.930593967 CET	443	49859	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:01.957207918 CET	443	49850	52.22.248.30	192.168.2.16
Mar 29, 2024 14:45:01.957400084 CET	443	49850	52.22.248.30	192.168.2.16
Mar 29, 2024 14:45:01.957503080 CET	49850	443	192.168.2.16	52.22.248.30
Mar 29, 2024 14:45:01.959007025 CET	49850	443	192.168.2.16	52.22.248.30
Mar 29, 2024 14:45:01.959023952 CET	443	49850	52.22.248.30	192.168.2.16
Mar 29, 2024 14:45:02.057252884 CET	443	49852	3.33.152.127	192.168.2.16
Mar 29, 2024 14:45:02.057275057 CET	443	49852	3.33.152.127	192.168.2.16
Mar 29, 2024 14:45:02.057339907 CET	443	49852	3.33.152.127	192.168.2.16
Mar 29, 2024 14:45:02.057410955 CET	49852	443	192.168.2.16	3.33.152.127
Mar 29, 2024 14:45:02.057423115 CET	443	49852	3.33.152.127	192.168.2.16
Mar 29, 2024 14:45:02.057436943 CET	49852	443	192.168.2.16	3.33.152.127
Mar 29, 2024 14:45:02.057465076 CET	49852	443	192.168.2.16	3.33.152.127
Mar 29, 2024 14:45:02.058636904 CET	49852	443	192.168.2.16	3.33.152.127
Mar 29, 2024 14:45:02.058655977 CET	443	49852	3.33.152.127	192.168.2.16
Mar 29, 2024 14:45:02.073431969 CET	443	49851	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:02.073502064 CET	443	49851	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:02.073558092 CET	49851	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:02.074004889 CET	49851	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:02.074021101 CET	443	49851	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:02.075355053 CET	443	49855	172.64.151.101	192.168.2.16
Mar 29, 2024 14:45:02.077521086 CET	49855	443	192.168.2.16	172.64.151.101
Mar 29, 2024 14:45:02.077544928 CET	443	49855	172.64.151.101	192.168.2.16
Mar 29, 2024 14:45:02.078568935 CET	443	49855	172.64.151.101	192.168.2.16
Mar 29, 2024 14:45:02.078638077 CET	49855	443	192.168.2.16	172.64.151.101
Mar 29, 2024 14:45:02.079097986 CET	49860	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:02.079128981 CET	443	49860	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:02.079200029 CET	49860	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:02.079699993 CET	49860	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:02.079715014 CET	443	49860	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:02.080038071 CET	49855	443	192.168.2.16	172.64.151.101
Mar 29, 2024 14:45:02.080180883 CET	49855	443	192.168.2.16	172.64.151.101
Mar 29, 2024 14:45:02.080184937 CET	443	49855	172.64.151.101	192.168.2.16
Mar 29, 2024 14:45:02.080194950 CET	443	49855	172.64.151.101	192.168.2.16
Mar 29, 2024 14:45:02.085514069 CET	443	49857	35.175.89.38	192.168.2.16
Mar 29, 2024 14:45:02.085787058 CET	49857	443	192.168.2.16	35.175.89.38
Mar 29, 2024 14:45:02.085799932 CET	443	49857	35.175.89.38	192.168.2.16
Mar 29, 2024 14:45:02.086164951 CET	443	49857	35.175.89.38	192.168.2.16
Mar 29, 2024 14:45:02.086467981 CET	49857	443	192.168.2.16	35.175.89.38
Mar 29, 2024 14:45:02.086533070 CET	443	49857	35.175.89.38	192.168.2.16
Mar 29, 2024 14:45:02.086584091 CET	49857	443	192.168.2.16	35.175.89.38
Mar 29, 2024 14:45:02.092401028 CET	443	49854	142.251.179.157	192.168.2.16
Mar 29, 2024 14:45:02.093103886 CET	49854	443	192.168.2.16	142.251.179.157
Mar 29, 2024 14:45:02.093112946 CET	443	49854	142.251.179.157	192.168.2.16
Mar 29, 2024 14:45:02.094135046 CET	443	49854	142.251.179.157	192.168.2.16
Mar 29, 2024 14:45:02.094197989 CET	49854	443	192.168.2.16	142.251.179.157
Mar 29, 2024 14:45:02.095195055 CET	49854	443	192.168.2.16	142.251.179.157
Mar 29, 2024 14:45:02.095266104 CET	443	49854	142.251.179.157	192.168.2.16
Mar 29, 2024 14:45:02.095665932 CET	49854	443	192.168.2.16	142.251.179.157
Mar 29, 2024 14:45:02.095673084 CET	443	49854	142.251.179.157	192.168.2.16
Mar 29, 2024 14:45:02.110203028 CET	443	49858	151.101.1.140	192.168.2.16
Mar 29, 2024 14:45:02.110445976 CET	49858	443	192.168.2.16	151.101.1.140
Mar 29, 2024 14:45:02.110455036 CET	443	49858	151.101.1.140	192.168.2.16
Mar 29, 2024 14:45:02.110780954 CET	443	49858	151.101.1.140	192.168.2.16
Mar 29, 2024 14:45:02.111071110 CET	49858	443	192.168.2.16	151.101.1.140
Mar 29, 2024 14:45:02.111126900 CET	443	49858	151.101.1.140	192.168.2.16
Mar 29, 2024 14:45:02.111211061 CET	49858	443	192.168.2.16	151.101.1.140
Mar 29, 2024 14:45:02.128757954 CET	49855	443	192.168.2.16	172.64.151.101
Mar 29, 2024 14:45:02.128777981 CET	443	49855	172.64.151.101	192.168.2.16
Mar 29, 2024 14:45:02.132230043 CET	443	49857	35.175.89.38	192.168.2.16
Mar 29, 2024 14:45:02.144756079 CET	49854	443	192.168.2.16	142.251.179.157
Mar 29, 2024 14:45:02.156234026 CET	443	49858	151.101.1.140	192.168.2.16
Mar 29, 2024 14:45:02.169143915 CET	443	49853	34.197.113.183	192.168.2.16
Mar 29, 2024 14:45:02.169434071 CET	49853	443	192.168.2.16	34.197.113.183
Mar 29, 2024 14:45:02.169454098 CET	443	49853	34.197.113.183	192.168.2.16
Mar 29, 2024 14:45:02.170530081 CET	443	49853	34.197.113.183	192.168.2.16
Mar 29, 2024 14:45:02.170597076 CET	49853	443	192.168.2.16	34.197.113.183
Mar 29, 2024 14:45:02.170922041 CET	49853	443	192.168.2.16	34.197.113.183
Mar 29, 2024 14:45:02.170985937 CET	443	49853	34.197.113.183	192.168.2.16
Mar 29, 2024 14:45:02.171098948 CET	49853	443	192.168.2.16	34.197.113.183
Mar 29, 2024 14:45:02.171108961 CET	443	49853	34.197.113.183	192.168.2.16
Mar 29, 2024 14:45:02.176769972 CET	49855	443	192.168.2.16	172.64.151.101
Mar 29, 2024 14:45:02.184227943 CET	443	49856	54.204.205.163	192.168.2.16
Mar 29, 2024 14:45:02.184511900 CET	49856	443	192.168.2.16	54.204.205.163
Mar 29, 2024 14:45:02.184541941 CET	443	49856	54.204.205.163	192.168.2.16
Mar 29, 2024 14:45:02.185648918 CET	443	49856	54.204.205.163	192.168.2.16
Mar 29, 2024 14:45:02.185734987 CET	49856	443	192.168.2.16	54.204.205.163
Mar 29, 2024 14:45:02.186081886 CET	49856	443	192.168.2.16	54.204.205.163
Mar 29, 2024 14:45:02.186157942 CET	443	49856	54.204.205.163	192.168.2.16
Mar 29, 2024 14:45:02.186245918 CET	49856	443	192.168.2.16	54.204.205.163
Mar 29, 2024 14:45:02.186259985 CET	443	49856	54.204.205.163	192.168.2.16
Mar 29, 2024 14:45:02.209348917 CET	49861	443	192.168.2.16	34.111.113.62
Mar 29, 2024 14:45:02.209387064 CET	443	49861	34.111.113.62	192.168.2.16
Mar 29, 2024 14:45:02.209480047 CET	49861	443	192.168.2.16	34.111.113.62
Mar 29, 2024 14:45:02.209695101 CET	49861	443	192.168.2.16	34.111.113.62
Mar 29, 2024 14:45:02.209712029 CET	443	49861	34.111.113.62	192.168.2.16
Mar 29, 2024 14:45:02.223815918 CET	49853	443	192.168.2.16	34.197.113.183
Mar 29, 2024 14:45:02.233844995 CET	49856	443	192.168.2.16	54.204.205.163
Mar 29, 2024 14:45:02.270839930 CET	443	49853	34.197.113.183	192.168.2.16
Mar 29, 2024 14:45:02.270970106 CET	443	49853	34.197.113.183	192.168.2.16
Mar 29, 2024 14:45:02.271038055 CET	49853	443	192.168.2.16	34.197.113.183
Mar 29, 2024 14:45:02.271641016 CET	49853	443	192.168.2.16	34.197.113.183
Mar 29, 2024 14:45:02.271658897 CET	443	49853	34.197.113.183	192.168.2.16
Mar 29, 2024 14:45:02.276223898 CET	443	49857	35.175.89.38	192.168.2.16
Mar 29, 2024 14:45:02.276249886 CET	443	49857	35.175.89.38	192.168.2.16
Mar 29, 2024 14:45:02.276297092 CET	443	49857	35.175.89.38	192.168.2.16
Mar 29, 2024 14:45:02.276326895 CET	443	49857	35.175.89.38	192.168.2.16
Mar 29, 2024 14:45:02.276340008 CET	49857	443	192.168.2.16	35.175.89.38
Mar 29, 2024 14:45:02.276377916 CET	49857	443	192.168.2.16	35.175.89.38
Mar 29, 2024 14:45:02.277036905 CET	49857	443	192.168.2.16	35.175.89.38
Mar 29, 2024 14:45:02.277049065 CET	443	49857	35.175.89.38	192.168.2.16
Mar 29, 2024 14:45:02.283242941 CET	443	49860	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:02.283494949 CET	49860	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:02.283520937 CET	443	49860	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:02.283902884 CET	443	49860	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:02.283952951 CET	443	49856	54.204.205.163	192.168.2.16
Mar 29, 2024 14:45:02.284025908 CET	443	49856	54.204.205.163	192.168.2.16
Mar 29, 2024 14:45:02.284079075 CET	49856	443	192.168.2.16	54.204.205.163
Mar 29, 2024 14:45:02.284203053 CET	49860	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:02.284287930 CET	443	49860	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:02.284468889 CET	49860	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:02.284497976 CET	443	49860	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:02.285053015 CET	49856	443	192.168.2.16	54.204.205.163
Mar 29, 2024 14:45:02.285062075 CET	443	49856	54.204.205.163	192.168.2.16
Mar 29, 2024 14:45:02.302819014 CET	443	49858	151.101.1.140	192.168.2.16
Mar 29, 2024 14:45:02.302916050 CET	443	49858	151.101.1.140	192.168.2.16
Mar 29, 2024 14:45:02.302980900 CET	49858	443	192.168.2.16	151.101.1.140
Mar 29, 2024 14:45:02.303083897 CET	49858	443	192.168.2.16	151.101.1.140
Mar 29, 2024 14:45:02.303092957 CET	443	49858	151.101.1.140	192.168.2.16
Mar 29, 2024 14:45:02.303107977 CET	49858	443	192.168.2.16	151.101.1.140
Mar 29, 2024 14:45:02.303139925 CET	49858	443	192.168.2.16	151.101.1.140
Mar 29, 2024 14:45:02.306786060 CET	443	49859	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:02.306997061 CET	49859	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:02.307012081 CET	443	49859	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:02.308196068 CET	443	49859	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:02.308268070 CET	49859	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:02.308535099 CET	49859	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:02.308598995 CET	443	49859	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:02.308640957 CET	49859	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:02.332187891 CET	443	49855	172.64.151.101	192.168.2.16
Mar 29, 2024 14:45:02.332257986 CET	443	49855	172.64.151.101	192.168.2.16
Mar 29, 2024 14:45:02.332303047 CET	49855	443	192.168.2.16	172.64.151.101
Mar 29, 2024 14:45:02.332509041 CET	443	49854	142.251.179.157	192.168.2.16
Mar 29, 2024 14:45:02.332783937 CET	443	49854	142.251.179.157	192.168.2.16
Mar 29, 2024 14:45:02.332833052 CET	49854	443	192.168.2.16	142.251.179.157
Mar 29, 2024 14:45:02.333149910 CET	49855	443	192.168.2.16	172.64.151.101
Mar 29, 2024 14:45:02.333163977 CET	443	49855	172.64.151.101	192.168.2.16
Mar 29, 2024 14:45:02.333369970 CET	49854	443	192.168.2.16	142.251.179.157
Mar 29, 2024 14:45:02.333374023 CET	443	49854	142.251.179.157	192.168.2.16
Mar 29, 2024 14:45:02.333385944 CET	49854	443	192.168.2.16	142.251.179.157
Mar 29, 2024 14:45:02.333420992 CET	49854	443	192.168.2.16	142.251.179.157
Mar 29, 2024 14:45:02.334980965 CET	49862	443	192.168.2.16	172.64.151.101
Mar 29, 2024 14:45:02.334997892 CET	443	49862	172.64.151.101	192.168.2.16
Mar 29, 2024 14:45:02.335077047 CET	49862	443	192.168.2.16	172.64.151.101
Mar 29, 2024 14:45:02.335237026 CET	49863	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:02.335261106 CET	443	49863	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:02.335319042 CET	49863	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:02.335414886 CET	49862	443	192.168.2.16	172.64.151.101
Mar 29, 2024 14:45:02.335428953 CET	443	49862	172.64.151.101	192.168.2.16
Mar 29, 2024 14:45:02.335549116 CET	49863	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:02.335561037 CET	443	49863	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:02.349771976 CET	49859	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:02.349778891 CET	443	49859	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:02.397762060 CET	49859	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:02.403381109 CET	49864	443	192.168.2.16	3.225.95.250
Mar 29, 2024 14:45:02.403415918 CET	443	49864	3.225.95.250	192.168.2.16
Mar 29, 2024 14:45:02.403492928 CET	49864	443	192.168.2.16	3.225.95.250
Mar 29, 2024 14:45:02.403723955 CET	49864	443	192.168.2.16	3.225.95.250
Mar 29, 2024 14:45:02.403737068 CET	443	49864	3.225.95.250	192.168.2.16
Mar 29, 2024 14:45:02.403752089 CET	49865	443	192.168.2.16	3.225.95.250
Mar 29, 2024 14:45:02.403784990 CET	443	49865	3.225.95.250	192.168.2.16
Mar 29, 2024 14:45:02.403866053 CET	49865	443	192.168.2.16	3.225.95.250
Mar 29, 2024 14:45:02.404015064 CET	49865	443	192.168.2.16	3.225.95.250
Mar 29, 2024 14:45:02.404027939 CET	443	49865	3.225.95.250	192.168.2.16
Mar 29, 2024 14:45:02.453531027 CET	443	49861	34.111.113.62	192.168.2.16
Mar 29, 2024 14:45:02.453777075 CET	49861	443	192.168.2.16	34.111.113.62
Mar 29, 2024 14:45:02.453790903 CET	443	49861	34.111.113.62	192.168.2.16
Mar 29, 2024 14:45:02.455121994 CET	443	49861	34.111.113.62	192.168.2.16
Mar 29, 2024 14:45:02.455192089 CET	49861	443	192.168.2.16	34.111.113.62
Mar 29, 2024 14:45:02.456146955 CET	49861	443	192.168.2.16	34.111.113.62
Mar 29, 2024 14:45:02.456211090 CET	443	49861	34.111.113.62	192.168.2.16
Mar 29, 2024 14:45:02.456352949 CET	49861	443	192.168.2.16	34.111.113.62
Mar 29, 2024 14:45:02.456362009 CET	443	49861	34.111.113.62	192.168.2.16
Mar 29, 2024 14:45:02.509763002 CET	49861	443	192.168.2.16	34.111.113.62
Mar 29, 2024 14:45:02.534662008 CET	443	49863	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:02.534956932 CET	49863	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:02.534979105 CET	443	49863	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:02.535422087 CET	443	49863	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:02.535516024 CET	443	49859	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:02.535793066 CET	49863	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:02.535895109 CET	443	49863	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:02.536196947 CET	49863	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:02.536643028 CET	443	49862	172.64.151.101	192.168.2.16
Mar 29, 2024 14:45:02.536863089 CET	49862	443	192.168.2.16	172.64.151.101
Mar 29, 2024 14:45:02.536884069 CET	443	49862	172.64.151.101	192.168.2.16
Mar 29, 2024 14:45:02.537214994 CET	443	49862	172.64.151.101	192.168.2.16
Mar 29, 2024 14:45:02.537520885 CET	49862	443	192.168.2.16	172.64.151.101
Mar 29, 2024 14:45:02.537583113 CET	443	49862	172.64.151.101	192.168.2.16
Mar 29, 2024 14:45:02.537667990 CET	49862	443	192.168.2.16	172.64.151.101
Mar 29, 2024 14:45:02.580228090 CET	443	49863	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:02.580248117 CET	443	49862	172.64.151.101	192.168.2.16
Mar 29, 2024 14:45:02.588808060 CET	49859	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:02.588821888 CET	443	49859	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:02.589215040 CET	49859	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:02.589294910 CET	443	49859	151.101.129.140	192.168.2.16
Mar 29, 2024 14:45:02.589353085 CET	49859	443	192.168.2.16	151.101.129.140
Mar 29, 2024 14:45:02.710154057 CET	443	49865	3.225.95.250	192.168.2.16
Mar 29, 2024 14:45:02.710416079 CET	49865	443	192.168.2.16	3.225.95.250
Mar 29, 2024 14:45:02.710433006 CET	443	49865	3.225.95.250	192.168.2.16
Mar 29, 2024 14:45:02.710988998 CET	443	49861	34.111.113.62	192.168.2.16
Mar 29, 2024 14:45:02.711095095 CET	443	49861	34.111.113.62	192.168.2.16
Mar 29, 2024 14:45:02.711153030 CET	49861	443	192.168.2.16	34.111.113.62
Mar 29, 2024 14:45:02.711525917 CET	49861	443	192.168.2.16	34.111.113.62
Mar 29, 2024 14:45:02.711539984 CET	443	49861	34.111.113.62	192.168.2.16
Mar 29, 2024 14:45:02.711580038 CET	443	49865	3.225.95.250	192.168.2.16
Mar 29, 2024 14:45:02.711642981 CET	49865	443	192.168.2.16	3.225.95.250
Mar 29, 2024 14:45:02.711992979 CET	49865	443	192.168.2.16	3.225.95.250
Mar 29, 2024 14:45:02.712055922 CET	443	49865	3.225.95.250	192.168.2.16
Mar 29, 2024 14:45:02.712145090 CET	49865	443	192.168.2.16	3.225.95.250
Mar 29, 2024 14:45:02.712153912 CET	443	49865	3.225.95.250	192.168.2.16
Mar 29, 2024 14:45:02.714211941 CET	49866	443	192.168.2.16	34.111.113.62
Mar 29, 2024 14:45:02.714234114 CET	443	49866	34.111.113.62	192.168.2.16
Mar 29, 2024 14:45:02.714304924 CET	49866	443	192.168.2.16	34.111.113.62
Mar 29, 2024 14:45:02.714535952 CET	49866	443	192.168.2.16	34.111.113.62
Mar 29, 2024 14:45:02.714544058 CET	443	49866	34.111.113.62	192.168.2.16
Mar 29, 2024 14:45:02.726046085 CET	443	49863	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:02.726125002 CET	443	49863	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:02.726181030 CET	49863	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:02.726774931 CET	49863	443	192.168.2.16	3.208.209.20
Mar 29, 2024 14:45:02.726784945 CET	443	49863	3.208.209.20	192.168.2.16
Mar 29, 2024 14:45:02.729250908 CET	49867	443	192.168.2.16	34.197.113.183
Mar 29, 2024 14:45:02.729275942 CET	443	49867	34.197.113.183	192.168.2.16
Mar 29, 2024 14:45:02.729365110 CET	49867	443	192.168.2.16	34.197.113.183
Mar 29, 2024 14:45:02.729553938 CET	49867	443	192.168.2.16	34.197.113.183
Mar 29, 2024 14:45:02.729568005 CET	443	49867	34.197.113.183	192.168.2.16
Mar 29, 2024 14:45:02.761748075 CET	49865	443	192.168.2.16	3.225.95.250
Mar 29, 2024 14:45:02.789880037 CET	443	49862	172.64.151.101	192.168.2.16
Mar 29, 2024 14:45:02.790000916 CET	443	49862	172.64.151.101	192.168.2.16
Mar 29, 2024 14:45:02.790069103 CET	49862	443	192.168.2.16	172.64.151.101
Mar 29, 2024 14:45:02.790891886 CET	49862	443	192.168.2.16	172.64.151.101
Mar 29, 2024 14:45:02.790910959 CET	443	49862	172.64.151.101	192.168.2.16
Mar 29, 2024 14:45:02.806171894 CET	443	49864	3.225.95.250	192.168.2.16
Mar 29, 2024 14:45:02.806399107 CET	49864	443	192.168.2.16	3.225.95.250
Mar 29, 2024 14:45:02.806432962 CET	443	49864	3.225.95.250	192.168.2.16
Mar 29, 2024 14:45:02.807549953 CET	443	49864	3.225.95.250	192.168.2.16
Mar 29, 2024 14:45:02.807619095 CET	49864	443	192.168.2.16	3.225.95.250
Mar 29, 2024 14:45:02.807881117 CET	49864	443	192.168.2.16	3.225.95.250
Mar 29, 2024 14:45:02.807970047 CET	443	49864	3.225.95.250	192.168.2.16
Mar 29, 2024 14:45:02.807986021 CET	49864	443	192.168.2.16	3.225.95.250
Mar 29, 2024 14:45:02.808782101 CET	443	49865	3.225.95.250	192.168.2.16
Mar 29, 2024 14:45:02.808806896 CET	443	49865	3.225.95.250	192.168.2.16
Mar 29, 2024 14:45:02.808815956 CET	443	49865	3.225.95.250	192.168.2.16
Mar 29, 2024 14:45:02.808845043 CET	443	49865	3.225.95.250	192.168.2.16
Mar 29, 2024 14:45:02.808866978 CET	443	49865	3.225.95.250	192.168.2.16
Mar 29, 2024 14:45:02.808886051 CET	49865	443	192.168.2.16	3.225.95.250
Mar 29, 2024 14:45:02.808940887 CET	49865	443	192.168.2.16	3.225.95.250
Mar 29, 2024 14:45:02.809379101 CET	49865	443	192.168.2.16	3.225.95.250
Mar 29, 2024 14:45:02.809390068 CET	443	49865	3.225.95.250	192.168.2.16
Mar 29, 2024 14:45:02.848239899 CET	443	49864	3.225.95.250	192.168.2.16
Mar 29, 2024 14:45:02.856765985 CET	49864	443	192.168.2.16	3.225.95.250
Mar 29, 2024 14:45:02.856791019 CET	443	49864	3.225.95.250	192.168.2.16
Mar 29, 2024 14:45:02.892010927 CET	49868	443	192.168.2.16	172.64.151.101
Mar 29, 2024 14:45:02.892025948 CET	443	49868	172.64.151.101	192.168.2.16
Mar 29, 2024 14:45:02.892091036 CET	49868	443	192.168.2.16	172.64.151.101
Mar 29, 2024 14:45:02.892299891 CET	49868	443	192.168.2.16	172.64.151.101
Mar 29, 2024 14:45:02.892313004 CET	443	49868	172.64.151.101	192.168.2.16
Mar 29, 2024 14:45:02.897329092 CET	443	49860	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:02.897399902 CET	443	49860	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:02.897449017 CET	49860	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:02.897555113 CET	49860	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:02.897567034 CET	443	49860	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:02.901763916 CET	49864	443	192.168.2.16	3.225.95.250
Mar 29, 2024 14:45:02.906704903 CET	443	49864	3.225.95.250	192.168.2.16
Mar 29, 2024 14:45:02.906768084 CET	443	49864	3.225.95.250	192.168.2.16
Mar 29, 2024 14:45:02.906829119 CET	49864	443	192.168.2.16	3.225.95.250
Mar 29, 2024 14:45:02.907428980 CET	49864	443	192.168.2.16	3.225.95.250
Mar 29, 2024 14:45:02.907454967 CET	443	49864	3.225.95.250	192.168.2.16
Mar 29, 2024 14:45:02.928515911 CET	443	49867	34.197.113.183	192.168.2.16
Mar 29, 2024 14:45:02.928764105 CET	49867	443	192.168.2.16	34.197.113.183
Mar 29, 2024 14:45:02.928775072 CET	443	49867	34.197.113.183	192.168.2.16
Mar 29, 2024 14:45:02.929173946 CET	443	49867	34.197.113.183	192.168.2.16
Mar 29, 2024 14:45:02.929574013 CET	49867	443	192.168.2.16	34.197.113.183
Mar 29, 2024 14:45:02.929641008 CET	443	49867	34.197.113.183	192.168.2.16
Mar 29, 2024 14:45:02.929852962 CET	49867	443	192.168.2.16	34.197.113.183
Mar 29, 2024 14:45:02.972238064 CET	443	49867	34.197.113.183	192.168.2.16
Mar 29, 2024 14:45:03.090188026 CET	443	49868	172.64.151.101	192.168.2.16
Mar 29, 2024 14:45:03.090446949 CET	49868	443	192.168.2.16	172.64.151.101
Mar 29, 2024 14:45:03.090460062 CET	443	49868	172.64.151.101	192.168.2.16
Mar 29, 2024 14:45:03.090761900 CET	49673	443	192.168.2.16	204.79.197.203
Mar 29, 2024 14:45:03.091483116 CET	443	49868	172.64.151.101	192.168.2.16
Mar 29, 2024 14:45:03.091547966 CET	49868	443	192.168.2.16	172.64.151.101
Mar 29, 2024 14:45:03.091938019 CET	49868	443	192.168.2.16	172.64.151.101
Mar 29, 2024 14:45:03.091999054 CET	443	49868	172.64.151.101	192.168.2.16
Mar 29, 2024 14:45:03.092109919 CET	49868	443	192.168.2.16	172.64.151.101
Mar 29, 2024 14:45:03.092117071 CET	443	49868	172.64.151.101	192.168.2.16
Mar 29, 2024 14:45:03.120299101 CET	443	49867	34.197.113.183	192.168.2.16
Mar 29, 2024 14:45:03.120362043 CET	443	49867	34.197.113.183	192.168.2.16
Mar 29, 2024 14:45:03.120420933 CET	49867	443	192.168.2.16	34.197.113.183
Mar 29, 2024 14:45:03.121115923 CET	49867	443	192.168.2.16	34.197.113.183
Mar 29, 2024 14:45:03.121128082 CET	443	49867	34.197.113.183	192.168.2.16
Mar 29, 2024 14:45:03.141221046 CET	49868	443	192.168.2.16	172.64.151.101
Mar 29, 2024 14:45:03.345920086 CET	443	49868	172.64.151.101	192.168.2.16
Mar 29, 2024 14:45:03.345995903 CET	443	49868	172.64.151.101	192.168.2.16
Mar 29, 2024 14:45:03.346049070 CET	49868	443	192.168.2.16	172.64.151.101
Mar 29, 2024 14:45:03.346831083 CET	49868	443	192.168.2.16	172.64.151.101
Mar 29, 2024 14:45:03.346847057 CET	443	49868	172.64.151.101	192.168.2.16
Mar 29, 2024 14:45:03.422408104 CET	443	49866	34.111.113.62	192.168.2.16
Mar 29, 2024 14:45:03.422694921 CET	49866	443	192.168.2.16	34.111.113.62
Mar 29, 2024 14:45:03.422712088 CET	443	49866	34.111.113.62	192.168.2.16
Mar 29, 2024 14:45:03.423059940 CET	443	49866	34.111.113.62	192.168.2.16
Mar 29, 2024 14:45:03.423352957 CET	49866	443	192.168.2.16	34.111.113.62
Mar 29, 2024 14:45:03.423410892 CET	443	49866	34.111.113.62	192.168.2.16
Mar 29, 2024 14:45:03.423546076 CET	49866	443	192.168.2.16	34.111.113.62
Mar 29, 2024 14:45:03.464238882 CET	443	49866	34.111.113.62	192.168.2.16
Mar 29, 2024 14:45:03.660080910 CET	49871	443	192.168.2.16	20.12.23.50
Mar 29, 2024 14:45:03.660116911 CET	443	49871	20.12.23.50	192.168.2.16
Mar 29, 2024 14:45:03.660206079 CET	49871	443	192.168.2.16	20.12.23.50
Mar 29, 2024 14:45:03.662015915 CET	49871	443	192.168.2.16	20.12.23.50
Mar 29, 2024 14:45:03.662028074 CET	443	49871	20.12.23.50	192.168.2.16
Mar 29, 2024 14:45:03.680015087 CET	443	49866	34.111.113.62	192.168.2.16
Mar 29, 2024 14:45:03.680097103 CET	443	49866	34.111.113.62	192.168.2.16
Mar 29, 2024 14:45:03.680152893 CET	49866	443	192.168.2.16	34.111.113.62
Mar 29, 2024 14:45:03.680619001 CET	49866	443	192.168.2.16	34.111.113.62
Mar 29, 2024 14:45:03.680629969 CET	443	49866	34.111.113.62	192.168.2.16
Mar 29, 2024 14:45:03.682761908 CET	49872	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:03.682800055 CET	443	49872	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:03.682883024 CET	49872	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:03.683113098 CET	49872	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:03.683125019 CET	443	49872	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:03.908410072 CET	49873	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:03.908443928 CET	443	49873	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:03.908525944 CET	49873	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:03.908762932 CET	49873	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:03.908776999 CET	443	49873	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:03.924904108 CET	443	49872	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:03.925179005 CET	49872	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:03.925193071 CET	443	49872	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:03.925564051 CET	443	49872	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:03.925935984 CET	49872	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:03.926009893 CET	443	49872	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:03.926126003 CET	49872	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:03.968250990 CET	443	49872	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:03.981781006 CET	443	49871	20.12.23.50	192.168.2.16
Mar 29, 2024 14:45:03.981856108 CET	49871	443	192.168.2.16	20.12.23.50
Mar 29, 2024 14:45:04.006809950 CET	49871	443	192.168.2.16	20.12.23.50
Mar 29, 2024 14:45:04.006825924 CET	443	49871	20.12.23.50	192.168.2.16
Mar 29, 2024 14:45:04.007107019 CET	443	49871	20.12.23.50	192.168.2.16
Mar 29, 2024 14:45:04.050760031 CET	49871	443	192.168.2.16	20.12.23.50
Mar 29, 2024 14:45:04.115216017 CET	49871	443	192.168.2.16	20.12.23.50
Mar 29, 2024 14:45:04.115365028 CET	443	49873	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:04.115650892 CET	49873	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:04.115664005 CET	443	49873	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:04.116019011 CET	443	49873	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:04.116314888 CET	49873	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:04.116374969 CET	443	49873	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:04.116542101 CET	49873	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:04.116569996 CET	443	49873	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:04.160235882 CET	443	49871	20.12.23.50	192.168.2.16
Mar 29, 2024 14:45:04.203032970 CET	443	49872	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:04.203108072 CET	443	49872	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:04.203192949 CET	49872	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:04.237087965 CET	49872	443	192.168.2.16	35.190.43.134
Mar 29, 2024 14:45:04.237128973 CET	443	49872	35.190.43.134	192.168.2.16
Mar 29, 2024 14:45:04.349905968 CET	443	49871	20.12.23.50	192.168.2.16
Mar 29, 2024 14:45:04.349930048 CET	443	49871	20.12.23.50	192.168.2.16
Mar 29, 2024 14:45:04.349936962 CET	443	49871	20.12.23.50	192.168.2.16
Mar 29, 2024 14:45:04.349953890 CET	443	49871	20.12.23.50	192.168.2.16
Mar 29, 2024 14:45:04.349986076 CET	443	49871	20.12.23.50	192.168.2.16
Mar 29, 2024 14:45:04.350016117 CET	49871	443	192.168.2.16	20.12.23.50
Mar 29, 2024 14:45:04.350028038 CET	443	49871	20.12.23.50	192.168.2.16
Mar 29, 2024 14:45:04.350056887 CET	49871	443	192.168.2.16	20.12.23.50
Mar 29, 2024 14:45:04.350059032 CET	443	49871	20.12.23.50	192.168.2.16
Mar 29, 2024 14:45:04.350080013 CET	49871	443	192.168.2.16	20.12.23.50
Mar 29, 2024 14:45:04.350109100 CET	49871	443	192.168.2.16	20.12.23.50
Mar 29, 2024 14:45:04.350116014 CET	443	49871	20.12.23.50	192.168.2.16
Mar 29, 2024 14:45:04.350152016 CET	49871	443	192.168.2.16	20.12.23.50
Mar 29, 2024 14:45:04.361357927 CET	49871	443	192.168.2.16	20.12.23.50
Mar 29, 2024 14:45:04.361382008 CET	443	49871	20.12.23.50	192.168.2.16
Mar 29, 2024 14:45:04.361392975 CET	49871	443	192.168.2.16	20.12.23.50
Mar 29, 2024 14:45:04.361398935 CET	443	49871	20.12.23.50	192.168.2.16
Mar 29, 2024 14:45:04.602699041 CET	443	49873	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:04.602803946 CET	443	49873	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:04.602859020 CET	49873	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:04.602969885 CET	49873	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:04.602988005 CET	443	49873	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:05.493781090 CET	49673	443	192.168.2.16	204.79.197.203
Mar 29, 2024 14:45:05.636543036 CET	49875	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:05.636580944 CET	443	49875	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:05.636655092 CET	49875	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:05.636961937 CET	49875	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:05.636972904 CET	443	49875	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:05.839910030 CET	443	49875	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:05.840214968 CET	49875	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:05.840234995 CET	443	49875	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:05.840567112 CET	443	49875	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:05.840872049 CET	49875	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:05.840931892 CET	443	49875	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:05.841109037 CET	49875	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:05.841130972 CET	443	49875	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:06.324541092 CET	443	49875	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:06.324625015 CET	443	49875	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:06.324697971 CET	49875	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:06.324974060 CET	49875	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:06.324989080 CET	443	49875	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:06.807007074 CET	49876	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:06.807018995 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:06.807110071 CET	49876	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:06.807364941 CET	49877	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:06.807379007 CET	443	49877	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:06.807466030 CET	49877	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:06.807822943 CET	49878	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:06.807852983 CET	443	49878	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:06.807910919 CET	49878	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:06.808151960 CET	49876	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:06.808166027 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:06.808480978 CET	49877	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:06.808491945 CET	443	49877	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:06.808964968 CET	49879	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:06.808993101 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:06.809055090 CET	49879	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:06.809153080 CET	49878	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:06.809168100 CET	443	49878	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:06.809309006 CET	49879	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:06.809324026 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.074338913 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.074596882 CET	49876	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.074639082 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.075510025 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.075848103 CET	49876	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.075925112 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.075989008 CET	49876	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.076284885 CET	443	49877	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.076544046 CET	49877	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.076561928 CET	443	49877	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.077014923 CET	443	49877	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.077259064 CET	443	49878	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.077433109 CET	49877	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.077577114 CET	443	49877	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.077665091 CET	49878	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.077686071 CET	443	49878	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.077830076 CET	49877	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.079581976 CET	443	49878	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.079643011 CET	49878	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.080095053 CET	49878	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.080210924 CET	49878	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.080215931 CET	443	49878	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.080319881 CET	443	49878	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.116238117 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.120240927 CET	443	49877	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.120804071 CET	49878	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.120811939 CET	443	49878	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.168796062 CET	49878	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.253062010 CET	49880	443	192.168.2.16	23.221.242.90
Mar 29, 2024 14:45:07.253087997 CET	443	49880	23.221.242.90	192.168.2.16
Mar 29, 2024 14:45:07.253171921 CET	49880	443	192.168.2.16	23.221.242.90
Mar 29, 2024 14:45:07.258403063 CET	49880	443	192.168.2.16	23.221.242.90
Mar 29, 2024 14:45:07.258413076 CET	443	49880	23.221.242.90	192.168.2.16
Mar 29, 2024 14:45:07.266628981 CET	443	49877	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.266650915 CET	443	49877	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.266752958 CET	49877	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.266762972 CET	443	49877	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.275561094 CET	443	49877	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.275594950 CET	443	49877	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.275631905 CET	49877	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.275640011 CET	443	49877	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.275686979 CET	49877	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.280792952 CET	443	49877	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.280864000 CET	443	49877	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.280864954 CET	49877	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.280911922 CET	49877	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.281101942 CET	49877	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.281111956 CET	443	49877	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.281852007 CET	443	49878	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.283719063 CET	443	49738	142.251.167.103	192.168.2.16
Mar 29, 2024 14:45:07.283773899 CET	443	49738	142.251.167.103	192.168.2.16
Mar 29, 2024 14:45:07.283866882 CET	49738	443	192.168.2.16	142.251.167.103
Mar 29, 2024 14:45:07.284921885 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.297545910 CET	443	49878	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.297554970 CET	443	49878	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.297580004 CET	443	49878	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.297588110 CET	443	49878	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.297594070 CET	443	49878	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.297633886 CET	49878	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.297642946 CET	443	49878	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.297683954 CET	49878	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.297718048 CET	49878	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.329266071 CET	49876	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.342278004 CET	49881	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:07.342304945 CET	443	49881	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:07.342367887 CET	49881	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:07.342636108 CET	49881	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:07.342648983 CET	443	49881	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:07.387455940 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.387470961 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.387511015 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.387543917 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.387545109 CET	49876	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.387561083 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.387573957 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.387592077 CET	49876	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.387598038 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.387624025 CET	49876	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.387653112 CET	49876	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.394608021 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.394623995 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.394686937 CET	49876	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.394695044 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.404683113 CET	443	49878	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.404701948 CET	443	49878	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.404736996 CET	443	49878	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.404767990 CET	49878	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.404791117 CET	443	49878	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.404815912 CET	49878	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.404820919 CET	443	49878	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.404849052 CET	49878	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.404869080 CET	443	49878	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.404882908 CET	49878	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.404886961 CET	443	49878	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.404917002 CET	49878	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.404942036 CET	49878	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.404946089 CET	443	49878	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.404957056 CET	443	49878	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.405013084 CET	49878	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.405981064 CET	49878	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.405989885 CET	443	49878	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.438782930 CET	49876	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.465368032 CET	443	49880	23.221.242.90	192.168.2.16
Mar 29, 2024 14:45:07.465437889 CET	49880	443	192.168.2.16	23.221.242.90
Mar 29, 2024 14:45:07.468377113 CET	49880	443	192.168.2.16	23.221.242.90
Mar 29, 2024 14:45:07.468389034 CET	443	49880	23.221.242.90	192.168.2.16
Mar 29, 2024 14:45:07.468641043 CET	443	49880	23.221.242.90	192.168.2.16
Mar 29, 2024 14:45:07.506906986 CET	49880	443	192.168.2.16	23.221.242.90
Mar 29, 2024 14:45:07.546133995 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.546156883 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.546190977 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.546233892 CET	49876	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.546246052 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.546245098 CET	443	49881	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:07.546309948 CET	49876	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.546500921 CET	49881	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:07.546514034 CET	443	49881	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:07.546865940 CET	443	49881	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:07.547230005 CET	49881	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:07.547292948 CET	443	49881	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:07.547497988 CET	49881	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:07.547522068 CET	443	49881	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:07.552231073 CET	443	49880	23.221.242.90	192.168.2.16
Mar 29, 2024 14:45:07.591531992 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.591552973 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.591604948 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.591628075 CET	49876	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.591636896 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.591648102 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.591670036 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.591675997 CET	49876	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.591682911 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.591718912 CET	49876	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.591742039 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.591770887 CET	49876	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.591774940 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.591792107 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.591799974 CET	49876	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.591845036 CET	49876	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.652812958 CET	443	49880	23.221.242.90	192.168.2.16
Mar 29, 2024 14:45:07.652887106 CET	443	49880	23.221.242.90	192.168.2.16
Mar 29, 2024 14:45:07.652944088 CET	49880	443	192.168.2.16	23.221.242.90
Mar 29, 2024 14:45:07.653043032 CET	49880	443	192.168.2.16	23.221.242.90
Mar 29, 2024 14:45:07.653060913 CET	443	49880	23.221.242.90	192.168.2.16
Mar 29, 2024 14:45:07.653073072 CET	49880	443	192.168.2.16	23.221.242.90
Mar 29, 2024 14:45:07.653078079 CET	443	49880	23.221.242.90	192.168.2.16
Mar 29, 2024 14:45:07.683680058 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.683702946 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.683808088 CET	49876	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.683818102 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.683873892 CET	49876	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.694408894 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.694426060 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.694511890 CET	49876	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.694519997 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.694567919 CET	49876	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.699978113 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.700051069 CET	49876	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.700057983 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.700068951 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.700139046 CET	49876	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.700525045 CET	49876	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:07.700532913 CET	443	49876	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:07.797436953 CET	49882	443	192.168.2.16	23.221.242.90
Mar 29, 2024 14:45:07.797457933 CET	443	49882	23.221.242.90	192.168.2.16
Mar 29, 2024 14:45:07.797537088 CET	49882	443	192.168.2.16	23.221.242.90
Mar 29, 2024 14:45:07.797949076 CET	49882	443	192.168.2.16	23.221.242.90
Mar 29, 2024 14:45:07.797962904 CET	443	49882	23.221.242.90	192.168.2.16
Mar 29, 2024 14:45:07.996479034 CET	443	49882	23.221.242.90	192.168.2.16
Mar 29, 2024 14:45:07.996568918 CET	49882	443	192.168.2.16	23.221.242.90
Mar 29, 2024 14:45:07.998119116 CET	49882	443	192.168.2.16	23.221.242.90
Mar 29, 2024 14:45:07.998125076 CET	443	49882	23.221.242.90	192.168.2.16
Mar 29, 2024 14:45:07.998384953 CET	443	49882	23.221.242.90	192.168.2.16
Mar 29, 2024 14:45:08.000201941 CET	49882	443	192.168.2.16	23.221.242.90
Mar 29, 2024 14:45:08.041724920 CET	443	49881	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:08.041796923 CET	443	49881	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:08.041855097 CET	49881	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:08.041974068 CET	49881	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:08.041996002 CET	443	49881	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:08.044229984 CET	443	49882	23.221.242.90	192.168.2.16
Mar 29, 2024 14:45:08.154210091 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.154490948 CET	49879	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:08.154504061 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.155560970 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.155623913 CET	49879	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:08.155975103 CET	49879	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:08.156032085 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.156068087 CET	49879	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:08.191095114 CET	443	49882	23.221.242.90	192.168.2.16
Mar 29, 2024 14:45:08.191162109 CET	443	49882	23.221.242.90	192.168.2.16
Mar 29, 2024 14:45:08.191220999 CET	49882	443	192.168.2.16	23.221.242.90
Mar 29, 2024 14:45:08.192290068 CET	49882	443	192.168.2.16	23.221.242.90
Mar 29, 2024 14:45:08.192297935 CET	443	49882	23.221.242.90	192.168.2.16
Mar 29, 2024 14:45:08.192316055 CET	49882	443	192.168.2.16	23.221.242.90
Mar 29, 2024 14:45:08.192322016 CET	443	49882	23.221.242.90	192.168.2.16
Mar 29, 2024 14:45:08.200237036 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.202821016 CET	49879	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:08.202827930 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.250794888 CET	49879	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:08.301018953 CET	49738	443	192.168.2.16	142.251.167.103
Mar 29, 2024 14:45:08.301028967 CET	443	49738	142.251.167.103	192.168.2.16
Mar 29, 2024 14:45:08.473823071 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.522789001 CET	49879	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:08.570019007 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.570029020 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.570055008 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.570069075 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.570080996 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.570089102 CET	49879	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:08.570097923 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.570147038 CET	49879	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:08.570247889 CET	49879	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:08.624171972 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.624181032 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.624212027 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.624238014 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.624250889 CET	49879	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:08.624259949 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.624296904 CET	49879	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:08.624372959 CET	49879	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:08.704081059 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.704090118 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.704130888 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.704142094 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.704194069 CET	49879	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:08.704201937 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.704240084 CET	49879	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:08.746196032 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.746217966 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.746295929 CET	49879	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:08.746295929 CET	49879	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:08.746304035 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.783158064 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.783170938 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.783261061 CET	49879	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:08.783261061 CET	49879	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:08.783269882 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.812036037 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.812060118 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.812108040 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.812144041 CET	49879	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:08.812144041 CET	49879	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:08.812153101 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.812184095 CET	49879	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:08.816068888 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.816209078 CET	49879	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:08.816214085 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.837271929 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.837286949 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.837308884 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.837378979 CET	49879	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:08.837378979 CET	49879	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:08.837388039 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.847973108 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.848112106 CET	49879	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:08.848119974 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.848243952 CET	49879	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:08.862699032 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.862745047 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.862771988 CET	49879	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:08.862777948 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.862787008 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.862814903 CET	49879	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:08.862863064 CET	49879	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:08.863110065 CET	49879	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:08.863121033 CET	443	49879	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.991137028 CET	49883	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:08.991183043 CET	443	49883	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:08.991391897 CET	49883	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:08.991802931 CET	49883	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:08.991817951 CET	443	49883	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:09.066406965 CET	49884	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:09.066433907 CET	443	49884	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:09.066629887 CET	49884	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:09.066720963 CET	49884	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:09.066730022 CET	443	49884	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:09.132251024 CET	49678	443	192.168.2.16	20.189.173.10
Mar 29, 2024 14:45:09.194103003 CET	443	49883	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:09.194463968 CET	49883	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:09.194477081 CET	443	49883	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:09.194827080 CET	443	49883	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:09.195225954 CET	49883	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:09.195297956 CET	443	49883	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:09.195389986 CET	49883	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:09.240238905 CET	443	49883	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:09.267746925 CET	443	49884	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:09.268130064 CET	49884	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:09.268145084 CET	443	49884	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:09.268531084 CET	443	49884	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:09.268975973 CET	49884	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:09.269042015 CET	443	49884	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:09.269088030 CET	49884	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:09.269115925 CET	443	49884	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:09.319787025 CET	49884	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:09.422966957 CET	443	49883	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:09.422981977 CET	443	49883	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:09.423043013 CET	443	49883	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:09.423048973 CET	49883	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:09.423268080 CET	49883	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:09.424035072 CET	49883	443	192.168.2.16	18.154.227.129
Mar 29, 2024 14:45:09.424051046 CET	443	49883	18.154.227.129	192.168.2.16
Mar 29, 2024 14:45:09.431844950 CET	49678	443	192.168.2.16	20.189.173.10
Mar 29, 2024 14:45:09.934278011 CET	443	49884	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:09.934353113 CET	443	49884	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:09.934446096 CET	49884	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:09.937793016 CET	49884	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:09.937810898 CET	443	49884	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:10.036786079 CET	49678	443	192.168.2.16	20.189.173.10
Mar 29, 2024 14:45:10.307785988 CET	49673	443	192.168.2.16	204.79.197.203
Mar 29, 2024 14:45:10.959501982 CET	49885	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:10.959531069 CET	443	49885	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:10.959625006 CET	49885	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:10.959882021 CET	49885	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:10.959892988 CET	443	49885	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:11.159951925 CET	443	49885	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:11.160235882 CET	49885	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:11.160252094 CET	443	49885	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:11.160599947 CET	443	49885	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:11.160967112 CET	49885	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:11.161043882 CET	443	49885	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:11.161298037 CET	49885	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:11.161326885 CET	443	49885	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:11.246840000 CET	49678	443	192.168.2.16	20.189.173.10
Mar 29, 2024 14:45:11.665452957 CET	443	49885	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:11.665524960 CET	443	49885	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:11.665596008 CET	49885	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:11.665818930 CET	49885	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:11.665833950 CET	443	49885	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:12.708445072 CET	49886	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:12.708476067 CET	443	49886	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:12.708549023 CET	49886	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:12.708784103 CET	49886	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:12.708796978 CET	443	49886	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:12.910948992 CET	443	49886	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:12.911308050 CET	49886	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:12.911318064 CET	443	49886	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:12.911648989 CET	443	49886	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:12.911961079 CET	49886	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:12.912012100 CET	443	49886	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:12.912223101 CET	49886	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:12.912245035 CET	443	49886	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:13.413913012 CET	443	49886	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:13.413990021 CET	443	49886	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:13.414061069 CET	49886	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:13.414194107 CET	49886	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:13.414206982 CET	443	49886	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:13.614049911 CET	49680	80	192.168.2.16	192.229.211.108
Mar 29, 2024 14:45:13.661828995 CET	49678	443	192.168.2.16	20.189.173.10
Mar 29, 2024 14:45:13.917825937 CET	49680	80	192.168.2.16	192.229.211.108
Mar 29, 2024 14:45:14.509428024 CET	49887	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:14.509471893 CET	443	49887	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:14.509561062 CET	49887	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:14.509850979 CET	49887	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:14.509865046 CET	443	49887	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:14.524808884 CET	49680	80	192.168.2.16	192.229.211.108
Mar 29, 2024 14:45:14.721474886 CET	443	49887	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:14.721807003 CET	49887	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:14.721824884 CET	443	49887	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:14.722189903 CET	443	49887	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:14.722565889 CET	49887	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:14.722635984 CET	443	49887	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:14.722795963 CET	49887	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:14.722829103 CET	443	49887	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:15.292334080 CET	443	49887	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:15.292435884 CET	443	49887	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:15.292505026 CET	49887	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:15.292588949 CET	49887	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:15.292604923 CET	443	49887	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:15.736792088 CET	49680	80	192.168.2.16	192.229.211.108
Mar 29, 2024 14:45:16.504511118 CET	49888	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:16.504549026 CET	443	49888	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:16.504626036 CET	49888	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:16.504914045 CET	49888	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:16.504931927 CET	443	49888	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:16.705843925 CET	443	49888	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:16.706140995 CET	49888	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:16.706162930 CET	443	49888	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:16.706518888 CET	443	49888	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:16.706819057 CET	49888	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:16.706881046 CET	443	49888	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:16.707030058 CET	49888	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:16.707056046 CET	443	49888	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:17.188149929 CET	443	49888	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:17.188232899 CET	443	49888	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:17.188306093 CET	49888	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:17.188414097 CET	49888	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:17.188429117 CET	443	49888	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:18.149843931 CET	49680	80	192.168.2.16	192.229.211.108
Mar 29, 2024 14:45:18.466816902 CET	49678	443	192.168.2.16	20.189.173.10
Mar 29, 2024 14:45:18.722436905 CET	49889	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:18.722477913 CET	443	49889	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:18.722558975 CET	49889	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:18.722848892 CET	49889	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:18.722860098 CET	443	49889	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:18.923300982 CET	443	49889	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:18.923602104 CET	49889	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:18.923613071 CET	443	49889	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:18.923971891 CET	443	49889	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:18.924266100 CET	49889	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:18.924324036 CET	443	49889	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:18.924477100 CET	49889	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:18.924529076 CET	443	49889	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:19.430906057 CET	443	49889	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:19.430998087 CET	443	49889	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:19.431046963 CET	49889	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:19.431149006 CET	49889	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:19.431165934 CET	443	49889	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:19.918853045 CET	49673	443	192.168.2.16	204.79.197.203
Mar 29, 2024 14:45:20.973963022 CET	49890	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:20.973993063 CET	443	49890	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:20.974086046 CET	49890	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:20.974318027 CET	49890	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:20.974329948 CET	443	49890	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:21.298536062 CET	443	49890	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:21.298824072 CET	49890	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:21.298839092 CET	443	49890	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:21.299196959 CET	443	49890	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:21.299495935 CET	49890	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:21.299556971 CET	443	49890	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:21.299695015 CET	49890	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:21.299721003 CET	443	49890	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:21.809628963 CET	443	49890	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:21.809699059 CET	443	49890	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:21.809746981 CET	49890	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:21.809866905 CET	49890	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:21.809884071 CET	443	49890	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:22.960814953 CET	49680	80	192.168.2.16	192.229.211.108
Mar 29, 2024 14:45:24.010579109 CET	49891	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:24.010618925 CET	443	49891	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:24.010727882 CET	49891	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:24.010977030 CET	49891	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:24.010989904 CET	443	49891	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:24.210633993 CET	443	49891	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:24.210989952 CET	49891	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:24.211007118 CET	443	49891	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:24.211359978 CET	443	49891	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:24.211662054 CET	49891	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:24.211747885 CET	443	49891	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:24.211884975 CET	49891	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:24.211910009 CET	443	49891	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:24.712480068 CET	443	49891	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:24.712553024 CET	443	49891	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:24.712601900 CET	49891	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:24.712716103 CET	49891	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:24.712728024 CET	443	49891	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:27.474561930 CET	49892	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:27.474596977 CET	443	49892	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:27.474684954 CET	49892	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:27.474951029 CET	49892	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:27.474967957 CET	443	49892	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:27.677712917 CET	443	49892	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:27.678040028 CET	49892	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:27.678061008 CET	443	49892	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:27.678421021 CET	443	49892	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:27.678714991 CET	49892	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:27.678781033 CET	443	49892	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:27.678905010 CET	49892	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:27.678930044 CET	443	49892	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:28.081859112 CET	49678	443	192.168.2.16	20.189.173.10
Mar 29, 2024 14:45:28.187808990 CET	443	49892	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:28.187890053 CET	443	49892	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:28.187964916 CET	49892	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:28.188075066 CET	49892	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:28.188086987 CET	443	49892	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:29.997733116 CET	49893	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:29.997771025 CET	443	49893	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:29.997860909 CET	49893	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:29.998074055 CET	49893	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:29.998086929 CET	443	49893	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:30.198935986 CET	443	49893	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:30.199219942 CET	49893	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:30.199243069 CET	443	49893	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:30.200392008 CET	443	49893	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:30.200480938 CET	49893	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:30.200763941 CET	49893	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:30.200825930 CET	443	49893	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:30.200905085 CET	49893	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:30.200911999 CET	443	49893	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:30.200934887 CET	49893	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:30.200942993 CET	443	49893	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:30.248862028 CET	49893	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:30.426578999 CET	443	49893	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:30.426707983 CET	443	49893	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:30.426763058 CET	49893	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:30.427640915 CET	49893	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:30.427654982 CET	443	49893	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:30.430133104 CET	49894	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:30.430175066 CET	443	49894	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:30.430270910 CET	49894	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:30.430483103 CET	49894	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:30.430495977 CET	443	49894	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:30.628819942 CET	443	49894	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:30.629118919 CET	49894	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:30.629143953 CET	443	49894	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:30.629494905 CET	443	49894	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:30.629791975 CET	49894	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:30.629868984 CET	443	49894	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:30.630017042 CET	49894	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:30.676234007 CET	443	49894	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:30.842564106 CET	443	49894	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:30.842647076 CET	443	49894	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:30.842679977 CET	49894	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:30.842717886 CET	49894	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:30.843868017 CET	49894	443	192.168.2.16	3.225.23.81
Mar 29, 2024 14:45:30.843883991 CET	443	49894	3.225.23.81	192.168.2.16
Mar 29, 2024 14:45:32.157896996 CET	49895	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:32.157933950 CET	443	49895	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:32.158020973 CET	49895	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:32.158251047 CET	49895	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:32.158265114 CET	443	49895	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:32.359741926 CET	443	49895	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:32.360044003 CET	49895	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:32.360057116 CET	443	49895	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:32.360416889 CET	443	49895	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:32.360721111 CET	49895	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:32.360788107 CET	443	49895	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:32.360925913 CET	49895	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:32.360955954 CET	443	49895	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:32.569866896 CET	49680	80	192.168.2.16	192.229.211.108
Mar 29, 2024 14:45:32.848270893 CET	443	49895	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:32.888875008 CET	49895	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:32.888895988 CET	443	49895	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:32.889117002 CET	49895	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:32.889178991 CET	443	49895	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:32.889236927 CET	49895	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:36.616544962 CET	49896	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:36.616569042 CET	443	49896	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:36.616648912 CET	49896	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:36.616883993 CET	49896	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:36.616893053 CET	443	49896	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:36.822911978 CET	443	49896	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:36.823313951 CET	49896	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:36.823332071 CET	443	49896	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:36.824398041 CET	443	49896	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:36.824464083 CET	49896	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:36.824805975 CET	49896	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:36.824867010 CET	443	49896	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:36.826128960 CET	49896	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:36.826136112 CET	443	49896	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:36.871882915 CET	49896	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:37.324688911 CET	443	49896	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:37.324764013 CET	443	49896	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:37.324920893 CET	49896	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:37.325025082 CET	49896	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:37.325035095 CET	443	49896	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:40.737035036 CET	49897	443	192.168.2.16	20.12.23.50
Mar 29, 2024 14:45:40.737076044 CET	443	49897	20.12.23.50	192.168.2.16
Mar 29, 2024 14:45:40.737164021 CET	49897	443	192.168.2.16	20.12.23.50
Mar 29, 2024 14:45:40.737672091 CET	49897	443	192.168.2.16	20.12.23.50
Mar 29, 2024 14:45:40.737688065 CET	443	49897	20.12.23.50	192.168.2.16
Mar 29, 2024 14:45:40.874253035 CET	49696	80	192.168.2.16	23.207.202.47
Mar 29, 2024 14:45:40.971743107 CET	80	49696	23.207.202.47	192.168.2.16
Mar 29, 2024 14:45:40.971817017 CET	49696	80	192.168.2.16	23.207.202.47
Mar 29, 2024 14:45:41.051019907 CET	443	49897	20.12.23.50	192.168.2.16
Mar 29, 2024 14:45:41.051127911 CET	49897	443	192.168.2.16	20.12.23.50
Mar 29, 2024 14:45:41.052927971 CET	49897	443	192.168.2.16	20.12.23.50
Mar 29, 2024 14:45:41.052939892 CET	443	49897	20.12.23.50	192.168.2.16
Mar 29, 2024 14:45:41.053181887 CET	443	49897	20.12.23.50	192.168.2.16
Mar 29, 2024 14:45:41.054692030 CET	49897	443	192.168.2.16	20.12.23.50
Mar 29, 2024 14:45:41.096237898 CET	443	49897	20.12.23.50	192.168.2.16
Mar 29, 2024 14:45:41.352052927 CET	443	49897	20.12.23.50	192.168.2.16
Mar 29, 2024 14:45:41.352077961 CET	443	49897	20.12.23.50	192.168.2.16
Mar 29, 2024 14:45:41.352092981 CET	443	49897	20.12.23.50	192.168.2.16
Mar 29, 2024 14:45:41.352144957 CET	49897	443	192.168.2.16	20.12.23.50
Mar 29, 2024 14:45:41.352161884 CET	443	49897	20.12.23.50	192.168.2.16
Mar 29, 2024 14:45:41.352176905 CET	443	49897	20.12.23.50	192.168.2.16
Mar 29, 2024 14:45:41.352194071 CET	49897	443	192.168.2.16	20.12.23.50
Mar 29, 2024 14:45:41.352202892 CET	443	49897	20.12.23.50	192.168.2.16
Mar 29, 2024 14:45:41.352214098 CET	49897	443	192.168.2.16	20.12.23.50
Mar 29, 2024 14:45:41.352225065 CET	443	49897	20.12.23.50	192.168.2.16
Mar 29, 2024 14:45:41.352237940 CET	49897	443	192.168.2.16	20.12.23.50
Mar 29, 2024 14:45:41.352256060 CET	443	49897	20.12.23.50	192.168.2.16
Mar 29, 2024 14:45:41.352267981 CET	49897	443	192.168.2.16	20.12.23.50
Mar 29, 2024 14:45:41.352293015 CET	49897	443	192.168.2.16	20.12.23.50
Mar 29, 2024 14:45:41.355413914 CET	49897	443	192.168.2.16	20.12.23.50
Mar 29, 2024 14:45:41.355422974 CET	443	49897	20.12.23.50	192.168.2.16
Mar 29, 2024 14:45:41.355434895 CET	49897	443	192.168.2.16	20.12.23.50
Mar 29, 2024 14:45:41.355439901 CET	443	49897	20.12.23.50	192.168.2.16
Mar 29, 2024 14:45:41.386748075 CET	49898	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:41.386775017 CET	443	49898	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:41.386863947 CET	49898	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:41.387082100 CET	49898	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:41.387094975 CET	443	49898	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:41.588896036 CET	443	49898	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:41.589153051 CET	49898	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:41.589167118 CET	443	49898	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:41.589551926 CET	443	49898	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:41.589842081 CET	49898	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:41.589922905 CET	443	49898	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:41.590024948 CET	49898	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:41.590049028 CET	443	49898	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:42.074493885 CET	443	49898	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:42.074557066 CET	443	49898	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:42.074606895 CET	49898	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:42.074722052 CET	49898	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:42.074729919 CET	443	49898	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:46.200074911 CET	49838	443	192.168.2.16	35.174.127.31
Mar 29, 2024 14:45:46.200088978 CET	443	49838	35.174.127.31	192.168.2.16
Mar 29, 2024 14:45:47.010904074 CET	49899	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:47.010946989 CET	443	49899	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:47.011043072 CET	49899	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:47.011368036 CET	49899	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:47.011382103 CET	443	49899	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:47.211636066 CET	443	49899	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:47.211956024 CET	49899	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:47.211968899 CET	443	49899	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:47.212369919 CET	443	49899	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:47.212660074 CET	49899	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:47.212716103 CET	443	49899	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:47.212863922 CET	49899	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:47.212888956 CET	443	49899	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:47.728861094 CET	443	49899	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:47.728956938 CET	443	49899	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:47.729020119 CET	49899	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:47.729137897 CET	49899	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:47.729152918 CET	443	49899	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:50.729083061 CET	49900	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:50.729113102 CET	443	49900	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:50.729217052 CET	49900	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:50.729439020 CET	49900	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:50.729454994 CET	443	49900	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:50.933567047 CET	443	49900	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:50.933974981 CET	49900	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:50.933990955 CET	443	49900	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:50.934335947 CET	443	49900	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:50.934623957 CET	49900	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:50.934684992 CET	443	49900	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:50.934860945 CET	49900	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:50.934885979 CET	443	49900	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:51.428822994 CET	443	49900	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:51.477948904 CET	49900	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:51.477963924 CET	443	49900	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:51.478142023 CET	49900	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:51.478189945 CET	443	49900	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:51.478259087 CET	49900	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:56.670794010 CET	49902	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:56.670819044 CET	443	49902	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:56.670917988 CET	49902	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:56.671199083 CET	49902	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:56.671212912 CET	443	49902	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:56.872351885 CET	443	49902	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:56.872694016 CET	49902	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:56.872705936 CET	443	49902	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:56.873680115 CET	443	49902	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:56.873755932 CET	49902	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:56.874036074 CET	49902	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:56.874097109 CET	443	49902	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:56.874255896 CET	49902	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:56.874264002 CET	443	49902	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:56.922934055 CET	49902	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:56.939897060 CET	49903	443	192.168.2.16	142.251.167.103
Mar 29, 2024 14:45:56.939913988 CET	443	49903	142.251.167.103	192.168.2.16
Mar 29, 2024 14:45:56.939973116 CET	49903	443	192.168.2.16	142.251.167.103
Mar 29, 2024 14:45:56.940192938 CET	49903	443	192.168.2.16	142.251.167.103
Mar 29, 2024 14:45:56.940201998 CET	443	49903	142.251.167.103	192.168.2.16
Mar 29, 2024 14:45:57.207191944 CET	443	49903	142.251.167.103	192.168.2.16
Mar 29, 2024 14:45:57.207530975 CET	49903	443	192.168.2.16	142.251.167.103
Mar 29, 2024 14:45:57.207546949 CET	443	49903	142.251.167.103	192.168.2.16
Mar 29, 2024 14:45:57.207870960 CET	443	49903	142.251.167.103	192.168.2.16
Mar 29, 2024 14:45:57.208185911 CET	49903	443	192.168.2.16	142.251.167.103
Mar 29, 2024 14:45:57.208247900 CET	443	49903	142.251.167.103	192.168.2.16
Mar 29, 2024 14:45:57.255924940 CET	49903	443	192.168.2.16	142.251.167.103
Mar 29, 2024 14:45:57.402765036 CET	443	49902	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:57.402842045 CET	443	49902	104.20.0.37	192.168.2.16
Mar 29, 2024 14:45:57.402904034 CET	49902	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:57.403012991 CET	49902	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:45:57.403026104 CET	443	49902	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:01.651160002 CET	49904	443	192.168.2.16	34.237.73.95
Mar 29, 2024 14:46:01.651195049 CET	443	49904	34.237.73.95	192.168.2.16
Mar 29, 2024 14:46:01.651281118 CET	49904	443	192.168.2.16	34.237.73.95
Mar 29, 2024 14:46:01.651524067 CET	49904	443	192.168.2.16	34.237.73.95
Mar 29, 2024 14:46:01.651540041 CET	443	49904	34.237.73.95	192.168.2.16
Mar 29, 2024 14:46:01.788825035 CET	49905	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:01.788865089 CET	443	49905	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:01.788961887 CET	49905	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:01.789241076 CET	49905	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:01.789261103 CET	443	49905	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:01.946841002 CET	443	49904	34.237.73.95	192.168.2.16
Mar 29, 2024 14:46:01.947165966 CET	49904	443	192.168.2.16	34.237.73.95
Mar 29, 2024 14:46:01.947175026 CET	443	49904	34.237.73.95	192.168.2.16
Mar 29, 2024 14:46:01.947634935 CET	443	49904	34.237.73.95	192.168.2.16
Mar 29, 2024 14:46:01.947962999 CET	49904	443	192.168.2.16	34.237.73.95
Mar 29, 2024 14:46:01.948088884 CET	443	49904	34.237.73.95	192.168.2.16
Mar 29, 2024 14:46:01.948173046 CET	49904	443	192.168.2.16	34.237.73.95
Mar 29, 2024 14:46:01.989698887 CET	443	49905	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:01.990081072 CET	49905	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:01.990099907 CET	443	49905	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:01.990463018 CET	443	49905	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:01.990787983 CET	49905	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:01.990854025 CET	443	49905	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:01.991050959 CET	49905	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:01.991085052 CET	443	49905	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:01.992228985 CET	443	49904	34.237.73.95	192.168.2.16
Mar 29, 2024 14:46:02.484055042 CET	443	49905	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:02.484124899 CET	443	49905	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:02.484179974 CET	49905	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:02.484397888 CET	49905	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:02.484416008 CET	443	49905	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:07.222081900 CET	443	49903	142.251.167.103	192.168.2.16
Mar 29, 2024 14:46:07.222151041 CET	443	49903	142.251.167.103	192.168.2.16
Mar 29, 2024 14:46:07.222223997 CET	49903	443	192.168.2.16	142.251.167.103
Mar 29, 2024 14:46:07.508776903 CET	49906	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:07.508819103 CET	443	49906	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:07.508910894 CET	49906	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:07.509131908 CET	49906	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:07.509145021 CET	443	49906	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:07.712790966 CET	443	49906	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:07.713198900 CET	49906	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:07.713211060 CET	443	49906	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:07.713506937 CET	443	49906	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:07.713795900 CET	49906	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:07.713851929 CET	443	49906	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:07.713999987 CET	49906	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:07.714029074 CET	443	49906	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:08.202158928 CET	443	49906	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:08.202218056 CET	443	49906	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:08.202382088 CET	49906	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:08.202452898 CET	49906	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:08.202469110 CET	443	49906	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:08.304248095 CET	49903	443	192.168.2.16	142.251.167.103
Mar 29, 2024 14:46:08.304261923 CET	443	49903	142.251.167.103	192.168.2.16
Mar 29, 2024 14:46:14.123631001 CET	49907	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:14.123650074 CET	443	49907	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:14.123744011 CET	49907	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:14.123977900 CET	49907	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:14.123986006 CET	443	49907	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:14.449702978 CET	443	49907	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:14.449968100 CET	49907	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:14.449980974 CET	443	49907	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:14.450325966 CET	443	49907	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:14.450624943 CET	49907	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:14.450686932 CET	443	49907	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:14.450818062 CET	49907	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:14.450846910 CET	443	49907	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:14.939646006 CET	443	49907	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:14.939785957 CET	443	49907	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:14.939847946 CET	49907	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:14.939888954 CET	49907	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:14.939905882 CET	443	49907	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:17.299690962 CET	49908	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:17.299720049 CET	443	49908	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:17.299796104 CET	49908	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:17.300101042 CET	49908	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:17.300117016 CET	443	49908	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:17.501019001 CET	443	49908	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:17.501344919 CET	49908	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:17.501362085 CET	443	49908	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:17.501665115 CET	443	49908	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:17.501954079 CET	49908	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:17.502010107 CET	443	49908	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:17.502171993 CET	49908	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:17.502196074 CET	443	49908	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:17.990375996 CET	443	49908	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:17.990451097 CET	443	49908	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:17.990518093 CET	49908	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:17.990700006 CET	49908	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:17.990712881 CET	443	49908	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:23.813903093 CET	49910	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:23.813931942 CET	443	49910	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:23.814042091 CET	49910	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:23.814290047 CET	49910	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:23.814304113 CET	443	49910	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:24.013360023 CET	443	49910	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:24.013701916 CET	49910	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:24.013716936 CET	443	49910	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:24.014056921 CET	443	49910	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:24.014367104 CET	49910	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:24.014434099 CET	443	49910	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:24.014627934 CET	49910	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:24.014652014 CET	443	49910	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:24.326103926 CET	443	49910	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:24.373035908 CET	49910	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:24.373043060 CET	443	49910	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:24.373218060 CET	49910	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:24.373261929 CET	443	49910	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:24.373326063 CET	49910	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:27.036777020 CET	49911	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:27.036798954 CET	443	49911	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:27.036920071 CET	49911	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:27.037168980 CET	49911	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:27.037178993 CET	443	49911	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:27.241555929 CET	443	49911	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:27.241862059 CET	49911	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:27.241874933 CET	443	49911	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:27.242938995 CET	443	49911	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:27.243048906 CET	49911	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:27.243335009 CET	49911	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:27.243382931 CET	443	49911	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:27.243581057 CET	49911	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:27.243587971 CET	443	49911	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:27.292016983 CET	49911	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:27.751503944 CET	443	49911	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:27.751581907 CET	443	49911	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:27.751727104 CET	49911	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:27.751774073 CET	49911	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:27.751785994 CET	443	49911	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:28.459386110 CET	49904	443	192.168.2.16	34.237.73.95
Mar 29, 2024 14:46:28.459521055 CET	443	49904	34.237.73.95	192.168.2.16
Mar 29, 2024 14:46:28.459614038 CET	49904	443	192.168.2.16	34.237.73.95
Mar 29, 2024 14:46:30.530764103 CET	49912	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:30.530796051 CET	443	49912	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:30.530879021 CET	49912	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:30.531146049 CET	49912	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:30.531157970 CET	443	49912	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:30.735754013 CET	443	49912	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:30.736092091 CET	49912	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:30.736113071 CET	443	49912	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:30.736454010 CET	443	49912	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:30.736764908 CET	49912	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:30.736821890 CET	443	49912	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:30.736988068 CET	49912	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:30.737014055 CET	443	49912	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:31.201070070 CET	49838	443	192.168.2.16	35.174.127.31
Mar 29, 2024 14:46:31.201091051 CET	443	49838	35.174.127.31	192.168.2.16
Mar 29, 2024 14:46:31.234950066 CET	443	49912	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:31.235023975 CET	443	49912	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:31.235193014 CET	49912	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:31.235291958 CET	49912	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:31.235315084 CET	443	49912	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:32.095272064 CET	49698	80	192.168.2.16	192.229.211.108
Mar 29, 2024 14:46:32.191334009 CET	80	49698	192.229.211.108	192.168.2.16
Mar 29, 2024 14:46:32.191407919 CET	49698	80	192.168.2.16	192.229.211.108
Mar 29, 2024 14:46:37.006247997 CET	49913	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:37.006289005 CET	443	49913	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:37.006396055 CET	49913	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:37.007162094 CET	49913	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:37.007174969 CET	443	49913	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:37.207998037 CET	443	49913	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:37.208309889 CET	49913	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:37.208323002 CET	443	49913	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:37.208653927 CET	443	49913	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:37.208960056 CET	49913	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:37.209017038 CET	443	49913	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:37.209161043 CET	49913	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:37.209189892 CET	443	49913	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:37.696562052 CET	443	49913	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:37.696638107 CET	443	49913	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:37.696748972 CET	49913	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:37.696862936 CET	49913	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:37.696880102 CET	443	49913	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:40.253846884 CET	49914	443	192.168.2.16	34.237.73.95
Mar 29, 2024 14:46:40.253881931 CET	443	49914	34.237.73.95	192.168.2.16
Mar 29, 2024 14:46:40.254064083 CET	49914	443	192.168.2.16	34.237.73.95
Mar 29, 2024 14:46:40.254384995 CET	49914	443	192.168.2.16	34.237.73.95
Mar 29, 2024 14:46:40.254400015 CET	443	49914	34.237.73.95	192.168.2.16
Mar 29, 2024 14:46:40.548765898 CET	443	49914	34.237.73.95	192.168.2.16
Mar 29, 2024 14:46:40.549212933 CET	49914	443	192.168.2.16	34.237.73.95
Mar 29, 2024 14:46:40.549226999 CET	443	49914	34.237.73.95	192.168.2.16
Mar 29, 2024 14:46:40.550278902 CET	443	49914	34.237.73.95	192.168.2.16
Mar 29, 2024 14:46:40.550390005 CET	49914	443	192.168.2.16	34.237.73.95
Mar 29, 2024 14:46:40.550805092 CET	49914	443	192.168.2.16	34.237.73.95
Mar 29, 2024 14:46:40.550865889 CET	443	49914	34.237.73.95	192.168.2.16
Mar 29, 2024 14:46:40.551076889 CET	49914	443	192.168.2.16	34.237.73.95
Mar 29, 2024 14:46:40.551084995 CET	443	49914	34.237.73.95	192.168.2.16
Mar 29, 2024 14:46:40.604130030 CET	49914	443	192.168.2.16	34.237.73.95
Mar 29, 2024 14:46:42.010951996 CET	49915	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:42.010994911 CET	443	49915	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:42.011069059 CET	49915	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:42.011310101 CET	49915	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:42.011320114 CET	443	49915	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:42.214131117 CET	443	49915	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:42.214402914 CET	49915	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:42.214422941 CET	443	49915	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:42.214728117 CET	443	49915	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:42.215008020 CET	49915	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:42.215076923 CET	443	49915	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:42.215229988 CET	49915	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:42.215256929 CET	443	49915	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:42.740552902 CET	443	49915	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:42.740706921 CET	443	49915	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:42.740799904 CET	49915	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:42.740953922 CET	49915	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:42.740976095 CET	443	49915	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:47.214797974 CET	49916	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:47.214838982 CET	443	49916	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:47.214951992 CET	49916	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:47.215168953 CET	49916	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:47.215183020 CET	443	49916	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:47.420209885 CET	443	49916	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:47.420581102 CET	49916	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:47.420609951 CET	443	49916	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:47.420914888 CET	443	49916	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:47.421367884 CET	49916	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:47.421418905 CET	443	49916	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:47.421605110 CET	49916	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:47.421629906 CET	443	49916	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:47.928292036 CET	443	49916	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:47.928381920 CET	443	49916	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:47.928467035 CET	49916	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:47.928697109 CET	49916	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:47.928714037 CET	443	49916	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:50.841819048 CET	49917	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:50.841850042 CET	443	49917	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:50.842011929 CET	49917	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:50.842390060 CET	49917	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:50.842403889 CET	443	49917	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:51.043437004 CET	443	49917	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:51.043946981 CET	49917	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:51.043961048 CET	443	49917	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:51.044331074 CET	443	49917	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:51.044929028 CET	49917	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:51.044991970 CET	443	49917	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:51.045176983 CET	49917	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:51.045206070 CET	443	49917	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:51.097146988 CET	49917	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:51.354147911 CET	443	49917	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:51.354234934 CET	443	49917	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:51.354330063 CET	49917	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:51.354454994 CET	49917	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:51.354471922 CET	443	49917	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:53.560919046 CET	49918	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:53.560965061 CET	443	49918	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:53.561049938 CET	49918	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:53.561290979 CET	49918	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:53.561305046 CET	443	49918	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:53.763000965 CET	443	49918	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:53.763407946 CET	49918	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:53.763417959 CET	443	49918	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:53.772608042 CET	443	49918	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:53.772929907 CET	49918	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:53.773397923 CET	49918	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:53.784246922 CET	443	49918	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:53.784349918 CET	443	49918	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:53.831199884 CET	49918	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:54.284516096 CET	443	49918	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:54.284612894 CET	443	49918	104.20.0.37	192.168.2.16
Mar 29, 2024 14:46:54.284682035 CET	49918	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:54.284782887 CET	49918	443	192.168.2.16	104.20.0.37
Mar 29, 2024 14:46:54.284799099 CET	443	49918	104.20.0.37	192.168.2.16

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 29, 2024 14:44:52.088922024 CET	52268	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:52.089055061 CET	65360	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:52.127013922 CET	53	58903	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:52.187846899 CET	53	65360	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:52.189659119 CET	53	52268	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:52.208837986 CET	53	56114	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:52.756510019 CET	56374	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:52.756653070 CET	50231	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:52.859221935 CET	53	50231	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:52.899221897 CET	53	49725	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:53.779115915 CET	52848	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:53.878299952 CET	53	52848	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:54.555136919 CET	53	64637	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:55.612847090 CET	58116	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:55.613071918 CET	53035	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:55.689148903 CET	59541	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:55.689384937 CET	61846	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:55.695992947 CET	65377	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:55.696150064 CET	61358	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:55.712481976 CET	53	58116	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:55.713001013 CET	53	53035	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:55.790508986 CET	53	59541	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:55.792582035 CET	53	61846	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:55.794652939 CET	53	61358	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:55.795613050 CET	53	65377	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:55.909742117 CET	55751	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:55.909903049 CET	49654	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:56.013582945 CET	53	49654	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:56.013998985 CET	53	55751	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:56.228580952 CET	56107	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:56.228800058 CET	58968	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:56.328015089 CET	53	58968	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:56.330010891 CET	53	56107	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:56.364563942 CET	57581	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:56.364712000 CET	55509	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:56.459939957 CET	53	57581	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:56.460876942 CET	53	55509	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:56.728800058 CET	53	63815	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:56.887085915 CET	57874	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:56.887229919 CET	53711	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:56.984190941 CET	53	57874	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:56.984246969 CET	53	53711	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:57.152045012 CET	58022	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:57.152242899 CET	56858	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:57.247628927 CET	53	56858	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:57.250216961 CET	53	58022	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:57.612521887 CET	59348	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:57.612663984 CET	49518	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:57.613543987 CET	59403	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:57.613665104 CET	55539	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:57.708882093 CET	53	59348	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:57.710417032 CET	53	59403	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:57.710717916 CET	53	55539	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:57.734671116 CET	53	49518	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:58.535835028 CET	52207	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:58.535970926 CET	64520	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:58.541593075 CET	57862	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:58.541738033 CET	61738	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:58.542640924 CET	62092	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:58.542931080 CET	51288	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:58.543557882 CET	50906	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:58.543694973 CET	50992	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:58.544253111 CET	55335	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:58.544400930 CET	63152	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:58.546436071 CET	59478	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:58.546622992 CET	65345	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:58.548629045 CET	57910	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:58.548789978 CET	57118	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:58.633408070 CET	53	64520	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:58.638586044 CET	53	57862	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:58.639075994 CET	53	61738	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:58.639734983 CET	53	62092	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:58.640063047 CET	53	51288	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:58.640826941 CET	53	63152	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:58.640856981 CET	53	50906	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:58.640882969 CET	53	50992	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:58.641002893 CET	53	55335	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:58.644340038 CET	53	65345	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:58.644388914 CET	53	59478	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:58.645342112 CET	53	57118	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:58.646192074 CET	53	57910	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:58.649879932 CET	53	52207	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:58.882349968 CET	56884	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:58.882698059 CET	60714	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:58.977819920 CET	53	56884	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:58.978379965 CET	53	60714	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:59.280061007 CET	54448	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:59.280220985 CET	52656	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:59.302613974 CET	57694	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:59.302772999 CET	65045	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:59.324485064 CET	53863	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:59.324651957 CET	51187	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:59.375189066 CET	53	52656	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:59.376178980 CET	53	54448	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:59.398384094 CET	53	65045	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:59.398777008 CET	53	57694	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:59.403769970 CET	63514	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:59.403927088 CET	57505	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:59.419579983 CET	53	51187	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:59.420274019 CET	53	53863	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:59.423945904 CET	63310	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:59.424159050 CET	52383	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:59.499042034 CET	53	63514	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:59.499162912 CET	53	57505	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:59.520251989 CET	53	63310	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:59.520291090 CET	53	52383	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:59.668684006 CET	52457	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:59.669011116 CET	49250	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:59.764698029 CET	53	49250	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:59.766257048 CET	53	52457	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:59.784085989 CET	65444	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:59.784243107 CET	51957	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:59.830806017 CET	57326	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:59.830990076 CET	50943	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:59.835732937 CET	56001	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:59.835952044 CET	52084	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:59.880914927 CET	53	65444	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:59.881201029 CET	53	51957	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:59.886606932 CET	60436	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:59.886751890 CET	54333	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:59.892786026 CET	51609	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:59.892911911 CET	60916	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:59.896404982 CET	57289	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:59.896605015 CET	56799	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:59.927182913 CET	53	50943	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:59.932363987 CET	53	56001	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:59.933264017 CET	53	52084	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:59.970987082 CET	52298	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:59.971123934 CET	63209	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:59.973975897 CET	60575	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:59.974106073 CET	57479	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:59.983500957 CET	53	60436	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:59.990139961 CET	53	60916	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:59.991956949 CET	53	51609	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:59.993248940 CET	53	56799	1.1.1.1	192.168.2.16
Mar 29, 2024 14:44:59.994601011 CET	60408	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:59.994760036 CET	49770	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:44:59.996110916 CET	53	57289	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:00.013948917 CET	57028	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:00.014151096 CET	55309	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:00.067214012 CET	53	52298	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:00.068061113 CET	53	63209	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:00.071506977 CET	53	57479	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:00.078413963 CET	53	60575	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:00.093517065 CET	53	60408	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:00.110388994 CET	53	55309	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:00.112473011 CET	53	57028	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:00.318881989 CET	52199	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:00.319026947 CET	53169	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:00.415854931 CET	53	52199	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:00.416769028 CET	53	53169	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:00.439280987 CET	64867	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:00.439428091 CET	58938	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:00.445887089 CET	58893	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:00.446037054 CET	49509	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:00.535907030 CET	53	64867	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:00.536066055 CET	53	58938	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:00.554471970 CET	53	49509	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:00.555613995 CET	53	58893	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:00.724519968 CET	61754	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:00.724658966 CET	51238	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:00.782362938 CET	59659	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:00.782504082 CET	59357	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:00.788989067 CET	49691	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:00.789120913 CET	64823	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:00.793409109 CET	58328	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:00.793575048 CET	63843	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:00.810297966 CET	49865	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:00.810458899 CET	61850	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:00.821471930 CET	53	61754	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:00.822053909 CET	53	51238	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:00.849103928 CET	59382	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:00.878798008 CET	53	59659	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:00.878818989 CET	53	59357	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:00.885174990 CET	53	64823	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:00.885396957 CET	53	49691	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:00.890969038 CET	53	58328	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:00.894336939 CET	53	63843	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:00.907414913 CET	53	49865	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:00.908615112 CET	53	61850	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:00.946408987 CET	53	59382	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:00.990472078 CET	49783	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:00.990622997 CET	49943	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:01.086493015 CET	53	49943	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:01.086508989 CET	53	49783	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:01.366906881 CET	63178	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:01.367038965 CET	61095	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:01.410160065 CET	50861	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:01.410304070 CET	53362	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:01.421552896 CET	62811	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:01.421709061 CET	61556	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:01.463491917 CET	53564	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:01.463637114 CET	53603	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:01.465219021 CET	53	63178	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:01.467804909 CET	53	61095	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:01.518043995 CET	53	62811	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:01.518137932 CET	53	61556	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:01.519982100 CET	53	53362	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:01.520889044 CET	53	50861	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:01.561849117 CET	53	53564	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:01.561912060 CET	53	53603	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:01.767962933 CET	51503	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:01.768209934 CET	65166	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:01.769023895 CET	62206	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:01.769169092 CET	61888	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:01.771756887 CET	52524	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:01.771887064 CET	65300	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:01.772164106 CET	61605	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:01.772273064 CET	58868	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:01.828569889 CET	59106	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:01.828793049 CET	63943	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:01.865122080 CET	53	51503	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:01.865757942 CET	53	62206	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:01.867562056 CET	53	65300	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:01.868721962 CET	53	61888	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:01.868788004 CET	53	58868	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:01.868829966 CET	53	52524	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:01.870834112 CET	53	61605	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:01.893248081 CET	53	65166	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:01.929538965 CET	53	59106	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:01.929557085 CET	53	63943	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:02.081214905 CET	50313	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:02.081357002 CET	49551	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:02.177685976 CET	53	50313	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:02.280400991 CET	51938	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:02.280545950 CET	63836	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:02.392190933 CET	53	51938	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:02.402820110 CET	53	63836	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:02.793570995 CET	54067	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:02.793711901 CET	54829	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:45:02.890269995 CET	53	54829	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:02.891468048 CET	53	54067	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:09.816286087 CET	53	64886	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:26.325927019 CET	53	56492	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:46.010732889 CET	53	52376	1.1.1.1	192.168.2.16
Mar 29, 2024 14:45:52.120374918 CET	53	56460	1.1.1.1	192.168.2.16
Mar 29, 2024 14:46:01.548719883 CET	60651	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:46:01.548866987 CET	56709	53	192.168.2.16	1.1.1.1
Mar 29, 2024 14:46:01.645277977 CET	53	56709	1.1.1.1	192.168.2.16
Mar 29, 2024 14:46:01.650512934 CET	53	60651	1.1.1.1	192.168.2.16
Mar 29, 2024 14:46:05.307934999 CET	138	138	192.168.2.16	192.168.2.255
Mar 29, 2024 14:46:13.535172939 CET	53	51798	1.1.1.1	192.168.2.16

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 29, 2024 14:45:01.893312931 CET	192.168.2.16	1.1.1.1	c2a2	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 29, 2024 14:44:52.088922024 CET	192.168.2.16	1.1.1.1	0xcd0f	Standard query (0)	cex.io	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:52.089055061 CET	192.168.2.16	1.1.1.1	0x7781	Standard query (0)	cex.io	65	IN (0x0001)	false
Mar 29, 2024 14:44:52.756510019 CET	192.168.2.16	1.1.1.1	0x1f74	Standard query (0)	static.cex.io	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:52.756653070 CET	192.168.2.16	1.1.1.1	0xd24a	Standard query (0)	static.cex.io	65	IN (0x0001)	false
Mar 29, 2024 14:44:53.779115915 CET	192.168.2.16	1.1.1.1	0x3ba9	Standard query (0)	static.cex.io	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:55.612847090 CET	192.168.2.16	1.1.1.1	0xfd31	Standard query (0)	profile.cex.io	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:55.613071918 CET	192.168.2.16	1.1.1.1	0x225f	Standard query (0)	profile.cex.io	65	IN (0x0001)	false
Mar 29, 2024 14:44:55.689148903 CET	192.168.2.16	1.1.1.1	0xa3df	Standard query (0)	contact-center.cex.io	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:55.689384937 CET	192.168.2.16	1.1.1.1	0xd6eb	Standard query (0)	contact-center.cex.io	65	IN (0x0001)	false
Mar 29, 2024 14:44:55.695992947 CET	192.168.2.16	1.1.1.1	0xbfdc	Standard query (0)	cdn-cookieyes.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:55.696150064 CET	192.168.2.16	1.1.1.1	0x1915	Standard query (0)	cdn-cookieyes.com	65	IN (0x0001)	false
Mar 29, 2024 14:44:55.909742117 CET	192.168.2.16	1.1.1.1	0x39cc	Standard query (0)	cex.io	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:55.909903049 CET	192.168.2.16	1.1.1.1	0x1150	Standard query (0)	cex.io	65	IN (0x0001)	false
Mar 29, 2024 14:44:56.228580952 CET	192.168.2.16	1.1.1.1	0x30cb	Standard query (0)	profile.cex.io	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:56.228800058 CET	192.168.2.16	1.1.1.1	0x85e5	Standard query (0)	profile.cex.io	65	IN (0x0001)	false
Mar 29, 2024 14:44:56.364563942 CET	192.168.2.16	1.1.1.1	0x265d	Standard query (0)	log.cookieyes.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:56.364712000 CET	192.168.2.16	1.1.1.1	0x8e2e	Standard query (0)	log.cookieyes.com	65	IN (0x0001)	false
Mar 29, 2024 14:44:56.887085915 CET	192.168.2.16	1.1.1.1	0xd838	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:56.887229919 CET	192.168.2.16	1.1.1.1	0x81b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 29, 2024 14:44:57.152045012 CET	192.168.2.16	1.1.1.1	0x2d81	Standard query (0)	widget.intercom.io	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:57.152242899 CET	192.168.2.16	1.1.1.1	0x4388	Standard query (0)	widget.intercom.io	65	IN (0x0001)	false
Mar 29, 2024 14:44:57.612521887 CET	192.168.2.16	1.1.1.1	0x959a	Standard query (0)	directory.cookieyes.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:57.612663984 CET	192.168.2.16	1.1.1.1	0x192d	Standard query (0)	directory.cookieyes.com	65	IN (0x0001)	false
Mar 29, 2024 14:44:57.613543987 CET	192.168.2.16	1.1.1.1	0x876e	Standard query (0)	cdn-cookieyes.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:57.613665104 CET	192.168.2.16	1.1.1.1	0xc89c	Standard query (0)	cdn-cookieyes.com	65	IN (0x0001)	false
Mar 29, 2024 14:44:58.535835028 CET	192.168.2.16	1.1.1.1	0x85a0	Standard query (0)	directory.cookieyes.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:58.535970926 CET	192.168.2.16	1.1.1.1	0x44af	Standard query (0)	directory.cookieyes.com	65	IN (0x0001)	false
Mar 29, 2024 14:44:58.541593075 CET	192.168.2.16	1.1.1.1	0xde64	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:58.541738033 CET	192.168.2.16	1.1.1.1	0x2d87	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
Mar 29, 2024 14:44:58.542640924 CET	192.168.2.16	1.1.1.1	0x4c55	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:58.542931080 CET	192.168.2.16	1.1.1.1	0xab3c	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Mar 29, 2024 14:44:58.543557882 CET	192.168.2.16	1.1.1.1	0x1afb	Standard query (0)	www.redditstatic.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:58.543694973 CET	192.168.2.16	1.1.1.1	0xe8ab	Standard query (0)	www.redditstatic.com	65	IN (0x0001)	false
Mar 29, 2024 14:44:58.544253111 CET	192.168.2.16	1.1.1.1	0x18d1	Standard query (0)	sc-static.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:58.544400930 CET	192.168.2.16	1.1.1.1	0xb0b9	Standard query (0)	sc-static.net	65	IN (0x0001)	false
Mar 29, 2024 14:44:58.546436071 CET	192.168.2.16	1.1.1.1	0x5fc6	Standard query (0)	cdn.rudderlabs.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:58.546622992 CET	192.168.2.16	1.1.1.1	0x692b	Standard query (0)	cdn.rudderlabs.com	65	IN (0x0001)	false
Mar 29, 2024 14:44:58.548629045 CET	192.168.2.16	1.1.1.1	0xcad8	Standard query (0)	s.adroll.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:58.548789978 CET	192.168.2.16	1.1.1.1	0xafc0	Standard query (0)	s.adroll.com	65	IN (0x0001)	false
Mar 29, 2024 14:44:58.882349968 CET	192.168.2.16	1.1.1.1	0xcd37	Standard query (0)	js.intercomcdn.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:58.882698059 CET	192.168.2.16	1.1.1.1	0xe625	Standard query (0)	js.intercomcdn.com	65	IN (0x0001)	false
Mar 29, 2024 14:44:59.280061007 CET	192.168.2.16	1.1.1.1	0x63d5	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.280220985 CET	192.168.2.16	1.1.1.1	0x2482	Standard query (0)	t.co	65	IN (0x0001)	false
Mar 29, 2024 14:44:59.302613974 CET	192.168.2.16	1.1.1.1	0xdce1	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.302772999 CET	192.168.2.16	1.1.1.1	0xd434	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Mar 29, 2024 14:44:59.324485064 CET	192.168.2.16	1.1.1.1	0xf60d	Standard query (0)	tr.snapchat.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.324651957 CET	192.168.2.16	1.1.1.1	0x79e7	Standard query (0)	tr.snapchat.com	65	IN (0x0001)	false
Mar 29, 2024 14:44:59.403769970 CET	192.168.2.16	1.1.1.1	0xd620	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.403927088 CET	192.168.2.16	1.1.1.1	0x242d	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
Mar 29, 2024 14:44:59.423945904 CET	192.168.2.16	1.1.1.1	0x1405	Standard query (0)	api.rudderstack.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.424159050 CET	192.168.2.16	1.1.1.1	0x3ada	Standard query (0)	api.rudderstack.com	65	IN (0x0001)	false
Mar 29, 2024 14:44:59.668684006 CET	192.168.2.16	1.1.1.1	0xd16d	Standard query (0)	tr.snapchat.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.669011116 CET	192.168.2.16	1.1.1.1	0x9503	Standard query (0)	tr.snapchat.com	65	IN (0x0001)	false
Mar 29, 2024 14:44:59.784085989 CET	192.168.2.16	1.1.1.1	0x7952	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.784243107 CET	192.168.2.16	1.1.1.1	0xeca6	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Mar 29, 2024 14:44:59.830806017 CET	192.168.2.16	1.1.1.1	0xd3d9	Standard query (0)	d.adroll.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.830990076 CET	192.168.2.16	1.1.1.1	0xa6b	Standard query (0)	d.adroll.com	65	IN (0x0001)	false
Mar 29, 2024 14:44:59.835732937 CET	192.168.2.16	1.1.1.1	0xf7ee	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.835952044 CET	192.168.2.16	1.1.1.1	0xfa4a	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Mar 29, 2024 14:44:59.886606932 CET	192.168.2.16	1.1.1.1	0xf753	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.886751890 CET	192.168.2.16	1.1.1.1	0xa639	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Mar 29, 2024 14:44:59.892786026 CET	192.168.2.16	1.1.1.1	0xec27	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.892911911 CET	192.168.2.16	1.1.1.1	0xf844	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Mar 29, 2024 14:44:59.896404982 CET	192.168.2.16	1.1.1.1	0x2740	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.896605015 CET	192.168.2.16	1.1.1.1	0x9c61	Standard query (0)	t.co	65	IN (0x0001)	false
Mar 29, 2024 14:44:59.970987082 CET	192.168.2.16	1.1.1.1	0x4ecd	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.971123934 CET	192.168.2.16	1.1.1.1	0x7684	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 29, 2024 14:44:59.973975897 CET	192.168.2.16	1.1.1.1	0x7c10	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.974106073 CET	192.168.2.16	1.1.1.1	0x220	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Mar 29, 2024 14:44:59.994601011 CET	192.168.2.16	1.1.1.1	0x398c	Standard query (0)	api-iam.intercom.io	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.994760036 CET	192.168.2.16	1.1.1.1	0xb861	Standard query (0)	api-iam.intercom.io	65	IN (0x0001)	false
Mar 29, 2024 14:45:00.013948917 CET	192.168.2.16	1.1.1.1	0xdb5b	Standard query (0)	sc-static.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.014151096 CET	192.168.2.16	1.1.1.1	0xa37b	Standard query (0)	sc-static.net	65	IN (0x0001)	false
Mar 29, 2024 14:45:00.318881989 CET	192.168.2.16	1.1.1.1	0x47ab	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.319026947 CET	192.168.2.16	1.1.1.1	0xb723	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Mar 29, 2024 14:45:00.439280987 CET	192.168.2.16	1.1.1.1	0xce13	Standard query (0)	api.rudderstack.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.439428091 CET	192.168.2.16	1.1.1.1	0xeb52	Standard query (0)	api.rudderstack.com	65	IN (0x0001)	false
Mar 29, 2024 14:45:00.445887089 CET	192.168.2.16	1.1.1.1	0x29ea	Standard query (0)	cex-dataplane.rudderstack.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.446037054 CET	192.168.2.16	1.1.1.1	0x15c2	Standard query (0)	cex-dataplane.rudderstack.com	65	IN (0x0001)	false
Mar 29, 2024 14:45:00.724519968 CET	192.168.2.16	1.1.1.1	0xec20	Standard query (0)	tr6.snapchat.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.724658966 CET	192.168.2.16	1.1.1.1	0x34a7	Standard query (0)	tr6.snapchat.com	65	IN (0x0001)	false
Mar 29, 2024 14:45:00.782362938 CET	192.168.2.16	1.1.1.1	0xa3d9	Standard query (0)	api-iam.intercom.io	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.782504082 CET	192.168.2.16	1.1.1.1	0xc0fd	Standard query (0)	api-iam.intercom.io	65	IN (0x0001)	false
Mar 29, 2024 14:45:00.788989067 CET	192.168.2.16	1.1.1.1	0x3782	Standard query (0)	nexus-websocket-a.intercom.io	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.789120913 CET	192.168.2.16	1.1.1.1	0x9146	Standard query (0)	nexus-websocket-a.intercom.io	65	IN (0x0001)	false
Mar 29, 2024 14:45:00.793409109 CET	192.168.2.16	1.1.1.1	0xda80	Standard query (0)	downloads.intercomcdn.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.793575048 CET	192.168.2.16	1.1.1.1	0xffd7	Standard query (0)	downloads.intercomcdn.com	65	IN (0x0001)	false
Mar 29, 2024 14:45:00.810297966 CET	192.168.2.16	1.1.1.1	0xbbd5	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.810458899 CET	192.168.2.16	1.1.1.1	0x4e5c	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Mar 29, 2024 14:45:00.849103928 CET	192.168.2.16	1.1.1.1	0xccb7	Standard query (0)	d.adroll.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.990472078 CET	192.168.2.16	1.1.1.1	0x7ddd	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.990622997 CET	192.168.2.16	1.1.1.1	0x3c57	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 29, 2024 14:45:01.366906881 CET	192.168.2.16	1.1.1.1	0x69ee	Standard query (0)	x.adroll.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.367038965 CET	192.168.2.16	1.1.1.1	0x7993	Standard query (0)	x.adroll.com	65	IN (0x0001)	false
Mar 29, 2024 14:45:01.410160065 CET	192.168.2.16	1.1.1.1	0xbe94	Standard query (0)	cex-dataplane.rudderstack.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.410304070 CET	192.168.2.16	1.1.1.1	0x9d82	Standard query (0)	cex-dataplane.rudderstack.com	65	IN (0x0001)	false
Mar 29, 2024 14:45:01.421552896 CET	192.168.2.16	1.1.1.1	0x7a2c	Standard query (0)	w3-reporting-nel.reddit.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.421709061 CET	192.168.2.16	1.1.1.1	0xbecd	Standard query (0)	w3-reporting-nel.reddit.com	65	IN (0x0001)	false
Mar 29, 2024 14:45:01.463491917 CET	192.168.2.16	1.1.1.1	0x99f	Standard query (0)	downloads.intercomcdn.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.463637114 CET	192.168.2.16	1.1.1.1	0xef6b	Standard query (0)	downloads.intercomcdn.com	65	IN (0x0001)	false
Mar 29, 2024 14:45:01.767962933 CET	192.168.2.16	1.1.1.1	0x3785	Standard query (0)	x.adroll.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.768209934 CET	192.168.2.16	1.1.1.1	0x1544	Standard query (0)	x.adroll.com	65	IN (0x0001)	false
Mar 29, 2024 14:45:01.769023895 CET	192.168.2.16	1.1.1.1	0x4cfc	Standard query (0)	d.adroll.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.769169092 CET	192.168.2.16	1.1.1.1	0x7a0c	Standard query (0)	d.adroll.com	65	IN (0x0001)	false
Mar 29, 2024 14:45:01.771756887 CET	192.168.2.16	1.1.1.1	0x1f79	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.771887064 CET	192.168.2.16	1.1.1.1	0x2285	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Mar 29, 2024 14:45:01.772164106 CET	192.168.2.16	1.1.1.1	0xc43	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.772273064 CET	192.168.2.16	1.1.1.1	0xaea7	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Mar 29, 2024 14:45:01.828569889 CET	192.168.2.16	1.1.1.1	0x1a59	Standard query (0)	www.redditstatic.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.828793049 CET	192.168.2.16	1.1.1.1	0xb6ff	Standard query (0)	www.redditstatic.com	65	IN (0x0001)	false
Mar 29, 2024 14:45:02.081214905 CET	192.168.2.16	1.1.1.1	0xa03	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:02.081357002 CET	192.168.2.16	1.1.1.1	0xf6cd	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Mar 29, 2024 14:45:02.280400991 CET	192.168.2.16	1.1.1.1	0x1c88	Standard query (0)	x.adroll.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:02.280545950 CET	192.168.2.16	1.1.1.1	0xb652	Standard query (0)	x.adroll.com	65	IN (0x0001)	false
Mar 29, 2024 14:45:02.793570995 CET	192.168.2.16	1.1.1.1	0x822e	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:02.793711901 CET	192.168.2.16	1.1.1.1	0xe611	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Mar 29, 2024 14:46:01.548719883 CET	192.168.2.16	1.1.1.1	0xad96	Standard query (0)	nexus-websocket-a.intercom.io	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:46:01.548866987 CET	192.168.2.16	1.1.1.1	0x87e5	Standard query (0)	nexus-websocket-a.intercom.io	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 29, 2024 14:44:52.187846899 CET	1.1.1.1	192.168.2.16	0x7781	No error (0)	cex.io			65	IN (0x0001)	false
Mar 29, 2024 14:44:52.189659119 CET	1.1.1.1	192.168.2.16	0xcd0f	No error (0)	cex.io		104.20.0.37	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:52.189659119 CET	1.1.1.1	192.168.2.16	0xcd0f	No error (0)	cex.io		104.20.1.37	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:52.859221935 CET	1.1.1.1	192.168.2.16	0xd24a	No error (0)	static.cex.io			65	IN (0x0001)	false
Mar 29, 2024 14:44:53.878299952 CET	1.1.1.1	192.168.2.16	0x3ba9	No error (0)	static.cex.io		104.20.0.37	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:53.878299952 CET	1.1.1.1	192.168.2.16	0x3ba9	No error (0)	static.cex.io		104.20.1.37	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:55.712481976 CET	1.1.1.1	192.168.2.16	0xfd31	No error (0)	profile.cex.io		104.20.0.37	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:55.712481976 CET	1.1.1.1	192.168.2.16	0xfd31	No error (0)	profile.cex.io		104.20.1.37	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:55.713001013 CET	1.1.1.1	192.168.2.16	0x225f	No error (0)	profile.cex.io			65	IN (0x0001)	false
Mar 29, 2024 14:44:55.790508986 CET	1.1.1.1	192.168.2.16	0xa3df	No error (0)	contact-center.cex.io		104.20.0.37	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:55.790508986 CET	1.1.1.1	192.168.2.16	0xa3df	No error (0)	contact-center.cex.io		104.20.1.37	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:55.792582035 CET	1.1.1.1	192.168.2.16	0xd6eb	No error (0)	contact-center.cex.io			65	IN (0x0001)	false
Mar 29, 2024 14:44:55.794652939 CET	1.1.1.1	192.168.2.16	0x1915	No error (0)	cdn-cookieyes.com			65	IN (0x0001)	false
Mar 29, 2024 14:44:55.795613050 CET	1.1.1.1	192.168.2.16	0xbfdc	No error (0)	cdn-cookieyes.com		172.67.20.8	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:55.795613050 CET	1.1.1.1	192.168.2.16	0xbfdc	No error (0)	cdn-cookieyes.com		104.22.59.91	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:55.795613050 CET	1.1.1.1	192.168.2.16	0xbfdc	No error (0)	cdn-cookieyes.com		104.22.58.91	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:56.013582945 CET	1.1.1.1	192.168.2.16	0x1150	No error (0)	cex.io			65	IN (0x0001)	false
Mar 29, 2024 14:44:56.013998985 CET	1.1.1.1	192.168.2.16	0x39cc	No error (0)	cex.io		104.20.0.37	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:56.013998985 CET	1.1.1.1	192.168.2.16	0x39cc	No error (0)	cex.io		104.20.1.37	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:56.328015089 CET	1.1.1.1	192.168.2.16	0x85e5	No error (0)	profile.cex.io			65	IN (0x0001)	false
Mar 29, 2024 14:44:56.330010891 CET	1.1.1.1	192.168.2.16	0x30cb	No error (0)	profile.cex.io		104.20.0.37	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:56.330010891 CET	1.1.1.1	192.168.2.16	0x30cb	No error (0)	profile.cex.io		104.20.1.37	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:56.459939957 CET	1.1.1.1	192.168.2.16	0x265d	No error (0)	log.cookieyes.com		54.229.44.173	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:56.459939957 CET	1.1.1.1	192.168.2.16	0x265d	No error (0)	log.cookieyes.com		63.33.248.136	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:56.984190941 CET	1.1.1.1	192.168.2.16	0xd838	No error (0)	www.google.com		142.251.167.103	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:56.984190941 CET	1.1.1.1	192.168.2.16	0xd838	No error (0)	www.google.com		142.251.167.99	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:56.984190941 CET	1.1.1.1	192.168.2.16	0xd838	No error (0)	www.google.com		142.251.167.105	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:56.984190941 CET	1.1.1.1	192.168.2.16	0xd838	No error (0)	www.google.com		142.251.167.147	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:56.984190941 CET	1.1.1.1	192.168.2.16	0xd838	No error (0)	www.google.com		142.251.167.106	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:56.984190941 CET	1.1.1.1	192.168.2.16	0xd838	No error (0)	www.google.com		142.251.167.104	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:56.984246969 CET	1.1.1.1	192.168.2.16	0x81b	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 29, 2024 14:44:57.250216961 CET	1.1.1.1	192.168.2.16	0x2d81	No error (0)	widget.intercom.io		108.138.64.17	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:57.250216961 CET	1.1.1.1	192.168.2.16	0x2d81	No error (0)	widget.intercom.io		108.138.64.81	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:57.250216961 CET	1.1.1.1	192.168.2.16	0x2d81	No error (0)	widget.intercom.io		108.138.64.56	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:57.250216961 CET	1.1.1.1	192.168.2.16	0x2d81	No error (0)	widget.intercom.io		108.138.64.83	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:57.708882093 CET	1.1.1.1	192.168.2.16	0x959a	No error (0)	directory.cookieyes.com	event-log-producer-alb-1487800978.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:44:57.708882093 CET	1.1.1.1	192.168.2.16	0x959a	No error (0)	event-log-producer-alb-1487800978.eu-west-1.elb.amazonaws.com		54.229.44.173	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:57.708882093 CET	1.1.1.1	192.168.2.16	0x959a	No error (0)	event-log-producer-alb-1487800978.eu-west-1.elb.amazonaws.com		63.33.248.136	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:57.710417032 CET	1.1.1.1	192.168.2.16	0x876e	No error (0)	cdn-cookieyes.com		104.22.58.91	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:57.710417032 CET	1.1.1.1	192.168.2.16	0x876e	No error (0)	cdn-cookieyes.com		104.22.59.91	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:57.710417032 CET	1.1.1.1	192.168.2.16	0x876e	No error (0)	cdn-cookieyes.com		172.67.20.8	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:57.710717916 CET	1.1.1.1	192.168.2.16	0xc89c	No error (0)	cdn-cookieyes.com			65	IN (0x0001)	false
Mar 29, 2024 14:44:57.734671116 CET	1.1.1.1	192.168.2.16	0x192d	No error (0)	directory.cookieyes.com	event-log-producer-alb-1487800978.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:44:58.633408070 CET	1.1.1.1	192.168.2.16	0x44af	No error (0)	directory.cookieyes.com	event-log-producer-alb-1487800978.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:44:58.638586044 CET	1.1.1.1	192.168.2.16	0xde64	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:44:58.638586044 CET	1.1.1.1	192.168.2.16	0xde64	No error (0)	platform.twitter.map.fastly.net		146.75.28.157	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:58.639075994 CET	1.1.1.1	192.168.2.16	0x2d87	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:44:58.639734983 CET	1.1.1.1	192.168.2.16	0x4c55	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:44:58.639734983 CET	1.1.1.1	192.168.2.16	0x4c55	No error (0)	static-cdn.hotjar.com		18.160.41.53	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:58.639734983 CET	1.1.1.1	192.168.2.16	0x4c55	No error (0)	static-cdn.hotjar.com		18.160.41.58	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:58.639734983 CET	1.1.1.1	192.168.2.16	0x4c55	No error (0)	static-cdn.hotjar.com		18.160.41.112	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:58.639734983 CET	1.1.1.1	192.168.2.16	0x4c55	No error (0)	static-cdn.hotjar.com		18.160.41.49	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:58.640063047 CET	1.1.1.1	192.168.2.16	0xab3c	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:44:58.640856981 CET	1.1.1.1	192.168.2.16	0x1afb	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:44:58.640856981 CET	1.1.1.1	192.168.2.16	0x1afb	No error (0)	dualstack.reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:58.640856981 CET	1.1.1.1	192.168.2.16	0x1afb	No error (0)	dualstack.reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:58.640856981 CET	1.1.1.1	192.168.2.16	0x1afb	No error (0)	dualstack.reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:58.640856981 CET	1.1.1.1	192.168.2.16	0x1afb	No error (0)	dualstack.reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:58.640882969 CET	1.1.1.1	192.168.2.16	0xe8ab	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:44:58.641002893 CET	1.1.1.1	192.168.2.16	0x18d1	No error (0)	sc-static.net		3.162.129.245	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:58.644340038 CET	1.1.1.1	192.168.2.16	0x692b	No error (0)	cdn.rudderlabs.com	d330tt87tgwpr0.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:44:58.644388914 CET	1.1.1.1	192.168.2.16	0x5fc6	No error (0)	cdn.rudderlabs.com	d330tt87tgwpr0.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:44:58.644388914 CET	1.1.1.1	192.168.2.16	0x5fc6	No error (0)	d330tt87tgwpr0.cloudfront.net		3.162.103.76	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:58.644388914 CET	1.1.1.1	192.168.2.16	0x5fc6	No error (0)	d330tt87tgwpr0.cloudfront.net		3.162.103.126	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:58.644388914 CET	1.1.1.1	192.168.2.16	0x5fc6	No error (0)	d330tt87tgwpr0.cloudfront.net		3.162.103.128	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:58.644388914 CET	1.1.1.1	192.168.2.16	0x5fc6	No error (0)	d330tt87tgwpr0.cloudfront.net		3.162.103.93	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:58.645342112 CET	1.1.1.1	192.168.2.16	0xafc0	No error (0)	s.adroll.com	d1qug1xf2dk5z6.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:44:58.646192074 CET	1.1.1.1	192.168.2.16	0xcad8	No error (0)	s.adroll.com	d1qug1xf2dk5z6.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:44:58.646192074 CET	1.1.1.1	192.168.2.16	0xcad8	No error (0)	d1qug1xf2dk5z6.cloudfront.net		3.162.103.56	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:58.646192074 CET	1.1.1.1	192.168.2.16	0xcad8	No error (0)	d1qug1xf2dk5z6.cloudfront.net		3.162.103.91	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:58.646192074 CET	1.1.1.1	192.168.2.16	0xcad8	No error (0)	d1qug1xf2dk5z6.cloudfront.net		3.162.103.108	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:58.646192074 CET	1.1.1.1	192.168.2.16	0xcad8	No error (0)	d1qug1xf2dk5z6.cloudfront.net		3.162.103.36	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:58.649879932 CET	1.1.1.1	192.168.2.16	0x85a0	No error (0)	directory.cookieyes.com	event-log-producer-alb-1487800978.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:44:58.649879932 CET	1.1.1.1	192.168.2.16	0x85a0	No error (0)	event-log-producer-alb-1487800978.eu-west-1.elb.amazonaws.com		54.229.44.173	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:58.649879932 CET	1.1.1.1	192.168.2.16	0x85a0	No error (0)	event-log-producer-alb-1487800978.eu-west-1.elb.amazonaws.com		63.33.248.136	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:58.977819920 CET	1.1.1.1	192.168.2.16	0xcd37	No error (0)	js.intercomcdn.com		18.154.227.129	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:58.977819920 CET	1.1.1.1	192.168.2.16	0xcd37	No error (0)	js.intercomcdn.com		18.154.227.81	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:58.977819920 CET	1.1.1.1	192.168.2.16	0xcd37	No error (0)	js.intercomcdn.com		18.154.227.37	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:58.977819920 CET	1.1.1.1	192.168.2.16	0xcd37	No error (0)	js.intercomcdn.com		18.154.227.3	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.376178980 CET	1.1.1.1	192.168.2.16	0x63d5	No error (0)	t.co		104.244.42.69	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.398384094 CET	1.1.1.1	192.168.2.16	0xd434	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:44:59.398384094 CET	1.1.1.1	192.168.2.16	0xd434	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:44:59.398777008 CET	1.1.1.1	192.168.2.16	0xdce1	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:44:59.398777008 CET	1.1.1.1	192.168.2.16	0xdce1	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:44:59.398777008 CET	1.1.1.1	192.168.2.16	0xdce1	No error (0)	s.twitter.com		104.244.42.67	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.419579983 CET	1.1.1.1	192.168.2.16	0x79e7	No error (0)	tr.snapchat.com	gcp.api.snapchat.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:44:59.419579983 CET	1.1.1.1	192.168.2.16	0x79e7	No error (0)	gcp.api.snapchat.com	gcp.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:44:59.420274019 CET	1.1.1.1	192.168.2.16	0xf60d	No error (0)	tr.snapchat.com	gcp.api.snapchat.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:44:59.420274019 CET	1.1.1.1	192.168.2.16	0xf60d	No error (0)	gcp.api.snapchat.com	gcp.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:44:59.420274019 CET	1.1.1.1	192.168.2.16	0xf60d	No error (0)	gcp.api.sc-gw.com		35.190.43.134	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.499042034 CET	1.1.1.1	192.168.2.16	0xd620	No error (0)	script.hotjar.com		18.160.18.77	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.499042034 CET	1.1.1.1	192.168.2.16	0xd620	No error (0)	script.hotjar.com		18.160.18.39	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.499042034 CET	1.1.1.1	192.168.2.16	0xd620	No error (0)	script.hotjar.com		18.160.18.112	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.499042034 CET	1.1.1.1	192.168.2.16	0xd620	No error (0)	script.hotjar.com		18.160.18.45	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.520251989 CET	1.1.1.1	192.168.2.16	0x1405	No error (0)	api.rudderstack.com		52.85.151.23	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.520251989 CET	1.1.1.1	192.168.2.16	0x1405	No error (0)	api.rudderstack.com		52.85.151.19	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.520251989 CET	1.1.1.1	192.168.2.16	0x1405	No error (0)	api.rudderstack.com		52.85.151.5	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.520251989 CET	1.1.1.1	192.168.2.16	0x1405	No error (0)	api.rudderstack.com		52.85.151.82	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.764698029 CET	1.1.1.1	192.168.2.16	0x9503	No error (0)	tr.snapchat.com	gcp.api.snapchat.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:44:59.764698029 CET	1.1.1.1	192.168.2.16	0x9503	No error (0)	gcp.api.snapchat.com	gcp.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:44:59.766257048 CET	1.1.1.1	192.168.2.16	0xd16d	No error (0)	tr.snapchat.com	gcp.api.snapchat.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:44:59.766257048 CET	1.1.1.1	192.168.2.16	0xd16d	No error (0)	gcp.api.snapchat.com	gcp.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:44:59.766257048 CET	1.1.1.1	192.168.2.16	0xd16d	No error (0)	gcp.api.sc-gw.com		35.190.43.134	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.880914927 CET	1.1.1.1	192.168.2.16	0x7952	No error (0)	analytics.google.com		172.253.62.101	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.880914927 CET	1.1.1.1	192.168.2.16	0x7952	No error (0)	analytics.google.com		172.253.62.138	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.880914927 CET	1.1.1.1	192.168.2.16	0x7952	No error (0)	analytics.google.com		172.253.62.113	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.880914927 CET	1.1.1.1	192.168.2.16	0x7952	No error (0)	analytics.google.com		172.253.62.100	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.880914927 CET	1.1.1.1	192.168.2.16	0x7952	No error (0)	analytics.google.com		172.253.62.139	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.880914927 CET	1.1.1.1	192.168.2.16	0x7952	No error (0)	analytics.google.com		172.253.62.102	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.881201029 CET	1.1.1.1	192.168.2.16	0xeca6	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:44:59.927182913 CET	1.1.1.1	192.168.2.16	0xa6b	No error (0)	d.adroll.com	adserver-vpc-alb-1-2048135467.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:44:59.932363987 CET	1.1.1.1	192.168.2.16	0xf7ee	No error (0)	stats.g.doubleclick.net		142.250.31.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.932363987 CET	1.1.1.1	192.168.2.16	0xf7ee	No error (0)	stats.g.doubleclick.net		142.250.31.156	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.983500957 CET	1.1.1.1	192.168.2.16	0xf753	No error (0)	td.doubleclick.net		142.251.16.157	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.983500957 CET	1.1.1.1	192.168.2.16	0xf753	No error (0)	td.doubleclick.net		142.251.16.156	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.990139961 CET	1.1.1.1	192.168.2.16	0xf844	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Mar 29, 2024 14:44:59.991956949 CET	1.1.1.1	192.168.2.16	0xec27	No error (0)	googleads.g.doubleclick.net		142.251.179.157	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.991956949 CET	1.1.1.1	192.168.2.16	0xec27	No error (0)	googleads.g.doubleclick.net		142.251.179.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.991956949 CET	1.1.1.1	192.168.2.16	0xec27	No error (0)	googleads.g.doubleclick.net		142.251.179.154	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.991956949 CET	1.1.1.1	192.168.2.16	0xec27	No error (0)	googleads.g.doubleclick.net		142.251.179.156	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:44:59.996110916 CET	1.1.1.1	192.168.2.16	0x2740	No error (0)	t.co		104.244.42.5	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.067214012 CET	1.1.1.1	192.168.2.16	0x4ecd	No error (0)	www.google.com		142.251.16.106	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.067214012 CET	1.1.1.1	192.168.2.16	0x4ecd	No error (0)	www.google.com		142.251.16.103	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.067214012 CET	1.1.1.1	192.168.2.16	0x4ecd	No error (0)	www.google.com		142.251.16.105	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.067214012 CET	1.1.1.1	192.168.2.16	0x4ecd	No error (0)	www.google.com		142.251.16.99	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.067214012 CET	1.1.1.1	192.168.2.16	0x4ecd	No error (0)	www.google.com		142.251.16.104	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.067214012 CET	1.1.1.1	192.168.2.16	0x4ecd	No error (0)	www.google.com		142.251.16.147	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.068061113 CET	1.1.1.1	192.168.2.16	0x7684	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 29, 2024 14:45:00.071506977 CET	1.1.1.1	192.168.2.16	0x220	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:45:00.071506977 CET	1.1.1.1	192.168.2.16	0x220	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:45:00.078413963 CET	1.1.1.1	192.168.2.16	0x7c10	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:45:00.078413963 CET	1.1.1.1	192.168.2.16	0x7c10	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:45:00.078413963 CET	1.1.1.1	192.168.2.16	0x7c10	No error (0)	s.twitter.com		104.244.42.67	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.093517065 CET	1.1.1.1	192.168.2.16	0x398c	No error (0)	api-iam.intercom.io		3.225.23.81	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.093517065 CET	1.1.1.1	192.168.2.16	0x398c	No error (0)	api-iam.intercom.io		34.201.206.207	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.093517065 CET	1.1.1.1	192.168.2.16	0x398c	No error (0)	api-iam.intercom.io		54.85.192.35	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.093517065 CET	1.1.1.1	192.168.2.16	0x398c	No error (0)	api-iam.intercom.io		52.200.232.242	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.093517065 CET	1.1.1.1	192.168.2.16	0x398c	No error (0)	api-iam.intercom.io		35.169.214.233	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.093517065 CET	1.1.1.1	192.168.2.16	0x398c	No error (0)	api-iam.intercom.io		34.202.120.69	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.093517065 CET	1.1.1.1	192.168.2.16	0x398c	No error (0)	api-iam.intercom.io		34.224.45.69	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.093517065 CET	1.1.1.1	192.168.2.16	0x398c	No error (0)	api-iam.intercom.io		72.44.60.60	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.112473011 CET	1.1.1.1	192.168.2.16	0xdb5b	No error (0)	sc-static.net		3.162.129.245	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.415854931 CET	1.1.1.1	192.168.2.16	0x47ab	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:45:00.415854931 CET	1.1.1.1	192.168.2.16	0x47ab	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.415854931 CET	1.1.1.1	192.168.2.16	0x47ab	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.415854931 CET	1.1.1.1	192.168.2.16	0x47ab	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.415854931 CET	1.1.1.1	192.168.2.16	0x47ab	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.416769028 CET	1.1.1.1	192.168.2.16	0xb723	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:45:00.535907030 CET	1.1.1.1	192.168.2.16	0xce13	No error (0)	api.rudderstack.com		52.85.151.82	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.535907030 CET	1.1.1.1	192.168.2.16	0xce13	No error (0)	api.rudderstack.com		52.85.151.5	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.535907030 CET	1.1.1.1	192.168.2.16	0xce13	No error (0)	api.rudderstack.com		52.85.151.19	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.535907030 CET	1.1.1.1	192.168.2.16	0xce13	No error (0)	api.rudderstack.com		52.85.151.23	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.555613995 CET	1.1.1.1	192.168.2.16	0x29ea	No error (0)	cex-dataplane.rudderstack.com		52.22.248.30	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.821471930 CET	1.1.1.1	192.168.2.16	0xec20	No error (0)	tr6.snapchat.com	usc1-gcp-v61.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:45:00.821471930 CET	1.1.1.1	192.168.2.16	0xec20	No error (0)	usc1-gcp-v61.api.sc-gw.com		35.190.43.134	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.822053909 CET	1.1.1.1	192.168.2.16	0x34a7	No error (0)	tr6.snapchat.com	usc1-gcp-v61.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:45:00.878798008 CET	1.1.1.1	192.168.2.16	0xa3d9	No error (0)	api-iam.intercom.io		3.225.23.81	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.878798008 CET	1.1.1.1	192.168.2.16	0xa3d9	No error (0)	api-iam.intercom.io		54.85.192.35	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.878798008 CET	1.1.1.1	192.168.2.16	0xa3d9	No error (0)	api-iam.intercom.io		3.227.138.213	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.878798008 CET	1.1.1.1	192.168.2.16	0xa3d9	No error (0)	api-iam.intercom.io		34.205.122.7	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.878798008 CET	1.1.1.1	192.168.2.16	0xa3d9	No error (0)	api-iam.intercom.io		44.197.106.171	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.878798008 CET	1.1.1.1	192.168.2.16	0xa3d9	No error (0)	api-iam.intercom.io		52.200.232.242	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.878798008 CET	1.1.1.1	192.168.2.16	0xa3d9	No error (0)	api-iam.intercom.io		34.193.137.227	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.878798008 CET	1.1.1.1	192.168.2.16	0xa3d9	No error (0)	api-iam.intercom.io		54.205.6.153	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.885396957 CET	1.1.1.1	192.168.2.16	0x3782	No error (0)	nexus-websocket-a.intercom.io		35.174.127.31	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.885396957 CET	1.1.1.1	192.168.2.16	0x3782	No error (0)	nexus-websocket-a.intercom.io		34.237.73.95	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.890969038 CET	1.1.1.1	192.168.2.16	0xda80	No error (0)	downloads.intercomcdn.com		3.33.152.127	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.890969038 CET	1.1.1.1	192.168.2.16	0xda80	No error (0)	downloads.intercomcdn.com		15.197.143.135	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.907414913 CET	1.1.1.1	192.168.2.16	0xbbd5	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:45:00.907414913 CET	1.1.1.1	192.168.2.16	0xbbd5	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.907414913 CET	1.1.1.1	192.168.2.16	0xbbd5	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.907414913 CET	1.1.1.1	192.168.2.16	0xbbd5	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.907414913 CET	1.1.1.1	192.168.2.16	0xbbd5	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.908615112 CET	1.1.1.1	192.168.2.16	0x4e5c	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:45:00.946408987 CET	1.1.1.1	192.168.2.16	0xccb7	No error (0)	d.adroll.com	adserver-vpc-alb-0-2072243822.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:45:00.946408987 CET	1.1.1.1	192.168.2.16	0xccb7	No error (0)	adserver-vpc-alb-0-2072243822.us-east-1.elb.amazonaws.com		3.208.209.20	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:00.946408987 CET	1.1.1.1	192.168.2.16	0xccb7	No error (0)	adserver-vpc-alb-0-2072243822.us-east-1.elb.amazonaws.com		54.84.61.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.086493015 CET	1.1.1.1	192.168.2.16	0x3c57	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 29, 2024 14:45:01.086508989 CET	1.1.1.1	192.168.2.16	0x7ddd	No error (0)	www.google.com		172.253.62.104	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.086508989 CET	1.1.1.1	192.168.2.16	0x7ddd	No error (0)	www.google.com		172.253.62.106	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.086508989 CET	1.1.1.1	192.168.2.16	0x7ddd	No error (0)	www.google.com		172.253.62.99	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.086508989 CET	1.1.1.1	192.168.2.16	0x7ddd	No error (0)	www.google.com		172.253.62.105	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.086508989 CET	1.1.1.1	192.168.2.16	0x7ddd	No error (0)	www.google.com		172.253.62.103	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.086508989 CET	1.1.1.1	192.168.2.16	0x7ddd	No error (0)	www.google.com		172.253.62.147	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.465219021 CET	1.1.1.1	192.168.2.16	0x69ee	No error (0)	x.adroll.com	us-east-1-x.adroll.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:45:01.465219021 CET	1.1.1.1	192.168.2.16	0x69ee	No error (0)	us-east-1-x.adroll.com	sludge-sludge-production-86464678.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:45:01.465219021 CET	1.1.1.1	192.168.2.16	0x69ee	No error (0)	sludge-sludge-production-86464678.us-east-1.elb.amazonaws.com		35.175.89.38	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.465219021 CET	1.1.1.1	192.168.2.16	0x69ee	No error (0)	sludge-sludge-production-86464678.us-east-1.elb.amazonaws.com		34.201.178.240	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.465219021 CET	1.1.1.1	192.168.2.16	0x69ee	No error (0)	sludge-sludge-production-86464678.us-east-1.elb.amazonaws.com		52.206.56.191	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.465219021 CET	1.1.1.1	192.168.2.16	0x69ee	No error (0)	sludge-sludge-production-86464678.us-east-1.elb.amazonaws.com		3.225.95.250	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.465219021 CET	1.1.1.1	192.168.2.16	0x69ee	No error (0)	sludge-sludge-production-86464678.us-east-1.elb.amazonaws.com		54.204.205.163	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.467804909 CET	1.1.1.1	192.168.2.16	0x7993	No error (0)	x.adroll.com	us-east-1-x.adroll.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:45:01.467804909 CET	1.1.1.1	192.168.2.16	0x7993	No error (0)	us-east-1-x.adroll.com	sludge-sludge-production-86464678.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:45:01.518043995 CET	1.1.1.1	192.168.2.16	0x7a2c	No error (0)	w3-reporting-nel.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:45:01.518043995 CET	1.1.1.1	192.168.2.16	0x7a2c	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.518043995 CET	1.1.1.1	192.168.2.16	0x7a2c	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.518043995 CET	1.1.1.1	192.168.2.16	0x7a2c	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.518043995 CET	1.1.1.1	192.168.2.16	0x7a2c	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.518137932 CET	1.1.1.1	192.168.2.16	0xbecd	No error (0)	w3-reporting-nel.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:45:01.520889044 CET	1.1.1.1	192.168.2.16	0xbe94	No error (0)	cex-dataplane.rudderstack.com		52.22.248.30	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.561849117 CET	1.1.1.1	192.168.2.16	0x99f	No error (0)	downloads.intercomcdn.com		3.33.152.127	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.561849117 CET	1.1.1.1	192.168.2.16	0x99f	No error (0)	downloads.intercomcdn.com		15.197.143.135	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.865122080 CET	1.1.1.1	192.168.2.16	0x3785	No error (0)	x.adroll.com	us-east-1-x.adroll.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:45:01.865122080 CET	1.1.1.1	192.168.2.16	0x3785	No error (0)	us-east-1-x.adroll.com	sludge-sludge-production-86464678.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:45:01.865122080 CET	1.1.1.1	192.168.2.16	0x3785	No error (0)	sludge-sludge-production-86464678.us-east-1.elb.amazonaws.com		54.204.205.163	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.865122080 CET	1.1.1.1	192.168.2.16	0x3785	No error (0)	sludge-sludge-production-86464678.us-east-1.elb.amazonaws.com		34.201.178.240	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.865122080 CET	1.1.1.1	192.168.2.16	0x3785	No error (0)	sludge-sludge-production-86464678.us-east-1.elb.amazonaws.com		35.175.89.38	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.865122080 CET	1.1.1.1	192.168.2.16	0x3785	No error (0)	sludge-sludge-production-86464678.us-east-1.elb.amazonaws.com		52.206.56.191	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.865122080 CET	1.1.1.1	192.168.2.16	0x3785	No error (0)	sludge-sludge-production-86464678.us-east-1.elb.amazonaws.com		3.225.95.250	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.865757942 CET	1.1.1.1	192.168.2.16	0x4cfc	No error (0)	d.adroll.com	adserver-vpc-alb-3-917510562.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:45:01.865757942 CET	1.1.1.1	192.168.2.16	0x4cfc	No error (0)	adserver-vpc-alb-3-917510562.us-east-1.elb.amazonaws.com		34.197.113.183	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.865757942 CET	1.1.1.1	192.168.2.16	0x4cfc	No error (0)	adserver-vpc-alb-3-917510562.us-east-1.elb.amazonaws.com		54.146.169.38	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.868721962 CET	1.1.1.1	192.168.2.16	0x7a0c	No error (0)	d.adroll.com	adserver-vpc-alb-2-1898430250.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:45:01.868788004 CET	1.1.1.1	192.168.2.16	0xaea7	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Mar 29, 2024 14:45:01.868829966 CET	1.1.1.1	192.168.2.16	0x1f79	No error (0)	cm.g.doubleclick.net		142.251.179.157	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.868829966 CET	1.1.1.1	192.168.2.16	0x1f79	No error (0)	cm.g.doubleclick.net		142.251.179.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.868829966 CET	1.1.1.1	192.168.2.16	0x1f79	No error (0)	cm.g.doubleclick.net		142.251.179.154	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.868829966 CET	1.1.1.1	192.168.2.16	0x1f79	No error (0)	cm.g.doubleclick.net		142.251.179.156	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.870834112 CET	1.1.1.1	192.168.2.16	0xc43	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.870834112 CET	1.1.1.1	192.168.2.16	0xc43	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.893248081 CET	1.1.1.1	192.168.2.16	0x1544	No error (0)	x.adroll.com	us-east-1-x.adroll.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:45:01.893248081 CET	1.1.1.1	192.168.2.16	0x1544	No error (0)	us-east-1-x.adroll.com	sludge-sludge-production-86464678.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:45:01.929538965 CET	1.1.1.1	192.168.2.16	0x1a59	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:45:01.929538965 CET	1.1.1.1	192.168.2.16	0x1a59	No error (0)	dualstack.reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.929538965 CET	1.1.1.1	192.168.2.16	0x1a59	No error (0)	dualstack.reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.929538965 CET	1.1.1.1	192.168.2.16	0x1a59	No error (0)	dualstack.reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.929538965 CET	1.1.1.1	192.168.2.16	0x1a59	No error (0)	dualstack.reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:01.929557085 CET	1.1.1.1	192.168.2.16	0xb6ff	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:45:02.177685976 CET	1.1.1.1	192.168.2.16	0xa03	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:02.392190933 CET	1.1.1.1	192.168.2.16	0x1c88	No error (0)	x.adroll.com	us-east-1-x.adroll.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:45:02.392190933 CET	1.1.1.1	192.168.2.16	0x1c88	No error (0)	us-east-1-x.adroll.com	sludge-sludge-production-86464678.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:45:02.392190933 CET	1.1.1.1	192.168.2.16	0x1c88	No error (0)	sludge-sludge-production-86464678.us-east-1.elb.amazonaws.com		3.225.95.250	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:02.392190933 CET	1.1.1.1	192.168.2.16	0x1c88	No error (0)	sludge-sludge-production-86464678.us-east-1.elb.amazonaws.com		35.175.89.38	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:02.392190933 CET	1.1.1.1	192.168.2.16	0x1c88	No error (0)	sludge-sludge-production-86464678.us-east-1.elb.amazonaws.com		54.204.205.163	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:02.392190933 CET	1.1.1.1	192.168.2.16	0x1c88	No error (0)	sludge-sludge-production-86464678.us-east-1.elb.amazonaws.com		52.206.56.191	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:02.392190933 CET	1.1.1.1	192.168.2.16	0x1c88	No error (0)	sludge-sludge-production-86464678.us-east-1.elb.amazonaws.com		34.201.178.240	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:02.402820110 CET	1.1.1.1	192.168.2.16	0xb652	No error (0)	x.adroll.com	us-east-1-x.adroll.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:45:02.402820110 CET	1.1.1.1	192.168.2.16	0xb652	No error (0)	us-east-1-x.adroll.com	sludge-sludge-production-86464678.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 14:45:02.890269995 CET	1.1.1.1	192.168.2.16	0xe611	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Mar 29, 2024 14:45:02.891468048 CET	1.1.1.1	192.168.2.16	0x822e	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:45:02.891468048 CET	1.1.1.1	192.168.2.16	0x822e	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:46:01.650512934 CET	1.1.1.1	192.168.2.16	0xad96	No error (0)	nexus-websocket-a.intercom.io		34.237.73.95	A (IP address)	IN (0x0001)	false
Mar 29, 2024 14:46:01.650512934 CET	1.1.1.1	192.168.2.16	0xad96	No error (0)	nexus-websocket-a.intercom.io		35.174.127.31	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

cex.io

https:

static.cex.io

profile.cex.io

contact-center.cex.io

cdn-cookieyes.com

log.cookieyes.com

directory.cookieyes.com

widget.intercom.io

static.hotjar.com

cdn.rudderlabs.com

s.adroll.com

sc-static.net

static.ads-twitter.com

t.co

analytics.twitter.com

tr.snapchat.com

script.hotjar.com

www.redditstatic.com

analytics.google.com

api.rudderstack.com

googleads.g.doubleclick.net

td.doubleclick.net

www.google.com

alb.reddit.com

tr6.snapchat.com

downloads.intercomcdn.com

cex-dataplane.rudderstack.com

stats.g.doubleclick.net

d.adroll.com

x.adroll.com

dsum-sec.casalemedia.com

cm.g.doubleclick.net

pixel.tapad.com

js.intercomcdn.com

api-iam.intercom.io

nexus-websocket-a.intercom.io

w3-reporting-nel.reddit.com

slscr.update.microsoft.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49700	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:52 UTC	661	OUT	GET /buy-bitcoins HTTP/1.1 Host: cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:52 UTC	361	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:52 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding strict-transport-security: max-age=0; includeSubDomains x-frame-options: SAMEORIGIN CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c109da756f2-IAD
2024-03-29 13:44:52 UTC	1008	IN	Data Raw: 37 31 31 62 0d 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 42 75 79 20 42 69 74 63 6f 69 6e 20 77 69 74 68 20 43 72 65 64 69 74 20 6f 72 20 44 65 62 69 74 20 43 61 72 64 20 49 6e 73 74 61 6e 74 6c 79 20 2d 20 43 45 58 2e 49 4f 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: 711b<!doctype html><html><head><title>Buy Bitcoin with Credit or Debit Card Instantly - CEX.IO</title><meta charset="utf-8"><meta name="format-detection" content="telephone=no"><meta name="viewport" content="width=device-width, initial-scale=1">
2024-03-29 13:44:52 UTC	1369	IN	Data Raw: 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 65 78 2e 69 6f 2f 69 6d 67 2f 6c 61 6e 64 69 6e 67 2d 69 6d 67 2f 62 75 79 2d 62 69 74 63 6f 69 6e 73 2e 70 6e 67 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 66 62 3a 61 70 70 5f 69 64 22 20 63 6f 6e 74 65 6e 74 3d 22 37 31 37 30 36 31 38 34 39 38 39 36 31 31 36 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 43 45 58 2e 49 4f 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 42 75 79 20 42 69 74 63 6f 69 6e 20 77 69 74 68 20 43 72 65 64 69 74 20 6f 72 20 44 65 62 69 74 20 43 61 72 64 20 49 6e 73 74 61 6e 74 6c 79 20 2d 20 43 45 58 2e 49 Data Ascii: https://static.cex.io/img/landing-img/buy-bitcoins.png" /><meta property="fb:app_id" content="717061849896116" /><meta property="og:site_name" content="CEX.IO" /><meta property="og:title" content="Buy Bitcoin with Credit or Debit Card Instantly - CEX.I
2024-03-29 13:44:52 UTC	1369	IN	Data Raw: 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 31 38 30 78 31 38 30 22 20 68 72 65 66 3d 22 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2f 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 2e 70 6e 67 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 73 69 7a 65 73 3d 22 33 32 78 33 32 22 20 68 72 65 66 3d 22 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2f 66 61 76 69 63 6f 6e 2d 33 32 78 33 32 2e 70 6e 67 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 Data Ascii: rtcut icon" href="/img/favicon/favicon.ico" type="image/x-icon"><link rel="apple-touch-icon" sizes="180x180" href="/img/favicon/apple-touch-icon.png"><link rel="icon" type="image/png" sizes="32x32" href="/img/favicon/favicon-32x32.png"><link rel="icon"
2024-03-29 13:44:52 UTC	1369	IN	Data Raw: 6a 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 64 6c 3d 6c 21 3d 27 64 61 74 61 4c 61 79 65 72 27 3f 27 26 6c 3d 27 2b 6c 3a 27 27 3b 6a 2e 61 73 79 6e 63 3d 74 72 75 65 3b 6a 2e 73 72 63 3d 0a 20 20 20 20 20 20 20 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 6d 2e 6a 73 3f 69 64 3d 27 2b 69 2b 64 6c 3b 66 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6a 2c 66 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 64 61 74 61 4c 61 79 65 72 27 2c 27 47 54 4d 2d 35 39 33 54 44 44 44 27 29 3b 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 6e 6f 73 Data Ascii: j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src= 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f); })(window,document,'script','dataLayer','GTM-593TDDD');</script></head><body><nos
2024-03-29 13:44:52 UTC	1369	IN	Data Raw: 3e 48 6f 77 20 74 6f 20 42 75 79 20 42 69 74 63 6f 69 6e 20 77 69 74 68 20 43 72 65 64 69 74 20 6f 72 20 44 65 62 69 74 20 43 61 72 64 3c 2f 68 31 3e 3c 70 20 63 6c 61 73 73 3d 22 63 65 78 2d 75 69 2d 70 61 72 61 67 72 61 70 68 20 63 65 78 2d 75 69 2d 70 61 72 61 67 72 61 70 68 2d 6d 20 63 65 78 2d 75 69 2d 70 61 72 61 67 72 61 70 68 2d 6c 65 66 74 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 65 78 2d 75 69 2d 70 61 72 61 67 72 61 70 68 20 63 65 78 2d 75 69 2d 70 61 72 61 67 72 61 70 68 2d 6d 20 63 65 78 2d 75 69 2d 70 61 72 61 67 72 61 70 68 2d 6c 65 66 74 22 3e 49 6e 20 74 68 65 20 65 61 72 6c 79 20 64 61 79 73 20 6f 66 20 42 69 74 63 6f 69 6e 20 64 65 76 65 6c 6f 70 6d 65 6e 74 2c 20 63 72 79 70 74 6f 63 75 72 72 65 6e 63 79 20 77 61 73 20 74 72 61 Data Ascii: >How to Buy Bitcoin with Credit or Debit Card</h1><p class="cex-ui-paragraph cex-ui-paragraph-m cex-ui-paragraph-left"><span class="cex-ui-paragraph cex-ui-paragraph-m cex-ui-paragraph-left">In the early days of Bitcoin development, cryptocurrency was tra
2024-03-29 13:44:52 UTC	1369	IN	Data Raw: 65 78 2d 75 69 2d 73 65 63 74 69 6f 6e 2d 62 67 2d 67 72 65 79 20 6d 61 69 6e 2d 73 65 63 74 69 6f 6e 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 65 78 2d 75 69 2d 73 65 63 74 69 6f 6e 2d 63 6f 6e 74 65 6e 74 22 3e 3c 70 20 63 6c 61 73 73 3d 22 63 65 78 2d 75 69 2d 70 61 72 61 67 72 61 70 68 20 63 65 78 2d 75 69 2d 70 61 72 61 67 72 61 70 68 2d 6d 20 63 65 78 2d 75 69 2d 70 61 72 61 67 72 61 70 68 2d 6c 65 66 74 22 3e 43 45 58 2e 49 4f 20 73 75 70 70 6f 72 74 73 20 6d 75 6c 74 69 70 6c 65 20 70 61 79 6d 65 6e 74 20 6d 65 74 68 6f 64 73 20 66 6f 72 20 70 75 72 63 68 61 73 69 6e 67 20 63 72 79 70 74 6f 63 75 72 72 65 6e 63 69 65 73 2e 20 57 68 65 74 68 65 72 20 79 6f 75 20 62 75 79 20 62 69 74 63 6f 69 6e 20 77 69 74 68 20 61 20 63 72 65 64 69 74 20 63 61 Data Ascii: ex-ui-section-bg-grey main-section"><div class="cex-ui-section-content"><p class="cex-ui-paragraph cex-ui-paragraph-m cex-ui-paragraph-left">CEX.IO supports multiple payment methods for purchasing cryptocurrencies. Whether you buy bitcoin with a credit ca
2024-03-29 13:44:52 UTC	1369	IN	Data Raw: 73 74 61 74 75 73 20 61 73 20 61 20 4d 6f 6e 65 79 20 53 65 72 76 69 63 65 73 20 42 75 73 69 6e 65 73 73 20 69 6e 20 3c 2f 73 70 61 6e 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 69 6e 63 65 6e 2e 67 6f 76 2f 6d 73 62 2d 72 65 67 69 73 74 72 61 6e 74 2d 73 65 61 72 63 68 22 20 63 6c 61 73 73 3d 22 63 65 78 2d 75 69 2d 6c 69 6e 6b 20 63 65 78 2d 75 69 2d 6c 69 6e 6b 2d 6d 22 3e 46 69 6e 43 45 4e 20 28 55 2e 53 2e 29 3c 2f 61 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 65 78 2d 75 69 2d 70 61 72 61 67 72 61 70 68 20 63 65 78 2d 75 69 2d 70 61 72 61 67 72 61 70 68 2d 6d 20 63 65 78 2d 75 69 2d 70 61 72 61 67 72 61 70 68 2d 6c 65 66 74 22 3e 2e 20 43 45 58 2e 49 4f 20 6f 66 66 65 72 73 20 68 69 67 68 6c 79 20 73 65 63 75 72 65 20 73 Data Ascii: status as a Money Services Business in </span><a href="https://www.fincen.gov/msb-registrant-search" class="cex-ui-link cex-ui-link-m">FinCEN (U.S.)</a><span class="cex-ui-paragraph cex-ui-paragraph-m cex-ui-paragraph-left">. CEX.IO offers highly secure s
2024-03-29 13:44:52 UTC	1369	IN	Data Raw: 20 6d 65 74 68 6f 64 73 20 66 6f 72 20 62 75 79 69 6e 67 20 62 69 74 63 6f 69 6e 20 69 6e 73 74 61 6e 74 6c 79 2c 20 6d 61 6b 69 6e 67 20 61 20 70 75 72 63 68 61 73 65 20 77 69 74 68 20 61 20 63 72 65 64 69 74 20 6f 72 20 64 65 62 69 74 20 63 61 72 64 20 69 73 20 74 68 65 20 6d 6f 73 74 20 61 74 74 72 61 63 74 69 76 65 2e 20 57 69 74 68 20 43 45 58 2e 49 4f 2c 20 79 6f 75 20 63 61 6e 20 75 73 65 20 61 6e 79 20 56 69 73 61 20 6f 72 20 4d 61 73 74 65 72 63 61 72 64 20 63 72 65 64 69 74 20 63 61 72 64 20 69 73 73 75 65 64 20 69 6e 20 61 6e 79 20 63 75 72 72 65 6e 63 79 2e 20 54 68 65 20 70 6c 61 74 66 6f 72 6d 20 77 69 6c 6c 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 63 6f 6e 76 65 72 74 20 74 68 65 20 63 75 72 72 65 6e 63 79 20 79 6f 75 20 65 6e 74 65 72 Data Ascii: methods for buying bitcoin instantly, making a purchase with a credit or debit card is the most attractive. With CEX.IO, you can use any Visa or Mastercard credit card issued in any currency. The platform will automatically convert the currency you enter
2024-03-29 13:44:52 UTC	1369	IN	Data Raw: 48 6f 77 65 76 65 72 2c 20 62 61 6e 6b 20 74 72 61 6e 73 66 65 72 73 20 6d 61 79 20 74 61 6b 65 20 61 20 6c 69 74 74 6c 65 20 6c 6f 6e 67 65 72 20 74 68 61 6e 20 63 61 72 64 20 74 72 61 6e 73 61 63 74 69 6f 6e 73 2e 20 59 6f 75 20 6d 75 73 74 20 63 6f 6d 70 6c 65 74 65 20 69 64 65 6e 74 69 74 79 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 74 6f 20 75 73 65 20 63 61 72 64 20 70 61 79 6d 65 6e 74 73 2c 20 61 6e 64 20 61 64 64 72 65 73 73 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 66 6f 72 20 62 61 6e 6b 20 74 72 61 6e 73 66 65 72 73 2e 3c 2f 70 3e 3c 68 32 20 63 6c 61 73 73 3d 22 63 65 78 2d 75 69 2d 74 69 74 6c 65 20 63 65 78 2d 75 69 2d 74 69 74 6c 65 2d 78 6c 20 63 65 78 2d 75 69 2d 74 69 74 6c 65 2d 62 6f 6c 64 20 63 65 78 2d 75 69 2d 74 69 74 6c 65 2d 63 Data Ascii: However, bank transfers may take a little longer than card transactions. You must complete identity verification to use card payments, and address verification for bank transfers.</p><h2 class="cex-ui-title cex-ui-title-xl cex-ui-title-bold cex-ui-title-c
2024-03-29 13:44:52 UTC	1369	IN	Data Raw: 61 6e 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 22 61 70 70 2d 6c 69 73 74 2d 69 74 65 6d 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 65 78 2d 75 69 2d 70 61 72 61 67 72 61 70 68 20 63 65 78 2d 75 69 2d 70 61 72 61 67 72 61 70 68 2d 6d 20 63 65 78 2d 75 69 2d 70 61 72 61 67 72 61 70 68 2d 6c 65 66 74 22 3e 41 63 63 65 73 73 20 74 6f 20 61 64 64 69 74 69 6f 6e 61 6c 20 63 72 79 70 74 6f 20 70 72 6f 64 75 63 74 73 20 6c 69 6b 65 20 73 74 61 6b 69 6e 67 2c 20 73 61 76 69 6e 67 73 2c 20 61 6e 64 20 6c 6f 61 6e 73 3b 3c 2f 73 70 61 6e 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 22 61 70 70 2d 6c 69 73 74 2d 69 74 65 6d 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 65 78 2d 75 69 2d 70 61 72 61 67 72 61 70 68 20 63 65 78 2d 75 69 2d 70 61 72 61 Data Ascii: an></li><li class="app-list-item"><span class="cex-ui-paragraph cex-ui-paragraph-m cex-ui-paragraph-left">Access to additional crypto products like staking, savings, and loans;</span></li><li class="app-list-item"><span class="cex-ui-paragraph cex-ui-para

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49704	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:54 UTC	561	OUT	GET /landings/css/SeoBuyBitcoinForUsd.css?v=1.8.83 HTTP/1.1 Host: static.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:54 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:54 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cf-Bgj: minify Cf-Polished: origSize=66609 etag: W/"65fb4868-10431" last-modified: Wed, 20 Mar 2024 20:34:48 GMT strict-transport-security: max-age=0; includeSubDomains vary: Accept-Encoding Cache-Control: max-age=18000 CF-Cache-Status: HIT Age: 1517 X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c1b481157be-IAD
2024-03-29 13:44:54 UTC	899	IN	Data Raw: 37 64 63 65 0d 0a 68 74 6d 6c 2c 62 6f 64 79 2c 64 69 76 2c 73 70 61 6e 2c 61 70 70 6c 65 74 2c 6f 62 6a 65 63 74 2c 69 66 72 61 6d 65 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 70 2c 62 6c 6f 63 6b 71 75 6f 74 65 2c 70 72 65 2c 61 2c 61 62 62 72 2c 61 63 72 6f 6e 79 6d 2c 61 64 64 72 65 73 73 2c 62 69 67 2c 63 69 74 65 2c 63 6f 64 65 2c 64 65 6c 2c 64 66 6e 2c 69 6d 67 2c 69 6e 73 2c 6b 62 64 2c 71 2c 73 2c 73 61 6d 70 2c 73 6d 61 6c 6c 2c 73 74 72 69 6b 65 2c 73 75 62 2c 73 75 70 2c 74 74 2c 76 61 72 2c 62 2c 75 2c 69 2c 63 65 6e 74 65 72 2c 64 6c 2c 64 74 2c 64 64 2c 6f 6c 2c 75 6c 2c 6c 69 2c 66 69 65 6c 64 73 65 74 2c 66 6f 72 6d 2c 6c 61 62 65 6c 2c 6c 65 67 65 6e 64 2c 74 61 62 6c 65 2c 63 61 70 74 69 6f 6e 2c 74 62 6f 64 79 2c 74 66 Data Ascii: 7dcehtml,body,div,span,applet,object,iframe,h1,h2,h3,h4,h5,h6,p,blockquote,pre,a,abbr,acronym,address,big,cite,code,del,dfn,img,ins,kbd,q,s,samp,small,strike,sub,sup,tt,var,b,u,i,center,dl,dt,dd,ol,ul,li,fieldset,form,label,legend,table,caption,tbody,tf
2024-03-29 13:44:54 UTC	1369	IN	Data Raw: 69 6e 65 2d 68 65 69 67 68 74 2d 6d 61 69 6e 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 65 78 74 2d 63 6f 6c 6f 72 2d 6d 61 69 6e 29 7d 6d 61 69 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 7d 3a 72 6f 6f 74 7b 2d 2d 62 67 2d 63 6f 6c 6f 72 2d 77 68 69 74 65 3a 20 23 46 46 46 3b 2d 2d 62 67 2d 63 6f 6c 6f 72 2d 67 72 65 79 3a 20 23 46 37 46 38 46 41 3b 2d 2d 74 65 78 74 2d 63 6f 6c 6f 72 2d 6d 61 69 6e 3a 20 23 32 36 33 37 34 43 3b 2d 2d 74 65 78 74 2d 63 6f 6c 6f 72 2d 6d 61 69 6e 2d 61 63 74 69 76 65 3a 20 23 33 41 34 45 36 37 3b 2d 2d 74 65 78 74 2d 63 6f 6c 6f 72 2d 73 65 63 6f 6e 64 61 72 79 3a 20 23 37 31 38 35 39 43 3b 2d 2d 74 65 78 74 2d 63 6f 6c 6f 72 2d 73 65 63 6f 6e 64 61 72 79 2d 64 61 Data Ascii: ine-height-main);color:var(--text-color-main)}main{display:block;overflow-x:hidden}:root{--bg-color-white: #FFF;--bg-color-grey: #F7F8FA;--text-color-main: #26374C;--text-color-main-active: #3A4E67;--text-color-secondary: #71859C;--text-color-secondary-da
2024-03-29 13:44:54 UTC	1369	IN	Data Raw: 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 35 35 2c 2e 30 35 2c 2e 38 35 35 2c 2e 30 36 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 35 35 2c 2e 30 35 2c 2e 38 35 35 2c 2e 30 36 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 33 30 70 78 2c 30 29 7d 37 30 25 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 35 35 2c 2e 30 35 2c 2e 38 35 35 2c 2e 30 36 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 35 35 2c 2e 30 35 2c 2e 38 35 35 2c 2e 30 36 29 3b 74 Data Ascii: on:cubic-bezier(.755,.05,.855,.06);animation-timing-function:cubic-bezier(.755,.05,.855,.06);transform:translate3d(0,-30px,0)}70%{-webkit-animation-timing-function:cubic-bezier(.755,.05,.855,.06);animation-timing-function:cubic-bezier(.755,.05,.855,.06);t
2024-03-29 13:44:54 UTC	1369	IN	Data Raw: 6f 6e 2d 6e 61 6d 65 3a 70 75 6c 73 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 70 75 6c 73 65 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 72 75 62 62 65 72 42 61 6e 64 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 29 7d 33 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 32 35 2c 2e 37 35 2c 31 29 7d 34 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 2e 37 35 2c 31 2e 32 35 2c 31 29 7d 35 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 31 35 2c 2e 38 35 2c 31 29 7d 36 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 2e 39 35 2c 31 2e 30 35 2c 31 29 7d 37 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 30 35 2c 2e 39 35 2c Data Ascii: on-name:pulse;animation-name:pulse}@-webkit-keyframes rubberBand{0%{transform:scaleX(1)}30%{transform:scale3d(1.25,.75,1)}40%{transform:scale3d(.75,1.25,1)}50%{transform:scale3d(1.15,.85,1)}65%{transform:scale3d(.95,1.05,1)}75%{transform:scale3d(1.05,.95,
2024-03-29 13:44:54 UTC	1369	IN	Data Raw: 33 31 2e 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 33 70 78 29 20 72 6f 74 61 74 65 59 28 2d 35 64 65 67 29 7d 34 33 2e 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 32 70 78 29 20 72 6f 74 61 74 65 59 28 33 64 65 67 29 7d 35 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 7d 7d 2e 68 65 61 64 53 68 61 6b 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 68 65 61 64 53 68 61 6b 65 3b 61 6e 69 6d Data Ascii: 31.5%{transform:translateX(-3px) rotateY(-5deg)}43.5%{transform:translateX(2px) rotateY(3deg)}50%{transform:translateX(0)}}.headShake{-webkit-animation-timing-function:ease-in-out;animation-timing-function:ease-in-out;-webkit-animation-name:headShake;anim
2024-03-29 13:44:54 UTC	1369	IN	Data Raw: 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 35 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 28 2d 33 64 65 67 29 7d 36 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 28 32 64 65 67 29 7d 37 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 28 2d 31 64 65 67 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 77 6f 62 62 6c 65 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 31 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 32 35 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 28 2d 35 64 65 67 29 7d Data Ascii: ranslate3d(-15%,0,0) rotate(-3deg)}60%{transform:translate3d(10%,0,0) rotate(2deg)}75%{transform:translate3d(-5%,0,0) rotate(-1deg)}to{transform:translateZ(0)}}@keyframes wobble{0%{transform:translateZ(0)}15%{transform:translate3d(-25%,0,0) rotate(-5deg)}
2024-03-29 13:44:54 UTC	1369	IN	Data Raw: 65 67 29 7d 7d 2e 6a 65 6c 6c 6f 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 6a 65 6c 6c 6f 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 6a 65 6c 6c 6f 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 68 65 61 72 74 42 65 61 74 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 31 34 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 33 29 7d 32 38 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 34 32 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 33 29 7d 37 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 68 65 61 72 74 42 65 61 74 7b Data Ascii: eg)}}.jello{-webkit-animation-name:jello;animation-name:jello;transform-origin:center}@-webkit-keyframes heartBeat{0%{transform:scale(1)}14%{transform:scale(1.3)}28%{transform:scale(1)}42%{transform:scale(1.3)}70%{transform:scale(1)}}@keyframes heartBeat{
2024-03-29 13:44:54 UTC	1369	IN	Data Raw: 6e 63 65 49 6e 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 37 35 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 37 35 73 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 62 6f 75 6e 63 65 49 6e 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 62 6f 75 6e 63 65 49 6e 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 49 6e 44 6f 77 6e 7b 30 25 2c 36 30 25 2c 37 35 25 2c 39 30 25 2c 74 6f 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 Data Ascii: nceIn{-webkit-animation-duration:.75s;animation-duration:.75s;-webkit-animation-name:bounceIn;animation-name:bounceIn}@-webkit-keyframes bounceInDown{0%,60%,75%,90%,to{-webkit-animation-timing-function:cubic-bezier(.215,.61,.355,1);animation-timing-functi
2024-03-29 13:44:54 UTC	1369	IN	Data Raw: 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 29 7d 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 33 30 30 30 70 78 2c 30 2c 30 29 7d 36 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 32 35 70 78 2c 30 2c 30 29 7d 37 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 70 78 2c 30 2c 30 29 7d 39 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 35 70 78 2c 30 2c 30 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 Data Ascii: .215,.61,.355,1);animation-timing-function:cubic-bezier(.215,.61,.355,1)}0%{opacity:0;transform:translate3d(-3000px,0,0)}60%{opacity:1;transform:translate3d(25px,0,0)}75%{transform:translate3d(-10px,0,0)}90%{transform:translate3d(5px,0,0)}to{transform:tra
2024-03-29 13:44:54 UTC	1369	IN	Data Raw: 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 32 30 70 78 2c 30 29 7d 37 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 31 30 70 78 2c 30 29 7d 39 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 35 70 78 2c 30 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 49 6e 55 70 7b 30 25 2c 36 30 25 2c 37 35 25 2c 39 30 25 2c 74 6f 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d Data Ascii: acity:1;transform:translate3d(0,-20px,0)}75%{transform:translate3d(0,10px,0)}90%{transform:translate3d(0,-5px,0)}to{transform:translateZ(0)}}@keyframes bounceInUp{0%,60%,75%,90%,to{-webkit-animation-timing-function:cubic-bezier(.215,.61,.355,1);animation-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49706	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:54 UTC	536	OUT	GET /landings/ui-components.js?v=1.8.83 HTTP/1.1 Host: static.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:54 UTC	485	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:54 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cf-Bgj: minify Cf-Polished: origSize=720078 etag: W/"65fb4868-afcce" last-modified: Wed, 20 Mar 2024 20:34:48 GMT strict-transport-security: max-age=0; includeSubDomains vary: Accept-Encoding Cache-Control: max-age=18000 CF-Cache-Status: HIT Age: 3861 X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c1b5cb99c2b-IAD
2024-03-29 13:44:54 UTC	884	IN	Data Raw: 37 64 62 37 0d 0a 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 30 5d 2c 7b 31 30 36 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 65 2e 65 78 70 6f 72 74 73 3d 28 6e 3d 72 28 30 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 38 31 34 38 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 63 57 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 7d 2c 53 48 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 7d 2c 5a 50 3a 66 75 6e 63 74 Data Ascii: 7db7(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[0],{1069:function(e,t,r){var n;"undefined"!=typeof self&&self,e.exports=(n=r(0),function(){var e={81486:function(e,t,r){"use strict";r.d(t,{cW:function(){return j},SH:function(){return O},ZP:funct
2024-03-29 13:44:54 UTC	1369	IN	Data Raw: 65 74 75 72 6e 3b 75 3d 21 31 7d 65 6c 73 65 20 66 6f 72 28 3b 21 28 75 3d 28 6e 3d 69 2e 63 61 6c 6c 28 72 29 29 2e 64 6f 6e 65 29 26 26 28 63 2e 70 75 73 68 28 6e 2e 76 61 6c 75 65 29 2c 63 2e 6c 65 6e 67 74 68 21 3d 3d 74 29 3b 75 3d 21 30 29 3b 7d 63 61 74 63 68 28 65 29 7b 6c 3d 21 30 2c 6f 3d 65 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 69 66 28 21 75 26 26 6e 75 6c 6c 21 3d 72 2e 72 65 74 75 72 6e 26 26 28 61 3d 72 2e 72 65 74 75 72 6e 28 29 2c 4f 62 6a 65 63 74 28 61 29 21 3d 3d 61 29 29 72 65 74 75 72 6e 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 6c 29 74 68 72 6f 77 20 6f 7d 7d 72 65 74 75 72 6e 20 63 7d 7d 28 65 2c 74 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 72 Data Ascii: eturn;u=!1}else for(;!(u=(n=i.call(r)).done)&&(c.push(n.value),c.length!==t);u=!0);}catch(e){l=!0,o=e}finally{try{if(!u&&null!=r.return&&(a=r.return(),Object(a)!==a))return}finally{if(l)throw o}}return c}}(e,t)\|\|function(e,t){if(e){if("string"==typeof e)r
2024-03-29 13:44:54 UTC	1369	IN	Data Raw: 64 69 61 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2e 73 76 67 22 29 3a 69 7c 7c 6e 75 6c 6c 2c 70 61 72 73 65 4d 65 74 68 6f 64 3a 22 74 65 78 74 22 7d 29 2c 4f 3d 67 2e 6c 6f 61 64 65 64 44 61 74 61 2c 77 3d 67 2e 69 73 4c 6f 61 64 69 6e 67 2c 53 3d 67 2e 69 73 45 72 72 6f 72 3b 6f 28 29 2e 75 73 65 45 66 66 65 63 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 31 3d 3d 3d 77 26 26 21 31 3d 3d 3d 53 29 7b 76 61 72 20 65 3d 4f 2e 72 65 70 6c 61 63 65 28 2f 3c 73 76 67 2e 2a 3e 2f 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 5c 2f 73 76 67 2e 2a 3e 2f 2c 22 22 29 2c 74 3d 28 4f 2e 6d 61 74 63 68 28 2f 76 69 65 77 42 6f 78 3d 5b 27 22 5d 28 5b 5e 27 22 5d 2a 29 5b 27 22 5d 2f 29 7c 7c 5b 5d 29 5b 31 5d 3b 69 66 28 74 29 76 28 74 29 3b 65 6c 73 65 7b Data Ascii: dia/").concat(r,".svg"):i\|\|null,parseMethod:"text"}),O=g.loadedData,w=g.isLoading,S=g.isError;o().useEffect((function(){if(!1===w&&!1===S){var e=O.replace(/<svg.>/,"").replace(/<\/svg.>/,""),t=(O.match(/viewBox=['"]([^'"]*)['"]/)\|\|[])[1];if(t)v(t);else{
2024-03-29 13:44:54 UTC	1369	IN	Data Raw: 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 2e 22 29 7d 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 65 29 7d 28 65 2c 22 73 74 72 69 6e 67 22 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 3d 76 28 74 29 3f 74 3a 53 74 72 69 6e 67 28 74 29 7d 28 74 29 29 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 72 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 72 2c 65 7d 76 61 72 20 4f 3d 7b 74 65 78 74 3a 22 74 65 78 74 22 2c 6c 69 6e 6b 3a 22 6c 69 6e 6b 22 2c 69 63 6f 6e 3a 22 69 63 6f 6e 22 2c 62 75 74 74 6f 6e 3a 22 62 75 74 74 6f 6e 22 2c 69 63 6f 6e 42 75 74 74 6f 6e 3a 22 69 63 6f 6e 2d Data Ascii: rimitive value.")}return String(e)}(e,"string");return"symbol"===v(t)?t:String(t)}(t))in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}var O={text:"text",link:"link",icon:"icon",button:"button",iconButton:"icon-
2024-03-29 13:44:54 UTC	1369	IN	Data Raw: 61 6e 6b 22 3a 6e 75 6c 6c 2c 6f 6e 4d 6f 75 73 65 44 6f 77 6e 3a 5f 2c 6f 6e 43 6c 69 63 6b 3a 4c 2c 64 69 73 61 62 6c 65 64 3a 6a 2c 72 65 6c 3a 53 2c 72 65 66 3a 74 7d 2c 76 6f 69 64 20 30 21 3d 3d 69 26 26 6f 28 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6d 2c 7b 6e 61 6d 65 3a 69 2c 63 6c 61 73 73 4e 61 6d 65 3a 28 30 2c 6c 2e 5a 29 28 5b 22 69 63 6f 6e 22 2c 6e 21 3d 3d 4f 2e 69 63 6f 6e 42 75 74 74 6f 6e 26 26 22 69 63 6f 6e 2d 6c 65 66 74 22 5d 29 7d 29 2c 63 2c 76 6f 69 64 20 30 21 3d 3d 75 26 26 6f 28 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6d 2c 7b 6e 61 6d 65 3a 75 2c 63 6c 61 73 73 4e 61 6d 65 3a 28 30 2c 6c 2e 5a 29 28 5b 22 69 63 6f 6e 22 2c 6e 21 3d 3d 4f 2e 69 63 6f 6e 42 75 74 74 6f 6e 26 26 22 69 63 6f 6e 2d 72 69 67 68 74 Data Ascii: ank":null,onMouseDown:_,onClick:L,disabled:j,rel:S,ref:t},void 0!==i&&o().createElement(m,{name:i,className:(0,l.Z)(["icon",n!==O.iconButton&&"icon-left"])}),c,void 0!==u&&o().createElement(m,{name:u,className:(0,l.Z)(["icon",n!==O.iconButton&&"icon-right
2024-03-29 13:44:54 UTC	1369	IN	Data Raw: 72 65 73 6f 75 72 63 65 73 22 2c 73 74 61 74 69 63 50 61 74 68 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 65 78 2e 69 6f 22 2c 6d 6f 62 69 6c 65 57 69 6e 64 6f 77 57 69 64 74 68 3a 22 34 32 35 22 2c 74 61 62 57 69 6e 64 6f 77 57 69 64 74 68 3a 22 37 36 39 22 2c 73 63 72 65 65 6e 57 69 6e 64 6f 77 57 69 64 74 68 3a 22 31 30 32 35 22 2c 62 69 67 53 63 72 65 65 6e 57 69 6e 64 6f 77 57 69 64 74 68 3a 22 31 34 34 31 22 2c 6d 65 64 69 61 54 79 70 65 3a 7b 69 6d 67 3a 22 69 6d 67 22 2c 76 69 64 65 6f 3a 22 76 69 64 65 6f 22 7d 2c 69 6d 61 67 65 53 74 79 6c 65 3a 7b 63 6f 6e 74 61 69 6e 3a 22 63 6f 6e 74 61 69 6e 22 2c 66 69 6c 6c 3a 22 66 69 6c 6c 22 7d 7d 7d 2c 34 39 32 31 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 Data Ascii: resources",staticPath:"https://static.cex.io",mobileWindowWidth:"425",tabWindowWidth:"769",screenWindowWidth:"1025",bigScreenWindowWidth:"1441",mediaType:{img:"img",video:"video"},imageStyle:{contain:"contain",fill:"fill"}}},49214:function(e,t){"use stric
2024-03-29 13:44:54 UTC	1369	IN	Data Raw: 6e 21 31 3b 69 2e 70 6f 70 28 29 2c 61 2e 70 6f 70 28 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 69 66 28 74 5b 6f 5d 21 3d 3d 6e 5b 6f 5d 29 72 65 74 75 72 6e 21 31 7d 7d 72 65 74 75 72 6e 21 30 7d 3b 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 31 29 74 68 72 6f 77 22 4e 65 65 64 20 74 77 6f 20 6f 72 20 6d 6f 72 65 20 6f 62 6a 65 63 74 73 20 74 6f 20 63 6f 6d 70 61 72 65 22 3b 66 6f 72 28 76 61 72 20 65 3d 31 2c 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 3c 74 3b 65 2b 2b 29 69 66 28 21 6e 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 3d 30 3f 76 6f 69 64 20 30 3a 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2c 65 3c 30 7c 7c 61 72 67 75 6d 65 6e 74 73 2e Data Ascii: n!1;i.pop(),a.pop();break;default:if(t[o]!==n[o])return!1}}return!0};t.default=function(){if(arguments.length<1)throw"Need two or more objects to compare";for(var e=1,t=arguments.length;e<t;e++)if(!n(arguments.length<=0?void 0:arguments[0],e<0\|\|arguments.
2024-03-29 13:44:54 UTC	1369	IN	Data Raw: 49 74 65 72 61 74 6f 72 22 2c 6c 3d 6f 2e 74 6f 53 74 72 69 6e 67 54 61 67 7c 7c 22 40 40 74 6f 53 74 72 69 6e 67 54 61 67 22 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 72 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 2c 65 5b 74 5d 7d 74 72 79 7b 73 28 7b 7d 2c 22 22 29 7d 63 61 74 63 68 28 65 29 7b 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 65 5b 74 5d 3d 72 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 2c 72 2c 6f 29 7b 76 61 72 20 69 3d 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 20 69 6e 73 74 61 6e 63 Data Ascii: Iterator",l=o.toStringTag\|\|"@@toStringTag";function s(e,t,r){return Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}),e[t]}try{s({},"")}catch(e){s=function(e,t,r){return e[t]=r}}function f(e,t,r,o){var i=t&&t.prototype instanc
2024-03-29 13:44:54 UTC	1369	IN	Data Raw: 69 66 28 22 63 6f 6d 70 6c 65 74 65 64 22 3d 3d 3d 6e 29 7b 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 6f 29 74 68 72 6f 77 20 69 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 66 6f 72 28 72 2e 6d 65 74 68 6f 64 3d 6f 2c 72 2e 61 72 67 3d 69 3b 3b 29 7b 76 61 72 20 61 3d 72 2e 64 65 6c 65 67 61 74 65 3b 69 66 28 61 29 7b 76 61 72 20 63 3d 45 28 61 2c 72 29 3b 69 66 28 63 29 7b 69 66 28 63 3d 3d 3d 64 29 63 6f 6e 74 69 6e 75 65 3b 72 65 74 75 72 6e 20 63 7d 7d 69 66 28 22 6e 65 78 74 22 3d 3d 3d 72 2e 6d 65 74 68 6f 64 29 72 2e 73 65 6e 74 3d 72 2e 5f 73 65 6e 74 3d 72 2e 61 72 67 3b 65 6c 73 65 20 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 72 2e 6d 65 74 68 6f 64 29 7b 69 66 28 22 73 75 73 70 65 6e 64 65 64 53 74 61 72 Data Ascii: if("completed"===n){if("throw"===o)throw i;return{value:void 0,done:!0}}for(r.method=o,r.arg=i;;){var a=r.delegate;if(a){var c=E(a,r);if(c){if(c===d)continue;return c}}if("next"===r.method)r.sent=r._sent=r.arg;else if("throw"===r.method){if("suspendedStar
2024-03-29 13:44:54 UTC	1369	IN	Data Raw: 61 6c 22 2c 64 65 6c 65 74 65 20 74 2e 61 72 67 2c 65 2e 63 6f 6d 70 6c 65 74 69 6f 6e 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 3d 5b 7b 74 72 79 4c 6f 63 3a 22 72 6f 6f 74 22 7d 5d 2c 65 2e 66 6f 72 45 61 63 68 28 78 2c 74 68 69 73 29 2c 74 68 69 73 2e 72 65 73 65 74 28 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 29 7b 69 66 28 65 29 7b 76 61 72 20 74 3d 65 5b 69 5d 3b 69 66 28 74 29 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 6e 65 78 74 29 72 65 74 75 72 6e 20 65 3b 69 66 28 21 69 73 4e 61 4e 28 65 2e 6c 65 6e 67 74 68 29 29 7b 76 61 72 20 6e 3d 2d 31 2c 6f 3d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 66 6f 72 28 3b 2b Data Ascii: al",delete t.arg,e.completion=t}function k(e){this.tryEntries=[{tryLoc:"root"}],e.forEach(x,this),this.reset(!0)}function T(e){if(e){var t=e[i];if(t)return t.call(e);if("function"==typeof e.next)return e;if(!isNaN(e.length)){var n=-1,o=function t(){for(;+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49708	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:54 UTC	542	OUT	GET /landings/SeoBuyBitcoinForUsd.js?v=1.8.83 HTTP/1.1 Host: static.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:55 UTC	482	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:55 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cf-Bgj: minify Cf-Polished: origSize=318004 etag: W/"65fb4868-4da34" last-modified: Wed, 20 Mar 2024 20:34:48 GMT strict-transport-security: max-age=0; includeSubDomains vary: Accept-Encoding Cache-Control: max-age=18000 CF-Cache-Status: REVALIDATED X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c1edce35a51-IAD
2024-03-29 13:44:55 UTC	887	IN	Data Raw: 37 64 62 61 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 72 2c 61 2c 6c 3d 74 5b 30 5d 2c 75 3d 74 5b 31 5d 2c 73 3d 74 5b 32 5d 2c 66 3d 30 2c 64 3d 5b 5d 3b 66 3c 6c 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 61 3d 6c 5b 66 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 69 2c 61 29 26 26 69 5b 61 5d 26 26 64 2e 70 75 73 68 28 69 5b 61 5d 5b 30 5d 29 2c 69 5b 61 5d 3d 30 3b 66 6f 72 28 72 20 69 6e 20 75 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 75 2c 72 29 26 26 28 65 5b 72 5d 3d 75 5b 72 5d 29 3b 66 6f 72 28 63 26 26 63 28 74 29 3b 64 2e 6c 65 6e 67 74 68 Data Ascii: 7dba!function(e){function t(t){for(var r,a,l=t[0],u=t[1],s=t[2],f=0,d=[];f<l.length;f++)a=l[f],Object.prototype.hasOwnProperty.call(i,a)&&i[a]&&d.push(i[a][0]),i[a]=0;for(r in u)Object.prototype.hasOwnProperty.call(u,r)&&(e[r]=u[r]);for(c&&c(t);d.length
2024-03-29 13:44:55 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 31 26 74 26 26 28 65 3d 61 28 65 29 29 2c 38 26 74 29 72 65 74 75 72 6e 20 65 3b 69 66 28 34 26 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 69 66 28 61 2e 72 28 6e 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 22 64 65 66 61 75 6c 74 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 65 7d 29 2c 32 26 74 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 65 29 61 2e 64 28 6e 2c 72 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e Data Ascii: nction(e,t){if(1&t&&(e=a(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(a.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)a.d(n,r,function(t){return
2024-03-29 13:44:55 UTC	1369	IN	Data Raw: 26 78 26 26 76 6f 69 64 20 30 21 3d 3d 78 5b 73 5d 29 26 26 6c 28 79 2c 73 29 7c 7c 28 66 3d 63 3f 78 5b 73 5d 3a 6e 5b 73 5d 2c 79 5b 73 5d 3d 70 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 78 5b 73 5d 3f 6e 5b 73 5d 3a 67 26 26 63 3f 6f 28 66 2c 72 29 3a 76 26 26 78 5b 73 5d 3d 3d 66 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 7b 73 77 69 74 63 68 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 6e 65 77 20 65 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 6e 65 77 20 65 28 74 29 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 6e 65 77 20 65 28 74 2c 6e 29 7d 72 65 74 Data Ascii: &x&&void 0!==x[s])&&l(y,s)\|\|(f=c?x[s]:n[s],y[s]=p&&"function"!=typeof x[s]?n[s]:g&&c?o(f,r):v&&x[s]==f?function(e){var t=function(t,n,r){if(this instanceof e){switch(arguments.length){case 0:return new e;case 1:return new e(t);case 2:return new e(t,n)}ret
2024-03-29 13:44:55 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 28 69 28 65 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 30 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 36 30 29 2c 69 3d 6e 28 33 36 29 3b 65 2e 65 78 70 6f 72 74 73 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 28 65 2c 69 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 21 30 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 Data Ascii: ction(e){return r(i(e))}},function(e,t){e.exports=function(e){try{return!!e()}catch(e){return!0}}},function(e,t){e.exports={}},function(e,t,n){var r=n(60),i=n(36);e.exports=Object.keys\|\|function(e){return r(e,i)}},function(e,t){e.exports=!0},function(e,t)
2024-03-29 13:44:55 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 31 30 35 29 28 21 30 29 3b 6e 28 35 37 29 28 53 74 72 69 6e 67 2c 22 53 74 72 69 6e 67 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f 74 3d 53 74 72 69 6e 67 28 65 29 2c 74 68 69 73 2e 5f 69 3d 30 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 74 68 69 73 2e 5f 74 2c 6e 3d 74 68 69 73 2e 5f 69 3b 72 65 74 75 72 6e 20 6e 3e 3d 74 2e 6c 65 6e 67 74 68 3f 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 3a 28 65 3d 72 28 74 2c 6e 29 2c 74 68 69 73 2e 5f 69 2b 3d 65 2e 6c 65 6e 67 74 68 2c 7b 76 61 6c 75 65 3a 65 2c 64 6f 6e 65 3a 21 31 7d 29 7d 29 29 7d 2c 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b Data Ascii: tion(e,t,n){"use strict";var r=n(105)(!0);n(57)(String,"String",(function(e){this._t=String(e),this._i=0}),(function(){var e,t=this._t,n=this._i;return n>=t.length?{value:void 0,done:!0}:(e=r(t,n),this._i+=e.length,{value:e,done:!1})}))},,function(e,t,n){
2024-03-29 13:44:55 UTC	1369	IN	Data Raw: 6e 27 74 20 63 61 6c 6c 20 6d 65 74 68 6f 64 20 6f 6e 20 20 22 2b 65 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 39 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 72 28 65 29 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 6e 2c 69 3b 69 66 28 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 65 2e 74 6f 53 74 72 69 6e 67 29 26 26 21 72 28 69 3d 6e 2e 63 61 6c 6c 28 65 29 29 29 72 65 74 75 72 6e 20 69 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 65 2e 76 61 6c 75 65 4f 66 29 26 26 21 72 28 69 3d 6e 2e 63 61 6c 6c 28 65 29 29 29 72 65 74 75 72 6e 20 69 3b 69 66 28 21 74 26 26 22 66 75 6e 63 74 69 6f 6e Data Ascii: n't call method on "+e);return e}},function(e,t,n){var r=n(9);e.exports=function(e,t){if(!r(e))return e;var n,i;if(t&&"function"==typeof(n=e.toString)&&!r(i=n.call(e)))return i;if("function"==typeof(n=e.valueOf)&&!r(i=n.call(e)))return i;if(!t&&"function
2024-03-29 13:44:55 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 33 29 2c 69 3d 6e 28 31 29 2c 6f 3d 6e 28 31 36 29 2c 61 3d 6e 28 33 39 29 2c 6c 3d 6e 28 38 29 2e 66 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 69 2e 53 79 6d 62 6f 6c 7c 7c 28 69 2e 53 79 6d 62 6f 6c 3d 6f 3f 7b 7d 3a 72 2e 53 79 6d 62 6f 6c 7c 7c 7b 7d 29 3b 22 5f 22 3d 3d 65 2e 63 68 61 72 41 74 28 30 29 7c 7c 65 20 69 6e 20 74 7c 7c 6c 28 74 2c 65 2c 7b 76 61 6c 75 65 3a 61 2e 66 28 65 29 7d 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 39 29 2c 69 3d 6e 28 33 29 2e 64 6f 63 75 6d 65 6e 74 2c 6f 3d 72 28 69 29 26 26 72 28 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e Data Ascii: tion(e,t,n){var r=n(3),i=n(1),o=n(16),a=n(39),l=n(8).f;e.exports=function(e){var t=i.Symbol\|\|(i.Symbol=o?{}:r.Symbol\|\|{});"_"==e.charAt(0)\|\|e in t\|\|l(t,e,{value:a.f(e)})}},function(e,t,n){var r=n(9),i=n(3).document,o=r(i)&&r(i.createElement);e.exports=fun
2024-03-29 13:44:55 UTC	1369	IN	Data Raw: 28 29 2c 65 2e 77 72 69 74 65 28 22 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 46 3d 4f 62 6a 65 63 74 3c 5c 2f 73 63 72 69 70 74 3e 22 29 2c 65 2e 63 6c 6f 73 65 28 29 2c 75 3d 65 2e 46 3b 72 2d 2d 3b 29 64 65 6c 65 74 65 20 75 2e 70 72 6f 74 6f 74 79 70 65 5b 6f 5b 72 5d 5d 3b 72 65 74 75 72 6e 20 75 28 29 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 65 3f 28 6c 2e 70 72 6f 74 6f 74 79 70 65 3d 72 28 65 29 2c 6e 3d 6e 65 77 20 6c 2c 6c 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 75 6c 6c 2c 6e 5b 61 5d 3d 65 29 3a 6e 3d 75 28 29 2c 76 6f 69 64 20 30 3d 3d 3d 74 3f 6e 3a 69 28 6e 2c 74 29 7d 7d 2c 2c 66 75 6e 63 74 69 Data Ascii: (),e.write("<script>document.F=Object<\/script>"),e.close(),u=e.F;r--;)delete u.prototype[o[r]];return u()};e.exports=Object.create\|\|function(e,t){var n;return null!==e?(l.prototype=r(e),n=new l,l.prototype=null,n[a]=e):n=u(),void 0===t?n:i(n,t)}},,functi
2024-03-29 13:44:55 UTC	1369	IN	Data Raw: 6f 6b 65 6e 22 7d 2c 68 6f 74 3a 7b 63 6f 64 65 3a 22 48 4f 54 22 2c 6e 61 6d 65 3a 22 48 6f 6c 6f 22 7d 2c 69 63 70 3a 7b 63 6f 64 65 3a 22 49 43 50 22 2c 6e 61 6d 65 3a 22 49 43 50 22 7d 2c 6b 61 76 61 3a 7b 63 6f 64 65 3a 22 4b 41 56 41 22 2c 6e 61 6d 65 3a 22 4b 61 76 61 22 7d 2c 6b 73 6d 3a 7b 63 6f 64 65 3a 22 4b 53 4d 22 2c 6e 61 6d 65 3a 22 4b 75 73 61 6d 61 22 7d 2c 6a 61 73 6d 79 3a 7b 63 6f 64 65 3a 22 4a 41 53 4d 59 22 2c 6e 61 6d 65 3a 22 4a 61 73 6d 79 22 7d 2c 6c 69 6e 6b 3a 7b 63 6f 64 65 3a 22 4c 49 4e 4b 22 2c 6e 61 6d 65 3a 22 4c 69 6e 6b 22 7d 2c 6c 74 63 3a 7b 63 6f 64 65 3a 22 4c 54 43 22 2c 6e 61 6d 65 3a 22 4c 69 74 65 63 6f 69 6e 22 7d 2c 6d 61 6e 61 3a 7b 63 6f 64 65 3a 22 4d 41 4e 41 22 2c 6e 61 6d 65 3a 22 44 65 63 65 6e 74 72 Data Ascii: oken"},hot:{code:"HOT",name:"Holo"},icp:{code:"ICP",name:"ICP"},kava:{code:"KAVA",name:"Kava"},ksm:{code:"KSM",name:"Kusama"},jasmy:{code:"JASMY",name:"Jasmy"},link:{code:"LINK",name:"Link"},ltc:{code:"LTC",name:"Litecoin"},mana:{code:"MANA",name:"Decentr
2024-03-29 13:44:55 UTC	1369	IN	Data Raw: 3a 7b 69 6e 64 65 78 3a 22 68 74 74 70 73 3a 2f 2f 63 65 78 69 6f 2e 70 61 67 65 2e 6c 69 6e 6b 2f 34 62 64 47 22 2c 6d 6f 62 69 6c 65 3a 22 68 74 74 70 73 3a 2f 2f 63 65 78 69 6f 2e 70 61 67 65 2e 6c 69 6e 6b 2f 34 62 64 47 22 2c 6d 6f 62 69 6c 65 4f 6c 64 3a 22 68 74 74 70 73 3a 2f 2f 63 65 78 69 6f 2e 70 61 67 65 2e 6c 69 6e 6b 2f 63 65 78 6d 6f 62 69 6c 65 22 2c 6d 6f 62 69 6c 65 4e 6f 74 69 66 69 65 72 3a 22 68 74 74 70 73 3a 2f 2f 63 65 78 69 6f 2e 70 61 67 65 2e 6c 69 6e 6b 2f 34 62 64 47 22 2c 61 70 70 53 74 6f 72 65 55 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 61 70 70 73 2e 61 70 70 6c 65 2e 63 6f 6d 2f 61 70 70 2f 61 70 70 6c 65 2d 73 74 6f 72 65 2f 69 64 31 30 34 37 32 32 35 30 31 36 3f 70 74 3d 31 30 35 36 31 34 38 30 31 26 63 74 3d 63 65 78 2d 77 Data Ascii: :{index:"https://cexio.page.link/4bdG",mobile:"https://cexio.page.link/4bdG",mobileOld:"https://cexio.page.link/cexmobile",mobileNotifier:"https://cexio.page.link/4bdG",appStoreUrl:"https://apps.apple.com/app/apple-store/id1047225016?pt=105614801&ct=cex-w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49705	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:55 UTC	555	OUT	GET /landings/css/ui-components.css?v=1.8.83 HTTP/1.1 Host: static.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:55 UTC	471	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:55 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cf-Bgj: minify Cf-Polished: origSize=151558 etag: W/"65fb4868-25006" last-modified: Wed, 20 Mar 2024 20:34:48 GMT strict-transport-security: max-age=0; includeSubDomains vary: Accept-Encoding Cache-Control: max-age=18000 CF-Cache-Status: HIT Age: 5266 X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c2199581782-IAD
2024-03-29 13:44:55 UTC	898	IN	Data Raw: 33 39 65 62 0d 0a 2e 63 65 78 2d 75 69 2d 62 75 74 74 6f 6e 7b 77 69 64 74 68 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 63 65 78 2d 75 69 2d 62 75 74 74 6f 6e 2d 62 69 67 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 36 70 78 3b 68 65 69 67 68 74 3a 36 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 36 70 78 7d 2e 63 65 78 2d 75 69 2d 62 75 74 74 6f 6e 2d 62 69 67 20 2e 63 65 78 2d 75 69 2d 69 63 6f 6e 7b 68 65 69 67 68 74 3a 32 34 70 78 3b 77 69 64 74 68 3a 32 34 70 78 7d 2e 63 65 78 2d 75 69 2d 62 75 74 74 6f 6e 2d 73 Data Ascii: 39eb.cex-ui-button{width:100%;display:flex;justify-content:center;align-items:center;cursor:pointer}.cex-ui-button-big{border-radius:16px;height:60px;font-size:18px;line-height:26px}.cex-ui-button-big .cex-ui-icon{height:24px;width:24px}.cex-ui-button-s
2024-03-29 13:44:55 UTC	1369	IN	Data Raw: 61 6e 73 6c 61 74 65 59 28 2d 31 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 70 78 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 62 63 62 64 37 7d 2e 63 65 78 2d 75 69 2d 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2d 63 6f 6e 74 61 69 6e 65 64 3a 61 63 74 69 76 65 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 33 64 63 65 37 7d 2e 63 65 78 2d 75 69 2d 62 75 74 74 6f 6e 2d 73 65 63 6f 6e 64 61 72 79 2d 6f 75 74 6c 69 6e 65 64 7b 62 6f 72 64 65 72 3a 31 2e 35 70 78 20 73 6f 6c 69 64 20 23 62 64 63 38 64 39 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 36 33 37 34 63 3b 74 72 61 6e 73 69 74 69 6f 6e Data Ascii: anslateY(-1px);transform:translateY(-1px);background-color:#2bcbd7}.cex-ui-button-primary-contained:active:not([disabled]){background-color:#43dce7}.cex-ui-button-secondary-outlined{border:1.5px solid #bdc8d9;background-color:#fff;color:#26374c;transition
2024-03-29 13:44:55 UTC	1369	IN	Data Raw: 6d 61 72 67 69 6e 3a 33 32 70 78 20 61 75 74 6f 20 30 3b 68 65 69 67 68 74 3a 36 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 34 32 36 70 78 29 7b 2e 63 65 78 2d 75 69 2d 66 6f 72 6d 2d 73 75 62 6d 69 74 2d 62 74 6e 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 30 70 78 7d 7d 2e 63 65 78 2d 75 69 2d 66 6f 72 6d 2d 69 6e 70 75 74 2d 65 72 72 6f 72 2d 74 65 78 74 7b 63 6f 6c 6f 72 3a 23 65 36 35 30 36 39 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 37 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4f 70 65 6e 20 53 61 6e 73 2c 73 65 72 69 66 7d 2e 63 65 78 Data Ascii: margin:32px auto 0;height:60px;font-size:18px}@media only screen and (min-width:426px){.cex-ui-form-submit-btn{margin-top:40px}}.cex-ui-form-input-error-text{color:#e65069;margin:0;padding:0;font-size:12px;line-height:17px;font-family:Open Sans,serif}.cex
2024-03-29 13:44:55 UTC	1369	IN	Data Raw: 78 29 3b 70 61 64 64 69 6e 67 3a 31 36 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 34 30 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 32 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4f 70 65 6e 20 53 61 6e 73 2c 73 65 72 69 66 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 34 32 36 70 78 29 7b 2e 63 65 78 2d 75 69 2d 66 6f 72 6d 2d 69 6e 70 75 74 2d 76 61 6c 69 64 61 74 69 6f 6e 2d 73 74 61 74 65 7b 72 69 67 68 74 3a 31 36 70 78 7d 7d 2e 63 65 78 2d 75 69 2d 66 6f 72 6d 2d 69 6e 70 75 74 2d 76 61 6c 69 64 61 74 69 6f 6e 2d 73 74 61 74 65 2d 69 Data Ascii: x);padding:16px;background:#fff;box-shadow:0 0 40px rgba(0,0,0,.1);border-radius:12px;font-family:Open Sans,serif;cursor:default}@media only screen and (min-width:426px){.cex-ui-form-input-validation-state{right:16px}}.cex-ui-form-input-validation-state-i
2024-03-29 13:44:55 UTC	1369	IN	Data Raw: 30 20 30 20 34 30 70 78 20 72 67 62 61 28 33 38 2c 35 35 2c 37 36 2c 2e 31 32 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 63 61 6c 63 28 31 30 30 25 20 2b 20 38 70 78 29 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 63 65 78 2d 75 69 2d 69 6e 70 75 74 2d 77 72 61 70 70 65 72 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 63 65 78 2d 75 69 2d 69 6e 70 75 74 2d 77 72 61 70 70 65 72 20 2e 63 65 78 2d 75 69 2d 69 6e 70 75 74 2d 63 6f 6d 70 6f 6e 65 6e 74 7b 68 65 69 67 68 74 3a 36 30 70 78 3b 6f 75 74 6c 69 6e Data Ascii: 0 0 40px rgba(38,55,76,.12);border-radius:12px;position:absolute;top:calc(100% + 8px);left:0;width:100%;z-index:1}.cex-ui-input-wrapper{width:100%;height:auto;display:block;position:relative}.cex-ui-input-wrapper .cex-ui-input-component{height:60px;outlin
2024-03-29 13:44:55 UTC	1369	IN	Data Raw: 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 70 61 64 64 69 6e 67 3a 30 20 38 70 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 31 36 70 78 2c 2d 38 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 31 36 70 78 2c 2d 38 70 78 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 37 70 78 7d 2e 63 65 78 2d 75 69 2d 69 6e 70 75 74 2d 77 72 61 70 70 65 72 20 2e 63 65 78 2d 75 69 2d 69 6e 70 75 74 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 65 72 72 6f 72 2c 2e 63 65 78 2d 75 69 2d 69 6e 70 75 74 2d 77 72 61 70 70 65 72 20 2e 63 65 78 2d 75 69 2d 69 6e 70 75 74 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 6d 75 6c 74 69 6c 69 6e 65 2d 65 72 72 6f 72 7b 62 6f Data Ascii: ;background-color:#fff;padding:0 8px;-webkit-transform:translate(16px,-8px);transform:translate(16px,-8px);font-size:12px;line-height:17px}.cex-ui-input-wrapper .cex-ui-input-component-error,.cex-ui-input-wrapper .cex-ui-input-component-multiline-error{bo
2024-03-29 13:44:55 UTC	1369	IN	Data Raw: 28 5b 64 69 73 61 62 6c 65 64 5d 29 7b 63 6f 6c 6f 72 3a 23 30 30 30 7d 2e 63 65 78 2d 75 69 2d 69 6e 70 75 74 2d 77 72 61 70 70 65 72 20 2e 63 65 78 2d 75 69 2d 69 6e 70 75 74 2d 6c 61 62 65 6c 2d 66 69 6c 6c 65 64 7b 63 6f 6c 6f 72 3a 23 36 36 37 63 39 39 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 70 61 64 64 69 6e 67 3a 30 20 38 70 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 31 36 70 78 2c 2d 38 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 31 36 70 78 2c 2d 38 70 78 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 37 70 78 7d 2e 63 65 78 2d 75 69 2d 69 6e 70 75 74 2d 77 72 61 70 70 65 72 20 2e 63 65 78 2d 75 69 2d Data Ascii: ([disabled]){color:#000}.cex-ui-input-wrapper .cex-ui-input-label-filled{color:#667c99;background-color:#fff;padding:0 8px;-webkit-transform:translate(16px,-8px);transform:translate(16px,-8px);font-size:12px;line-height:17px}.cex-ui-input-wrapper .cex-ui-
2024-03-29 13:44:55 UTC	1369	IN	Data Raw: 69 63 6f 6e 20 73 76 67 20 2a 7b 66 69 6c 6c 3a 23 65 37 66 39 66 30 7d 2e 54 6f 61 73 74 65 72 20 2e 63 65 78 2d 75 69 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 77 61 72 6e 69 6e 67 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 37 65 30 7d 2e 54 6f 61 73 74 65 72 20 2e 63 65 78 2d 75 69 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 77 61 72 6e 69 6e 67 20 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 69 63 6f 6e 20 73 76 67 7b 6d 61 78 2d 77 69 64 74 68 3a 32 30 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 54 6f 61 73 74 65 72 20 2e 63 65 78 2d 75 69 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 77 61 72 6e Data Ascii: icon svg *{fill:#e7f9f0}.Toaster .cex-ui-notification-warning{border-radius:12px;background-color:#fff7e0}.Toaster .cex-ui-notification-warning .notification-icon svg{max-width:20px;max-height:20px;height:auto;width:auto}.Toaster .cex-ui-notification-warn
2024-03-29 13:44:55 UTC	1369	IN	Data Raw: 36 37 63 39 39 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 69 6e 69 74 69 61 6c 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4f 70 65 6e 20 53 61 6e 73 2c 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 32 35 70 78 29 7b 2e 63 65 78 2d 75 69 2d 70 61 72 61 67 72 61 70 68 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 7d 2e 63 65 78 2d 75 69 2d 70 61 72 61 67 72 61 70 68 2d 6c 65 66 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 63 65 78 2d 75 69 2d 70 61 72 61 67 72 61 70 68 2d 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 63 65 78 2d 75 69 2d Data Ascii: 67c99;text-align:center;white-space:initial;font-family:Open Sans,serif;font-weight:400}@media only screen and (min-width:1025px){.cex-ui-paragraph{text-align:left}}.cex-ui-paragraph-left{text-align:left}.cex-ui-paragraph-center{text-align:center}.cex-ui-
2024-03-29 13:44:55 UTC	1369	IN	Data Raw: 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 32 70 78 7d 2e 63 65 78 2d 75 69 2d 6c 69 6e 6b 2d 73 6d 61 6c 6c 20 2e 63 65 78 2d 75 69 2d 69 63 6f 6e 2c 2e 63 65 78 2d 75 69 2d 74 65 78 74 2d 73 6d 61 6c 6c 20 2e 63 65 78 2d 75 69 2d 69 63 6f 6e 7b 68 65 69 67 68 74 3a 31 36 70 78 3b 77 69 64 74 68 3a 31 36 70 78 7d 2e 63 65 78 2d 75 69 2d 6c 69 6e 6b 2d 73 6d 61 6c 6c 20 2e 63 65 78 2d 75 69 2d 69 63 6f 6e 2d 6c 65 66 74 2c 2e 63 65 78 2d 75 69 2d 74 65 78 74 2d 73 6d 61 6c 6c 20 2e 63 65 78 2d 75 69 2d 69 63 6f 6e 2d 6c 65 66 74 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 7d 2e 63 65 78 2d 75 69 2d 6c 69 6e 6b 2d 73 6d 61 6c 6c 20 2e 63 65 78 2d 75 69 2d 69 63 6f 6e 2d 72 69 67 68 74 2c 2e 63 65 78 2d 75 69 2d 74 65 78 74 2d 73 6d 61 Data Ascii: :14px;line-height:22px}.cex-ui-link-small .cex-ui-icon,.cex-ui-text-small .cex-ui-icon{height:16px;width:16px}.cex-ui-link-small .cex-ui-icon-left,.cex-ui-text-small .cex-ui-icon-left{margin-right:8px}.cex-ui-link-small .cex-ui-icon-right,.cex-ui-text-sma

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49701	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:55 UTC	673	OUT	GET /is-user-logged-in HTTP/1.1 Host: cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/buy-bitcoins Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins
2024-03-29 13:44:55 UTC	1212	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:55 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 content-security-policy-report-only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; x-frame-options: SAMEORIGIN vary: Accept-Encoding access-control-allow-origin: access-control-allow-methods: POST, GET, OPTIONS set-cookie: cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; Path=/; HttpOnly; Secure; SameSite=None strict-transport-security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c2458086fe5-IAD
2024-03-29 13:44:55 UTC	53	IN	Data Raw: 32 66 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 64 61 74 61 22 3a 7b 22 69 73 55 73 65 72 4c 6f 67 67 65 64 49 6e 22 3a 66 61 6c 73 65 7d 7d 0d 0a Data Ascii: 2f{"status":"ok","data":{"isUserLoggedIn":false}}
2024-03-29 13:44:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49710	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:55 UTC	690	OUT	GET /bundles/scripts/bundleWidgetLoader.js HTTP/1.1 Host: static.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins
2024-03-29 13:44:56 UTC	453	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:56 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cf-Bgj: minify etag: W/"63723244-f0c" last-modified: Mon, 14 Nov 2022 12:19:16 GMT strict-transport-security: max-age=0; includeSubDomains vary: Accept-Encoding Cache-Control: max-age=18000 CF-Cache-Status: HIT Age: 4392 X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c267a3229b6-IAD
2024-03-29 13:44:56 UTC	916	IN	Data Raw: 66 30 63 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6f 72 69 67 69 6e 61 74 6f 72 22 29 7c 7c 22 63 65 78 22 2c 69 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 62 61 73 65 55 72 6c 22 29 7c 7c 22 68 74 74 70 73 3a 2f 2f 63 65 78 2e 69 6f 2f 22 2c 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 61 74 69 63 55 72 6c 22 29 7c 7c 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 65 78 2e 69 6f 2f 22 2c 6e 3d 64 6f 63 75 6d 65 6e Data Ascii: f0c!function(){var e=new XMLHttpRequest,t=document.currentScript.getAttribute("originator")\|\|"cex",i=document.currentScript.getAttribute("baseUrl")\|\|"https://cex.io/",a=document.currentScript.getAttribute("staticUrl")\|\|"https://static.cex.io/",n=documen
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 74 65 20 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 7d 20 31 30 30 25 20 7b 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 7d 7d 3c 2f 73 74 79 6c 65 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 37 30 37 35 37 44 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 35 37 2e 35 30 33 20 32 37 2e 33 34 68 2d 2e 33 35 6c 2d 38 2e 38 36 32 2e 30 32 2d 2e 34 33 2e 30 30 37 61 32 2e 36 34 36 20 32 2e 36 34 36 20 30 20 30 20 30 2d 32 2e 34 33 20 32 2e 36 34 32 20 32 2e 36 35 33 20 32 2e 36 35 33 20 30 20 30 20 30 20 32 2e 36 34 35 20 32 2e 36 35 32 68 39 2e 34 39 32 41 32 2e 36 36 38 20 32 2e 36 36 38 20 30 20 30 20 30 20 36 30 20 32 39 2e 39 39 38 61 32 2e 36 36 37 20 32 2e Data Ascii: te {0%{transform: rotate(0deg)} 100% {transform: rotate(360deg)}}</style><path fill="#70757D" fill-rule="evenodd" d="M57.503 27.34h-.35l-8.862.02-.43.007a2.646 2.646 0 0 0-2.43 2.642 2.653 2.653 0 0 0 2.645 2.652h9.492A2.668 2.668 0 0 0 60 29.998a2.667 2.
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 35 2d 2e 32 34 38 7a 22 20 6f 70 61 63 69 74 79 3d 22 2e 31 33 37 22 2f 3e 5c 6e 3c 2f 73 76 67 3e 27 2c 73 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6c 29 2c 65 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 34 3d 3d 74 68 69 73 2e 72 65 61 64 79 53 74 61 74 65 26 26 32 30 30 3d 3d 74 68 69 73 2e 73 74 61 74 75 73 29 7b 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 72 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 73 69 6e 67 6c 65 2d 62 75 6e 64 6c 65 2d 63 6f 6e 74 61 69 6e 65 72 22 2c 72 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 2c 22 6f 70 61 63 69 74 79 3a 20 30 22 29 2c 73 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 72 29 3b 76 61 72 20 65 3d Data Ascii: 5-.248z" opacity=".137"/>\n</svg>',s.appendChild(l),e.onreadystatechange=function(){if(4==this.readyState&&200==this.status){r=document.createElement("div"),r.className="single-bundle-container",r.setAttribute("style","opacity: 0"),s.appendChild(r);var e=
2024-03-29 13:44:56 UTC	205	IN	Data Raw: 73 63 72 69 70 74 22 29 3b 63 2e 72 65 6c 3d 22 73 63 72 69 70 74 22 2c 63 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 63 2e 73 72 63 3d 69 2b 22 73 63 72 69 70 74 73 2f 63 75 72 72 65 6e 63 79 50 72 6f 66 69 6c 65 46 6f 72 57 69 64 67 65 74 2f 22 2c 63 2e 6d 65 64 69 61 3d 22 61 6c 6c 22 2c 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 2c 22 6f 70 61 63 69 74 79 3a 20 31 22 29 2c 6c 2e 72 65 6d 6f 76 65 28 29 7d 2c 33 65 33 29 7d 28 29 3b 0d 0a Data Ascii: script");c.rel="script",c.type="text/javascript",c.src=i+"scripts/currencyProfileForWidget/",c.media="all",o.appendChild(c),setTimeout(function(){r.setAttribute("style","opacity: 1"),l.remove()},3e3)}();
2024-03-29 13:44:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49715	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:55 UTC	571	OUT	GET /static/resources/fonts/OpenSans-Bold.woff2 HTTP/1.1 Host: profile.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://cex.io sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://static.cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:56 UTC	450	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:56 GMT Content-Type: font/woff2 Content-Length: 46460 Connection: close last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: "65fb2453-b57c" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: HIT Age: 1495 Accept-Ranges: bytes X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c26df893ae4-IAD
2024-03-29 13:44:56 UTC	919	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 b5 7c 00 12 00 00 00 01 9d 38 00 00 b5 15 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 1b 20 1c 85 14 06 60 00 88 6e 08 81 2a 09 8f 60 11 0c 0a 85 9e 30 84 c9 58 0b 8e 58 00 01 36 02 24 03 9d 24 04 20 05 8c 09 07 be 05 0c 81 78 5b 4d 6a 91 00 6e d3 09 1a 50 bf db 06 0c f1 f7 95 d6 71 16 4c c6 2d 8f de 4c 05 09 b2 fd e6 8a 71 cc 2a c0 79 00 62 92 fa 55 d9 ff ff ff ff 1b 92 89 8c d9 25 e2 25 69 8b 05 a1 e0 ea 3a dd b6 7f 50 33 aa ee 08 b7 c4 4c 94 39 c1 6f 60 f5 25 07 2a 03 33 53 b1 a0 c8 06 b3 44 03 b9 92 4a b9 6f 9e 90 b1 21 02 25 56 ee 7b 12 de 8e 94 92 48 29 61 8f 73 cd 39 a3 44 66 42 e0 71 0f 44 b0 6d 1f 5b 93 87 e3 41 69 17 74 95 d3 2f e8 87 52 ab fb 53 d2 a8 2d 94 9b f2 Data Ascii: wOF2\|8?FFTM `n`0XX6$$ x[MjnPqL-LqybU%%i:P3L9o`%*3SDJo!%V{H)as9DfBqDm[Ait/RS-
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 3c b3 94 e1 8f 02 4a d3 0d a2 8f 32 b8 cf 12 c2 d0 13 2e fd fb c9 e3 7f c8 4d a3 a1 11 87 a8 91 38 51 cc 0e 3c f1 d6 49 df 7d 1f 7e 98 4c e6 f7 10 18 d4 73 7b 0b ae 50 e2 02 3e ef 15 c0 00 11 ed 02 3e e1 6c a3 22 bf c9 2c a6 e8 e7 ad d2 59 3d c3 0b d2 8a 0e 21 f6 41 e5 5f 0e b3 0b c2 37 f1 ef ad bc f0 d9 6c 4c 13 a5 a6 34 47 00 e4 59 87 57 c5 4d 9d b8 5c 88 f7 d5 9c a0 5f ce 0f de 92 84 fe 23 f5 39 5b 21 6b 98 48 7b 26 4d d7 fc 6e fb c3 08 94 47 28 5c 2d 48 b6 1a 2b b0 2f fd a5 31 73 d8 b2 f0 2f 64 00 65 0e 62 fc 00 c0 6c 69 55 d4 68 11 82 46 c6 09 db 38 6f 0e f7 79 dc e1 6f 7e 25 b0 7b 42 e0 d4 75 26 79 de 76 c5 fb 44 a1 f3 f9 77 7f e2 32 11 e0 a4 46 3b 78 13 a9 cb 89 26 1c 70 8c 3b bd bf fe fa 07 85 c9 4c 81 3d 54 4e 0c fc bd a9 56 69 37 81 96 20 3b c6 Data Ascii: <J2.M8Q<I}~Ls{P>>l",Y=!A_7lL4GYWM\_#9[!kH{&MnG(\-H+/1s/debliUhF8oyo~%{Bu&yvDw2F;x&p;L=TNVi7 ;
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 4b f8 0f c9 9e d5 59 86 ce 4f f3 98 9d af 9e d4 2c c7 0b a2 44 67 30 fd ac f9 1f 1d 11 00 42 30 82 62 b8 58 22 95 c9 15 4a 95 5a a3 d5 e9 0d 46 93 d9 62 b5 d9 1d 4e 97 db e3 25 53 a8 34 3a 83 c9 02 d9 1c 2e 8f 2f 10 6a eb e8 ea e9 1b 18 1a 19 9b 98 9a 99 5b 58 5a 41 00 77 c3 91 68 47 37 1f 22 81 44 21 53 69 0c 3a 93 c5 61 73 79 02 91 50 2c 95 28 15 2a 75 df fe 12 29 dc 57 27 df 6c d8 e7 32 95 50 8d 41 06 1a e8 d4 97 54 69 99 96 f3 25 66 7d ae 0a 95 db 5e 55 b2 9c ef ac 8e 6e fa d8 40 39 2b a5 37 91 be 92 8e 15 d4 6a 01 3a 36 62 65 c7 21 ec 3d a5 29 5d 02 e5 28 4b d9 fc 4f 2b 38 95 f9 92 a8 58 f9 2a d0 2a ad 96 90 1a f1 95 2b 11 9b 69 61 13 ad 34 39 f4 d1 6d 63 1b db 01 ee 61 0f 7b d9 cd 5b 44 69 a5 18 4d 65 6a 5b ca 1a d3 58 89 15 27 41 0c 10 9e 9f 64 fa Data Ascii: KYO,Dg0B0bX"JZFbN%S4:./j[XZAwhG7"D!Si:asyP,(u)W'l2PATi%f}^Un@9+7j:6be!=)](KO+8X*+ia49mca{[DiMej[X'Ad
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 5c ca f9 22 18 62 ed 12 86 59 69 57 6a c3 c8 86 94 0f f9 2d f4 e2 b4 d4 e9 60 5c de 8a 54 fa c3 a7 0d 89 09 08 0b 3e 10 21 3c 96 52 d1 cc 4f 7a 24 1c e1 e7 f1 40 8e ce 0b 27 7b 95 67 2a ff 8c cf 7f aa 8f 9b fb c6 17 fa 94 5b be f8 87 be 79 1f dd e5 a5 c1 13 15 fe fc d0 a1 01 1e 56 e4 57 90 5a 4c b0 0d e1 74 e1 9f 79 f5 b0 ba 28 4e 9f b3 23 d9 72 39 0f 46 2b ab 04 39 8d 32 ea b7 16 1d 13 e7 e2 b7 71 e0 03 ac e9 1d 47 ab 02 e5 b3 fb 9d 7d 85 33 17 e2 eb 94 88 2f df 0c 1c e4 cc 7e f4 ec 9e 7d 35 5b 76 09 6c 55 9d 36 e6 e2 d2 c4 d5 d1 4b 97 e8 4d 14 84 f0 09 9f e8 72 64 8d 9a 51 24 a1 d5 e3 1b 16 10 62 2b cf 5b 98 db f4 b3 b0 c2 72 89 a8 67 67 ce 1e 4b a4 6c 9c 5e b3 9c d8 4a ff d2 80 4e 09 59 72 a3 6a 8c f4 47 06 39 da 3f b1 e4 64 b8 a5 49 5e b6 05 64 22 e4 Data Ascii: \"bYiWj-`\T>!<ROz$@'{g*[yVWZLty(N#r9F+92qG}3/~}5[vlU6KMrdQ$b+[rggKl^JNYrjG9?dI^d"
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 16 eb 37 1a 60 17 f7 74 4b d7 aa 80 35 47 7e 44 9c 31 75 2b 6b d5 e9 4a 5f 2c 03 86 4d 75 cb f9 52 58 67 f7 eb e4 e8 a0 ea 48 e4 46 c6 fd 64 9c 48 4f 0d fd b8 8c 67 8a 31 a5 24 7d dd 17 d6 86 71 e3 ba ea a2 1b cc 4b 0e ad 67 f0 66 eb e1 dc 48 a9 fa 7e 33 ce a6 38 9f d1 fe 9c a6 3c a7 d8 42 3b a5 ce 9a eb ee d3 e0 9d 40 26 d0 89 e1 04 d3 ae 61 2d 28 c1 11 9b 44 cf a6 49 5b f8 fc 9e 2e 0a 6a a6 c1 0f 55 15 b4 ca 89 90 83 bd 31 53 c5 eb f2 aa 8c 68 42 02 ad 03 7d 75 99 81 a9 71 c9 a0 d2 33 dd 8b 77 4b ce 26 8b 05 3a b4 83 2c b8 bb ac e2 67 ad 62 bb 99 4a 6a 4a 74 a8 0b 6d b9 91 39 14 8a 40 6c 95 b3 d6 6a db 1a 61 6e 69 fb 21 68 25 6c 60 53 8b 4c e5 15 09 5a 37 8c 18 02 ed 6e 9a fe f7 19 56 aa 26 ce 81 12 7d c6 53 ce e3 c9 2b c5 c4 c4 63 f7 ec 8b a5 e2 d3 d1 Data Ascii: 7`tK5G~D1u+kJ_,MuRXgHFdHOg1$}qKgfH~38<B;@&a-(DI[.jU1ShB}uq3wK&:,gbJjJtm9@ljani!h%l`SLZ7nV&}S+c
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 42 66 70 45 92 73 73 fd 8b 6f e0 0b 62 f5 8f 31 bd ca 31 63 58 ea 43 3b 91 6d c5 e8 f4 db b9 63 c4 7c 4f f8 80 4b bd 3b ed a6 92 4c bc fd 58 04 99 95 92 fd 48 f5 c2 c3 29 1b 79 66 3a 48 7d 8a ec 95 0b 90 10 22 4c 98 48 93 fc 19 35 a9 91 79 5a 13 af b9 ed d2 55 54 55 72 ed 2a d7 26 42 0f 68 07 e8 77 43 40 2b aa 1f 37 d0 c4 c9 16 d5 ab e1 92 86 96 74 41 14 35 b0 79 6d 21 77 16 ff 4b 45 ee 49 da 7a 33 6e 0d f3 da a4 d4 7f d0 a2 b9 5e 9c 30 a4 b8 08 d4 1d 3d 14 01 98 17 40 39 e5 1a cd 64 93 3b 20 48 ca 21 37 82 49 37 17 5b 36 d4 21 03 3c ec d4 df c5 3c dd 7b 0b 27 00 cb 2f 7e c0 55 d2 e6 fc 65 0a 74 20 69 92 14 1d 5f 79 83 25 3c 57 34 d7 18 3c 8c bd e1 b0 94 e0 09 31 de 7c 4c ce ab 77 c3 2d 62 88 3f 73 97 e9 a9 75 27 b4 de 35 75 1d a7 83 10 00 87 35 7c 7b 53 Data Ascii: BfpEssob11cXC;mc\|OK;LXH)yf:H}"LH5yZUTUr*&BhwC@+7tA5ym!wKEIz3n^0=@9d; H!7I7[6!<<{'/~Uet i_y%<W4<1\|Lw-b?su'5u5\|{S
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: c5 25 5a e4 e4 e3 7a e7 19 83 78 fd 6f c9 1f 79 fa 94 52 22 1f 32 b5 12 6f 91 8a 7a 8c 82 19 bb f2 9f 09 15 27 11 7c 8f d4 4d 41 dc 3a fe cd 66 f5 59 54 d4 79 d2 df 60 09 02 1d ea 47 53 c8 80 a9 57 bf 5d 79 e5 9b 43 07 96 1c 10 37 eb 90 58 34 82 89 9b a3 47 6f 2c 3c 52 2d 7a 38 10 af 67 e1 a9 ad 60 db 51 c6 1e ab ba bd 75 2d 5f f3 c7 b8 5c ac 52 4d 9d ae 3d ad ac 5d 71 d3 37 7d 35 3c 41 29 66 76 ab 45 1f 78 bd 7d f5 93 20 8f 75 6a 74 c9 e3 4a 9f 9a 7e 5a 50 5f f7 5b 82 5f 2e d0 75 f1 65 a1 df 60 f2 25 b3 9f d6 55 fa 5f e4 90 a3 77 51 53 30 dc 97 1b 93 d6 4a 7d f7 71 a2 b4 08 55 28 e2 0a 54 a8 e4 6e a4 32 fc d9 49 65 1e da fa ee 45 45 2f c2 ad 06 7f ad 8a e0 21 f7 58 f4 97 d2 02 a6 b5 2d 3a 84 43 d0 c4 b1 2e cc 5c 5a 32 dd 64 ad 96 8d 58 b6 5e d3 c3 6e 36 Data Ascii: %ZzxoyR"2oz'\|MA:fYTy`GSW]yC7X4Go,<R-z8g`Qu-_\RM=]q7}5<A)fvEx} ujtJ~ZP_[_.ue`%U_wQS0J}qU(Tn2IeEE/!X-:C.\Z2dX^n6
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 2f d8 1f 1a 4b ab 48 1f 9a 6b 5b 0b 0f f4 99 3f e5 11 19 4e 89 e1 f1 52 4c f9 a1 33 3c 6a a9 8f 16 c1 86 e4 83 d0 bf 92 35 7f b2 80 49 05 c8 eb f9 aa 36 37 7d 8d 58 94 cf d3 3c ac f1 25 dd f3 b4 e0 6d fc b6 2a d8 4d 90 3b 49 5f f0 59 d1 01 77 ff b4 0f 23 e1 c3 11 3d d3 82 d6 d9 d4 1e da 83 55 9b 38 fd 26 57 c6 68 3e b3 b1 84 a6 22 9a 12 c9 5c e9 d0 ac 43 75 aa 17 7a 6d 4e 8c 50 78 c3 6e 50 c7 80 c0 cc 78 1a 90 87 8d 9b 06 e3 3d 12 9e ea d9 dc ac 0f 7a 7d 56 04 1a 58 90 d4 22 56 06 cc bc d6 08 23 5d 41 b0 e6 71 3a 9e 68 65 6c 11 03 4e c7 59 10 18 1c 0b 01 32 f9 3f d9 25 74 1a ba 7b e7 71 74 07 bc fa 02 9a 6d e8 97 c6 47 f4 0e e0 bd 25 59 2c af 12 8f f2 ac 52 24 7f 88 92 38 4d 5c f8 12 1a 9f ff d3 4f b0 bf d7 cf 63 27 67 11 35 7f 84 07 41 a3 8b cb f2 6c bf Data Ascii: /KHk[?NRL3<j5I67}X<%m*M;I_Yw#=U8&Wh>"\CuzmNPxnPx=z}VX"V#]Aq:helNY2?%t{qtmG%Y,R$8M\Oc'g5Al
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 9f da 05 0e 2a 0e 4f d4 d3 d7 6b 6c 7d f1 2d 9c 1f a9 3c c2 29 04 67 ef 73 0a ee 8b 70 ab bf e6 1f f1 f4 45 fa ef 5b 47 4b 1d 51 f4 0b a5 74 5f b4 09 d6 da 5a c7 b5 3e 5f d0 23 23 62 0f 2b bd 0e ba 8a 98 b8 18 74 b1 48 78 76 d7 f0 fa fd a9 7b fc 27 1e bb dd 52 b1 97 92 fa 50 8a b7 73 bc dc d0 5a f0 fd 28 e7 ec 75 dd 8e f3 16 37 25 b4 b4 64 c2 fe 9d 4c 35 98 7d e0 c9 9d de 7d 86 f1 e3 71 75 e5 16 f7 33 8f d1 69 47 bb 13 6e f7 fa 3d 7d 32 f9 2a 04 9e e9 d9 65 94 b4 78 98 87 7a 49 86 7a 11 55 50 57 d2 54 02 af 9c f0 ad 7e ac 91 16 a7 92 d5 f2 13 c1 5f c0 5e 31 97 19 9a cb 4b ed 0a 14 01 95 28 a5 f6 94 af aa bc fc a9 2e 4e 8f 1b cb 8c 26 78 ba a4 3a 14 b0 ac 32 ae 67 a7 f8 07 b2 b9 dc 4c 5c d6 2e 5d e3 d9 fd c8 6c 7e 8a e7 1a c5 bd 80 91 72 c3 b6 3a dc a0 ec Data Ascii: Okl}-<)gspE[GKQt_Z>_##b+tHxv{'RPsZ(u7%dL5}}qu3iGn=}2exzIzUPWT~_^1K(.N&x:2gL\.]l~r:
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 01 be c7 2d ea 0f 95 25 6f 40 18 74 8d 9a 99 9f 7f f4 c4 24 b9 49 74 d4 85 41 42 37 f7 92 ae c9 b4 ec 98 de e5 23 6a e2 3c 42 8e 5d 58 bb bb 02 ae 36 ee 8c e8 49 4b 0d eb ee ea 0c ef 48 4b 0d 6f 37 76 ee 12 55 36 3d d1 fa ad 2c 8f 77 48 4c d1 88 53 bc 96 94 e6 71 eb 18 fb 49 2c 31 2b 44 84 4b a5 96 c0 00 aa f4 a7 5e a5 50 58 c7 dd e5 97 60 91 d1 10 de b9 62 c1 7b 35 03 62 70 37 c9 1d 8c 76 44 d4 d3 f8 f0 7c ae 0e cd b1 a8 96 b4 47 e4 6e 66 25 e7 01 7d a9 6b 2c 22 b6 65 ba 12 76 ce c9 8a 02 94 ab e0 00 a0 d4 e4 81 8d 40 98 a0 b1 73 2b c5 1e cc 15 67 7b 5a 4a 11 0b a9 6e ab 2b b2 04 d3 de 1b 4c 0b 9b fa 0c c5 6a 9e 9a c3 f7 1f 8c 1e a4 f6 a9 e0 94 ff ba 68 df 87 90 3a fd 34 ae 84 5b 78 68 66 43 92 bd a0 89 ee 75 ef da ee 5f 9f 71 f7 da a4 a8 57 19 e2 8b b0 Data Ascii: -%o@t$ItAB7#j<B]X6IKHKo7vU6=,wHLSqI,1+DK^PX`b{5bp7vD\|Gnf%}k,"ev@s+g{ZJn+Ljh:4[xhfCu_qW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49711	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:55 UTC	574	OUT	GET /static/resources/fonts/OpenSans-Regular.woff2 HTTP/1.1 Host: profile.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://cex.io sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://static.cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:56 UTC	450	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:56 GMT Content-Type: font/woff2 Content-Length: 44648 Connection: close last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: "65fb2453-ae68" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: HIT Age: 2173 Accept-Ranges: bytes X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c26deda387c-IAD
2024-03-29 13:44:56 UTC	919	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 ae 68 00 12 00 00 00 01 81 08 00 00 ad fe 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 1b 20 1c 85 14 06 60 00 88 6e 08 81 22 09 8f 34 11 10 0a 84 e5 78 84 97 55 0b 8e 58 00 01 36 02 24 03 9d 24 04 20 05 8c 2d 07 be 05 0c 82 09 5b 4f 51 91 01 e5 ed ee ad 2d 54 48 e7 6d 1b a4 bc 95 37 20 17 b0 5b e1 dd ad 29 25 2e b1 f0 e4 b8 0e ce 03 42 a2 ff bb 9c fd ff ff ff ff 8e 64 21 63 7a f7 81 fb 7c 12 00 05 8a aa 54 ab eb 36 88 5c c8 d9 25 12 87 bb c4 0e 15 41 72 a1 36 44 c6 30 4e a1 40 19 1c b3 04 87 9f a0 a4 33 16 5e fb b7 d5 33 7f 41 96 7b 1e 79 77 72 5c 30 5e 03 61 09 6a 2b d6 40 0e 71 c9 d1 d1 2d e5 6e 49 9b e5 ee 58 db 43 a5 14 ca cb 7a 18 9e 39 d0 30 19 71 2f ba ee a4 4c 97 11 Data Ascii: wOF2h?FFTM `n"4xUX6$$ -[OQ-THm7 [)%.Bd!cz\|T6\%Ar6D0N@3^3A{ywr\0^aj+@q-nIXCz90q/L
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 78 40 f7 a3 e6 fa af 0a 1a 95 aa 6e 90 71 43 4a 97 43 4c 08 8e ce bc 99 ac 8e 3f 64 69 ea 02 ce 46 7d 6e cc 91 f0 53 b8 9c 16 8c 99 ac 49 ae 83 bd 04 1f 62 8f 93 9f 18 6e ff 7e f2 ff f0 c0 af e1 36 48 e7 fa 4f 65 ee 0d 9a 3d 2c b4 c4 e0 4d 8d 03 d7 04 22 dd 39 bf 7b f8 4e 5f c9 1e 4a f6 90 f1 24 b5 75 81 20 f1 7d fe 0c e8 fb 31 67 95 7c b2 3d 48 78 b3 39 ee f2 7e b1 97 eb 57 a0 d2 a0 36 8c c6 05 ea 5c 09 63 4c 5e 18 73 e3 43 97 c6 b4 ed a1 65 e5 03 28 73 10 e3 1f 00 7c df 66 99 a2 87 24 fb 5b 18 70 a3 ce ce f6 92 cb 29 21 00 0f fd 36 f1 2e 1e 2a fe 5a ff 10 52 56 9b a6 dd 10 d8 99 4b 0e 45 94 d3 f5 29 79 38 f4 6f 54 2f 3b ce 95 03 51 08 85 0d 85 46 e7 ce 7b a8 33 06 44 3b bd 8e ed 3c 49 d5 7d 3e 55 ab d2 2a 12 98 05 67 a4 6d b7 ce b4 02 be 55 ef ee f9 20 Data Ascii: x@nqCJCL?diF}nSIbn~6HOe=,M"9{N_J$u }1g\|=Hx9~W6\cL^sCe(s\|f$[p)!6.ZRVKE)y8oT/;QF{3D;<I}>UgmU
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: b2 5b 8a 2c a6 22 1d 5e 15 c8 8c a4 2d d4 7a 41 75 40 8a 10 5a a7 d5 33 35 2d da 74 e8 d2 03 a5 cf 00 0c 7c 6a fe bb 03 01 09 05 cd 92 15 6b 18 58 36 6c e1 d8 c1 23 b0 e7 c0 91 13 22 12 32 0a 2a 67 34 2e 5c d1 b9 71 c7 e0 c1 93 17 6f 3e 98 58 d8 38 b8 7c f1 f8 f1 17 20 50 90 60 21 42 f1 85 11 10 12 09 17 21 52 94 68 62 12 31 62 c5 89 27 05 70 b4 6c 08 39 8a a1 e1 d4 ab 83 47 d0 a0 11 09 05 19 55 93 16 cd 5a b5 69 d7 81 8e 81 85 a9 4b a7 6e 3d f3 94 2f 49 b2 f4 f4 56 6c 4c 94 cc 8c 56 28 23 33 34 c1 2c 95 3c 33 33 4b aa a2 94 66 52 26 c6 48 a6 c9 52 1e 0d 88 38 d2 04 c8 ce 94 60 66 7a 26 90 a9 48 1f 09 6a 64 2a 0f 1e 43 72 de 9c 2f 17 cd c5 72 c1 5c c8 b1 c9 9c c9 2d 57 4a 51 72 92 9b 39 99 9b 5e 4a 92 9e 8b e7 32 ea e4 ca 90 07 79 82 1e 97 af 54 99 ec e4 Data Ascii: [,"^-zAu@Z35-t\|jkX6l#"2g4.\qo>X8\| P`!B!Rhb1b'pl9GUZiKn=/IVlLV(#34,<33KfR&HR8`fz&HjdCr/r\-WJQr9^J2yT
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: c3 c6 70 4e 23 ba 8d b5 94 a0 d4 f3 30 ed 98 04 0e fe d9 73 5a 52 08 3e fb 83 7b dc ce 20 55 e7 a2 a5 ed e2 fe 75 9d 89 43 98 63 b0 44 9b 1a 3e f7 00 10 37 9c 9f a0 6f c0 80 1e 05 85 3f b1 8e 5b 00 a9 75 8c c5 2e c4 d8 b6 fb df 72 a2 8f af be a0 12 30 90 32 9e 14 81 8a 73 02 89 82 e1 8b d4 bf 58 48 44 44 24 7e ed 5a f2 10 0a c5 30 d0 3d 1a 66 a5 9d c5 ca de a4 b2 c7 cc b1 2b 9f 09 02 33 50 e7 67 ad b6 62 54 39 3b 9d 81 08 6c 51 88 b8 ac 1c 5d 78 1a 20 52 67 ed 59 8b cc 98 54 35 f0 30 54 33 55 05 a7 07 8d 1e 3a 52 a8 93 20 4d fc 82 7c d8 a1 90 c4 4c a1 89 39 72 88 23 19 1d 96 50 01 40 b7 c5 e5 2a c1 35 c8 a9 84 82 6a 62 9c 7e 0c 03 02 75 d7 5f 2f 50 24 4f 39 ba 2d d9 10 06 75 c9 63 8b 46 0f 0a 89 e6 86 3e 72 28 9b b2 6a 87 5b a3 22 2b 92 5f df ae c1 20 f2 Data Ascii: pN#0sZR>{ UuCcD>7o?[u.r02sXHDD$~Z0=f+3PgbT9;lQ]x RgYT50T3U:R M\|L9r#P@*5jb~u_/P$O9-ucF>r(j["+_
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 39 5b 9e 33 42 79 dd a9 3b 2a 78 55 5a 3d 7e 40 17 33 5a 5c f0 7c c1 b3 65 b3 90 29 f2 f2 91 14 4a 60 2a 49 74 a3 1e a1 73 d6 88 ad da 3e 34 a2 d1 58 7d 60 9c 8a 0f 67 fb 18 09 35 d9 07 c8 b5 7b 3f d2 8f a6 ad a4 1a e5 20 83 d5 73 bc 21 2e f1 68 58 85 9b 3c 58 bd 29 bd 87 98 84 9d 02 b8 55 06 8d 20 5c 5a ab c5 19 56 be 1e ff 35 13 11 c4 60 04 37 91 aa b1 bf 4b 71 92 b8 6c 09 63 50 ca a0 d4 e4 41 ce 12 d4 f5 3f 1d 9b ae 2d 84 65 86 ba 43 5d c2 14 2f 63 99 ad 89 11 88 bf 61 da fa 15 b6 36 89 13 03 a6 83 fe e9 b2 a4 64 77 7a b6 84 ae e7 d0 02 47 7c bd c7 56 4f 07 c8 7d fc 38 3f bc 21 9f c7 e5 ae 64 8d 79 49 f8 df fd fa 65 9f 9d ee ad d2 e8 63 58 f8 9d 99 f2 e9 9c 2e 62 87 84 3b 05 98 ad 22 18 dd 38 f1 79 48 f6 7a 2a e2 83 d1 61 f7 c0 8c ac da 98 64 05 ef 7e Data Ascii: 9[3By;xUZ=~@3Z\\|e)J`Its>4X}`g5{? s!.hX<X)U \ZV5`7KqlcPA?-eC]/ca6dwzG\|VO}8?!dyIecX.b;"8yHz*ad~
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 3e 3d 58 a3 b2 34 38 29 fa 18 51 9e 47 7b b4 fb cc 5b ad 36 79 a6 5a b3 f0 c2 85 dc dd 01 ba ea 4c 4c 38 c1 60 d3 11 cc f8 81 21 54 6d 9f c4 0f 12 03 e1 3b 6e 7d fe 16 f3 fd e8 e6 43 cb f0 79 e6 76 d3 49 82 3b 72 a4 85 be f0 ce 02 57 1b c7 81 e8 af 5d 48 12 7d 8b 3e c2 dd 7d 65 bf 73 58 10 6a 7c da 81 3d 9f f7 4f bb ee e7 b6 0c eb a6 81 2f 43 12 bc 48 4b 3d 59 64 f0 71 45 25 14 43 c8 e1 d3 96 c8 e6 cd 83 d5 f9 8c fa d7 0e 00 a2 8a 1a 82 bb fc 0c 6a 9f 49 35 4e ca 84 7c 4f 58 28 ba d6 17 32 00 8b 20 73 dc 03 de d8 e5 df d7 76 d0 10 f3 b4 69 50 5a 36 bc fc 62 67 d6 98 5e db df 0f 67 56 9e fd c7 c5 b5 63 6d af b9 0f 76 43 33 c3 ca b2 8e 79 32 07 b1 b9 6b c1 11 71 26 2d a1 3c 3a bb 0b ce 76 77 c8 24 7f 7e 71 46 32 6e 56 d6 9d bf a1 6d 3b 93 77 60 32 ea 50 ce Data Ascii: >=X48)QG{[6yZLL8`!Tm;n}CyvI;rW]H}>}esXj\|=O/CHK=YdqE%CjI5N\|OX(2 sviPZ6bg^gVcmvC3y2kq&-<:vw$~qF2nVm;w`2P
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: e8 28 3e 7e ac 7c fc 90 f0 23 1c 07 b9 7f 4a ac e6 61 e6 3e 7a f4 6e ed 6e 11 13 05 8c 2b 03 b1 de 0b f3 a7 ef 7f 19 54 d0 b4 a0 f1 c3 19 fc e4 05 6c 9e bb 8b 98 f4 72 f6 0b 0b f2 53 f3 be e9 3b 47 95 e3 43 36 bd 43 f2 17 ea e1 52 99 8d 61 fe 08 11 cd e6 e4 c6 47 d6 20 6a aa b3 87 35 b8 59 43 c9 23 63 64 68 1f d9 14 89 ae 3c 03 90 a9 da a7 67 2c 3e 1f 7f 37 fb 80 cd 61 c1 5d de a3 09 af c3 c4 d4 4a ed 7b ea d6 e6 7c 87 78 36 9e e0 9f 78 62 be 70 69 2d a1 eb db d0 af a8 99 8d ed 9f ea d9 23 57 9e 32 bc 85 f1 37 50 ad 72 12 bd 2f 00 ce ae 74 41 f0 e0 d5 57 6d 74 d9 11 37 c1 57 ac 33 2e 0b 04 e0 06 e0 b4 50 f4 2f 97 1c 72 d7 b8 e1 72 0d 0a 73 12 f3 25 47 16 51 cd 1b c5 1a 57 81 01 7e db 21 3f ac e1 97 0c 78 26 52 cd 17 71 c1 48 72 7e 45 9d fd d5 cb b3 28 79 Data Ascii: (>~\|#Ja>znn+TlrS;GC6CRaG j5YC#cdh<g,>7a]J{\|x6xbpi-#W27Pr/tAWmt7W3.P/rrs%GQW~!?x&RqHr~E(y
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: f9 33 b6 8a d7 86 93 61 6c 40 77 07 a3 e4 60 c1 73 36 e8 dc d9 5c 5c 03 04 82 c6 21 cc dc fe a1 84 8b 5f e1 04 68 60 c7 d1 7c c2 92 cb 9e ca 7e 77 76 2a 92 e5 44 46 2e a3 b2 c7 f7 1b 10 fe c4 a8 49 5e 82 0b 5f b6 0a 9d f0 e6 20 62 8f 8e 00 82 54 5c d6 8f 68 e6 39 e1 fc eb 68 b3 dc 5a c0 d1 21 a9 09 bf 77 20 fc a7 5d bb c5 d4 4f 30 84 b8 37 14 65 e4 f7 b6 65 f0 69 0b 74 66 8c 07 df 87 7c db de 47 f8 39 fa 91 f1 ad ce 71 69 a0 c2 f4 e7 1f 7c 05 b4 f7 7e aa d3 ab e2 9b d8 99 54 12 38 d0 e7 48 7c 1d 29 20 fa 78 7a 82 b6 59 7f 3a 9b 3b b3 f2 4b 92 e9 3a cb 3e e5 43 18 9e 79 7a b8 3f 49 90 67 df da bd 3a 50 72 fa 60 90 be 18 1e fd c3 6e e9 e3 f2 94 7b 69 68 f0 94 c8 eb c7 dd 97 4d 7e 47 95 9a c9 93 fa 64 c1 4a 2f 4e 38 ab a1 44 7f 32 34 fe cc e0 46 43 ab 6d 0d Data Ascii: 3al@w`s6\\!_h`\|~wv*DF.I^_ bT\h9hZ!w ]O07eeitf\|G9qi\|~T8H\|) xzY:;K:>Cyz?Ig:Pr`n{ihM~GdJ/N8D24FCm
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 84 d5 e4 fe 4c c3 dc d7 e9 c6 33 b7 cc 5e 97 cd cc ce fc 60 d0 ed de 9c 4d 00 05 d3 19 b6 de 63 9e bf ce ad 9f d5 d7 01 f9 c2 44 35 a8 76 ab f8 c3 b3 d0 f6 59 aa 32 76 b9 43 69 6b 79 28 6c df 90 bc 9b 55 b9 61 1c 2e 7f 66 c8 40 a4 97 51 a5 04 dc df 95 5e 48 44 4a 41 02 5d b1 e7 c1 0f de fd 07 99 b0 34 59 1c 89 6a 80 1d 7c 70 fa 57 8e 35 e9 d0 3c 1c 05 67 a4 9e 80 50 0e 53 3e 18 79 1b a3 b4 5d bf 0e 9e d3 2d ed d7 7f c2 f2 6e 0c 7b 4e 74 f1 3c 72 77 97 e2 e2 db d5 60 67 23 aa 39 08 87 a7 e4 f5 02 bc d4 e7 96 50 b2 70 17 89 b4 34 ff dc b9 ae ae 81 c7 7d 71 8a 34 a8 d6 5f bf e2 5d e6 6d 56 ef 26 9f fe b8 13 49 c6 f6 7b 93 a9 67 7f 7d b8 24 57 7e 8f c5 05 e6 b5 04 be 64 b8 47 2c ee bd 1d 73 33 ef 1d 76 61 0a 13 3c cc 70 68 92 c9 40 a7 e2 59 5f 43 fe 06 60 7a Data Ascii: L3^`McD5vY2vCiky(lUa.f@Q^HDJA]4Yj\|pW5<gPS>y]-n{Nt<rw`g#9Pp4}q4_]mV&I{g}$W~dG,s3va<ph@Y_C`z
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 2b 58 8d 88 2b bf 66 67 7c aa 66 dd d4 ae 50 59 de c6 77 03 bb bb 73 8c a4 d2 ab aa 19 f4 6a 12 72 f1 e8 8a b0 ce 7b 87 e5 67 4f 49 82 c6 bd b5 80 50 95 b7 03 85 38 3a f9 4a 4b 3c 5b e2 b7 53 62 90 a5 4b ad 5f 5e a9 b5 55 82 9b 45 af 80 19 19 33 d1 78 17 12 61 f0 45 c3 f4 7a 82 e5 90 bd ed a2 83 b0 26 c7 59 e4 9d 1d 3d 6a 32 e0 5a 25 f4 cc 0c 68 58 c3 f4 b4 11 ad dd 1a 26 2d 1a e2 8a fc 7c ec af 26 ea b5 51 cf 72 e1 05 ba fa 0a 7b be 76 61 e5 6c 28 14 ef 19 d2 5a e5 38 6c c9 f9 c7 f7 3f cf 6a cf fa c4 98 74 2a fc 3c 8f 2b 18 13 ae 73 c9 cc d4 2c b9 43 b3 2d 8b 6e 8a cb 23 dd 73 53 da 35 66 20 de fc 21 c2 e1 c5 49 16 78 32 26 70 55 8d e6 5d e1 9a 38 5d ae b9 4a b9 06 b6 3d 80 88 5d 7b d6 27 4a e7 1d 08 1b 8e 3c 28 e0 0f 9e 52 5f 84 5f 56 d0 07 63 f4 66 60 Data Ascii: +X+fg\|fPYwsjr{gOIP8:JK<[SbK_^UE3xaEz&Y=j2Z%hX&-\|&Qr{val(Z8l?jt*<+s,C-n#sS5f !Ix2&pU]8]J=]{'J<(R__Vcf`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49714	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:55 UTC	559	OUT	GET /static/resources/content/header.json HTTP/1.1 Host: profile.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:56 UTC	427	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:56 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-1d9b" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c26ec6f0824-IAD
2024-03-29 13:44:56 UTC	942	IN	Data Raw: 31 64 39 62 0d 0a 7b 0a 20 20 20 20 22 63 6f 6d 70 61 6e 79 4c 6f 67 6f 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 43 45 58 2e 49 4f 22 2c 0a 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 22 3a 20 22 68 74 74 70 73 3a 2f 2f 63 65 78 2e 69 6f 2f 22 2c 0a 20 20 20 20 20 20 20 20 22 69 63 6f 6e 22 3a 20 22 63 65 78 2d 66 75 6c 6c 2d 6c 6f 67 6f 22 2c 0a 20 20 20 20 20 20 20 20 22 69 63 6f 6e 4c 65 67 61 63 79 22 3a 20 22 63 65 78 46 75 6c 6c 4c 6f 67 6f 22 2c 0a 20 20 20 20 20 20 20 20 22 77 69 64 74 68 22 3a 20 31 33 39 2c 0a 20 20 20 20 20 20 20 20 22 68 65 69 67 68 74 22 3a 20 34 30 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 6d 65 6e 75 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 70 72 6f 64 75 63 74 73 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 Data Ascii: 1d9b{ "companyLogo": { "title": "CEX.IO", "link": "https://cex.io/", "icon": "cex-full-logo", "iconLegacy": "cexFullLogo", "width": 139, "height": 40 }, "menu": { "products": {
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 69 63 6f 6e 4c 65 67 61 63 79 22 3a 20 22 63 68 69 70 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 54 72 61 64 69 6e 67 20 41 50 49 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 73 63 22 3a 20 22 41 75 74 6f 6d 61 74 65 20 79 6f 75 72 20 63 72 79 70 74 6f 63 75 72 72 65 6e 63 79 20 74 72 61 64 69 6e 67 20 77 69 74 68 20 72 65 6c 69 61 62 6c 65 20 61 6e 64 20 73 74 61 62 6c 65 20 41 50 49 2e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 22 3a 20 22 68 74 74 70 73 3a 2f 2f 63 65 78 2e 69 6f 2f 63 65 78 2d 61 Data Ascii: "iconLegacy": "chip", "title": "Trading API", "desc": "Automate your cryptocurrency trading with reliable and stable API.", "link": "https://cex.io/cex-a
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 73 63 22 3a 20 22 47 65 74 20 6d 6f 6e 74 68 6c 79 20 72 65 77 61 72 64 73 20 66 6f 72 20 73 69 6d 70 6c 79 20 68 6f 6c 64 69 6e 67 20 73 74 61 6b 65 2d 61 62 6c 65 20 63 6f 69 6e 73 2e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 22 3a 20 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 2e 63 65 78 2e 69 6f 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 63 61 72 64 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 69 63 6f 6e 22 3a 20 22 63 72 65 64 69 74 2d 63 61 72 Data Ascii: "desc": "Get monthly rewards for simply holding stake-able coins.", "link": "https://earn.cex.io" }, "card": { "icon": "credit-car
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 22 63 6f 6d 70 61 6e 79 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 43 6f 6d 70 61 6e 79 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 73 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 61 62 6f 75 74 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 69 63 6f 6e 22 3a 20 22 63 65 78 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 69 63 6f 6e 4c 65 67 61 63 79 22 3a 20 22 63 65 78 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 41 62 6f 75 74 20 75 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 Data Ascii: }, "company": { "title": "Company", "links": { "about": { "icon": "cex", "iconLegacy": "cex", "title": "About us", "li
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 20 22 68 74 74 70 73 3a 2f 2f 63 65 78 2e 69 6f 2f 70 72 65 73 73 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 6f 67 6f 47 75 69 64 65 6c 69 6e 65 73 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 69 63 6f 6e 22 3a 20 22 6c 6f 67 6f 2d 67 75 69 64 65 6c 69 6e 65 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 69 63 6f 6e 4c 65 67 61 63 79 22 3a 20 22 6c 6f 67 6f 47 75 69 64 65 6c 69 6e 65 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 4c 6f 67 6f 20 67 75 69 64 65 6c 69 6e 65 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 22 3a 20 22 Data Ascii: "https://cex.io/press" }, "logoGuidelines": { "icon": "logo-guidelines", "iconLegacy": "logoGuidelines", "title": "Logo guidelines", "link": "
2024-03-29 13:44:56 UTC	1169	IN	Data Raw: 2e 63 65 78 2e 69 6f 2f 73 65 63 75 72 69 74 79 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 43 65 6e 74 65 72 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 69 63 6f 6e 22 3a 20 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 4e 6f 74 69 66 69 63 61 74 69 6f 6e 20 43 65 6e 74 65 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 22 3a 20 22 68 74 74 70 73 3a 2f 2f 63 65 78 2e 69 6f 2f 70 72 6f 63 65 73 73 69 6e 67 2d 61 6c 65 72 74 73 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a Data Ascii: .cex.io/security" }, "notificationCenter": { "icon": "notification", "title": "Notification Center", "link": "https://cex.io/processing-alerts" },
2024-03-29 13:44:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49713	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:55 UTC	563	OUT	GET /static/resources/media/chevron-right.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:56 UTC	449	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:56 GMT Content-Type: image/svg+xml Content-Length: 238 Connection: close last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: "65fb2453-ee" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: HIT Age: 2879 Accept-Ranges: bytes X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c26e9ed289a-IAD
2024-03-29 13:44:56 UTC	238	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 30 2e 37 30 37 20 31 37 2e 37 30 37 4c 31 36 2e 34 31 34 20 31 32 4c 31 30 2e 37 30 37 20 36 2e 32 39 32 39 37 4c 39 2e 32 39 32 39 37 20 37 2e 37 30 36 39 37 4c 31 33 2e 35 38 36 20 31 32 4c 39 2e 32 39 32 39 37 20 31 36 2e 32 39 33 4c 31 30 2e 37 30 37 20 31 37 2e 37 30 37 5a 22 0a 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 62 6c 61 63 6b 22 2f 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: <svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M10.707 17.707L16.414 12L10.707 6.29297L9.29297 7.70697L13.586 12L9.29297 16.293L10.707 17.707Z" fill="black"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49716	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:55 UTC	563	OUT	GET /static/resources/media/cex-full-logo.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:56 UTC	460	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:56 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-dae" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: HIT Age: 1495 X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c26f96807b9-IAD
2024-03-29 13:44:56 UTC	909	IN	Data Raw: 64 61 65 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 33 39 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 39 20 34 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 39 2e 38 35 37 32 20 32 32 2e 32 30 34 37 48 33 34 2e 37 39 33 36 4c 33 37 2e 31 36 36 34 20 31 39 2e 38 33 34 35 4c 33 34 2e 37 39 33 36 20 31 37 2e 34 36 34 34 48 31 39 2e 38 35 37 32 43 31 38 2e 35 34 35 39 20 31 37 2e 34 36 34 34 20 31 37 2e 34 38 34 34 20 31 38 2e 35 32 34 37 20 31 37 2e 34 38 34 34 20 31 39 2e 38 33 34 35 43 31 37 2e 34 38 34 34 20 32 31 2e 31 34 34 33 20 31 38 2e 35 34 35 39 20 32 32 Data Ascii: dae<svg width="139" height="40" viewBox="0 0 139 40" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M19.8572 22.2047H34.7936L37.1664 19.8345L34.7936 17.4644H19.8572C18.5459 17.4644 17.4844 18.5247 17.4844 19.8345C17.4844 21.1443 18.5459 22
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 36 35 20 33 33 2e 33 35 36 38 20 39 2e 31 36 36 36 35 20 33 30 2e 35 31 32 37 43 36 2e 33 31 39 32 34 20 32 37 2e 36 35 36 20 34 2e 37 34 35 36 38 20 32 33 2e 38 36 33 37 20 34 2e 37 34 35 36 38 20 31 39 2e 38 33 34 35 43 34 2e 37 34 35 36 38 20 31 35 2e 38 30 35 32 20 36 2e 33 31 39 32 34 20 31 32 2e 30 31 33 20 39 2e 31 36 36 36 35 20 39 2e 31 35 36 32 39 43 31 32 2e 30 32 36 35 20 36 2e 33 31 32 31 20 31 35 2e 38 32 33 31 20 34 2e 37 34 30 33 31 20 31 39 2e 38 35 36 39 20 34 2e 37 34 30 33 31 48 33 39 2e 37 31 33 38 56 30 48 31 39 2e 38 35 36 39 43 31 34 2e 35 34 39 32 20 30 20 39 2e 35 36 36 32 39 20 32 2e 30 35 38 32 39 20 35 2e 38 31 39 37 20 35 2e 38 31 33 31 32 5a 22 0a 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 43 43 43 43 22 2f 3e Data Ascii: 65 33.3568 9.16665 30.5127C6.31924 27.656 4.74568 23.8637 4.74568 19.8345C4.74568 15.8052 6.31924 12.013 9.16665 9.15629C12.0265 6.3121 15.8231 4.74031 19.8569 4.74031H39.7138V0H19.8569C14.5492 0 9.56629 2.05829 5.8197 5.81312Z" fill="#00CCCC"/>
2024-03-29 13:44:56 UTC	1231	IN	Data Raw: 30 34 4c 38 37 2e 37 38 32 32 20 33 30 2e 30 35 37 48 38 39 2e 35 33 30 36 4c 39 36 2e 33 36 31 39 20 32 30 2e 33 37 36 38 4c 39 36 2e 34 34 39 33 20 32 30 2e 32 36 34 35 4c 39 36 2e 35 32 34 33 20 32 30 2e 33 37 36 38 4c 31 30 33 2e 33 35 36 20 33 30 2e 30 35 37 48 31 30 35 2e 30 39 31 4c 39 37 2e 33 36 31 20 31 39 2e 33 30 34 4c 39 37 2e 33 32 33 35 20 31 39 2e 32 35 34 31 5a 22 0a 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 32 36 32 43 33 33 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 31 33 2e 39 34 36 20 39 48 31 31 32 2e 35 36 56 33 30 2e 30 35 37 48 31 31 33 2e 39 34 36 56 39 5a 22 20 66 69 6c 6c 3d 22 23 30 30 43 43 43 43 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 33 35 2e 33 37 37 20 31 31 2e 38 39 34 31 43 31 33 Data Ascii: 04L87.7822 30.057H89.5306L96.3619 20.3768L96.4493 20.2645L96.5243 20.3768L103.356 30.057H105.091L97.361 19.304L97.3235 19.2541Z" fill="#262C33"/> <path d="M113.946 9H112.56V30.057H113.946V9Z" fill="#00CCCC"/> <path d="M135.377 11.8941C13
2024-03-29 13:44:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49712	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:55 UTC	559	OUT	GET /static/resources/content/footer.json HTTP/1.1 Host: profile.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:56 UTC	427	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:56 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-3c26" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c2708e37fee-IAD
2024-03-29 13:44:56 UTC	942	IN	Data Raw: 33 63 32 36 0d 0a 7b 0a 20 20 20 20 22 6d 65 6e 75 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 73 65 72 76 69 63 65 73 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 53 65 72 76 69 63 65 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 73 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 62 75 79 53 65 6c 6c 43 72 79 70 74 6f 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 42 75 79 20 26 20 53 65 6c 6c 20 43 72 79 70 74 6f 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 22 3a 20 22 68 74 74 70 73 3a 2f 2f 63 65 78 2e 69 6f 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 Data Ascii: 3c26{ "menu": { "services": { "title": "Services", "links": { "buySellCrypto": { "title": "Buy & Sell Crypto", "link": "https://cex.io" },
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 42 75 79 20 42 69 74 63 6f 69 6e 20 57 69 74 68 20 42 61 6e 6b 20 41 63 63 6f 75 6e 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 22 3a 20 22 68 74 74 70 73 3a 2f 2f 63 65 78 2e 69 6f 2f 62 75 79 2d 62 69 74 63 6f 69 6e 2d 77 69 74 68 2d 62 61 6e 6b 2d 61 63 63 6f 75 6e 74 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 62 75 79 42 69 74 63 6f 69 6e 50 72 65 70 61 69 64 43 61 72 64 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 42 75 79 20 42 69 74 63 6f 69 6e 20 57 69 74 68 20 50 72 65 70 61 69 64 20 43 61 72 64 22 2c 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: "title": "Buy Bitcoin With Bank Account", "link": "https://cex.io/buy-bitcoin-with-bank-account" }, "buyBitcoinPrepaidCard": { "title": "Buy Bitcoin With Prepaid Card",
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 42 75 79 20 54 65 74 68 65 72 20 28 55 53 44 54 29 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 22 3a 20 22 68 74 74 70 73 3a 2f 2f 63 65 78 2e 69 6f 2f 62 75 79 2d 74 65 74 68 65 72 2d 75 73 64 74 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 62 75 79 44 6f 67 65 63 6f 69 6e 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 42 75 79 20 44 6f 67 65 63 6f 69 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: "title": "Buy Tether (USDT)", "link": "https://cex.io/buy-tether-usdt" }, "buyDogecoin": { "title": "Buy Dogecoin",
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 42 75 79 20 53 6f 6c 61 6e 61 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 22 3a 20 22 68 74 74 70 73 3a 2f 2f 63 65 78 2e 69 6f 2f 62 75 79 2d 73 6f 6c 61 6e 61 2d 73 6f 6c 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 73 65 6c 6c 54 65 74 68 65 72 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 53 65 6c 6c 20 55 53 44 54 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 22 3a 20 22 68 74 74 70 73 3a Data Ascii: "title": "Buy Solana", "link": "https://cex.io/buy-solana-sol" }, "sellTether": { "title": "Sell USDT", "link": "https:
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 67 65 74 74 69 6e 67 53 74 61 72 74 65 64 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 47 65 74 74 69 6e 67 20 53 74 61 72 74 65 64 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 22 3a 20 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 63 65 78 2e 69 6f 2f 65 6e 2f 61 72 74 69 63 6c 65 73 2f 34 33 38 33 33 39 37 2d 67 65 74 74 69 6e 67 2d 73 74 61 72 74 65 64 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 69 64 65 6e 74 69 74 79 56 65 72 69 66 69 63 61 74 69 6f 6e 47 75 69 64 65 22 3a 20 7b 0a 20 20 20 20 20 Data Ascii: }, "gettingStarted": { "title": "Getting Started", "link": "https://support.cex.io/en/articles/4383397-getting-started" }, "identityVerificationGuide": {
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 73 3a 2f 2f 63 65 78 2e 69 6f 2f 62 69 74 63 6f 69 6e 2d 63 61 6c 63 75 6c 61 74 6f 72 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 62 69 74 63 6f 69 6e 50 72 69 63 65 57 69 64 67 65 74 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 42 69 74 63 6f 69 6e 20 50 72 69 63 65 20 57 69 64 67 65 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 22 3a 20 22 68 74 74 70 73 3a 2f 2f 63 65 78 2e 69 6f 2f 62 69 74 63 6f 69 6e 2d 70 72 69 63 65 2d 77 69 64 67 65 74 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6d 6f 62 69 6c 65 41 70 70 22 Data Ascii: s://cex.io/bitcoin-calculator" }, "bitcoinPriceWidget": { "title": "Bitcoin Price Widget", "link": "https://cex.io/bitcoin-price-widget" }, "mobileApp"
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 74 79 2e 63 65 78 2e 69 6f 2f 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 63 6f 6e 74 61 63 74 73 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 43 6f 6e 74 61 63 74 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 22 3a 20 22 68 74 74 70 73 3a 2f 2f 63 65 78 2e 69 6f 2f 63 6f 6e 74 61 63 74 73 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 65 61 6d 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 54 65 61 6d 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ty.cex.io/" }, "contacts": { "title": "Contacts", "link": "https://cex.io/contacts" }, "team": { "title": "Team",
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 20 20 22 73 6f 63 69 61 6c 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 46 6f 6c 6c 6f 77 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 73 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6d 65 73 73 65 6e 67 65 72 73 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 22 3a 20 22 68 74 74 70 73 3a 2f 2f 74 77 69 74 74 65 72 2e 63 6f 6d 2f 63 65 78 5f 69 6f 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 69 63 6f Data Ascii: "social": { "title": "Follow", "links": { "messengers": { "links": [ { "link": "https://twitter.com/cex_io", "ico
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 63 6f 6c 6f 72 22 3a 20 22 73 65 63 6f 6e 64 61 72 79 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 69 73 4f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 20 74 72 75 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 63 65 78 53 74 61 74 75 73 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 43 45 58 2e 49 4f 20 53 74 61 74 75 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 Data Ascii: "color": "secondary", "isOpenInNewWindow": true } ] }, "cexStatus": { "title": "CEX.IO Status", "
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 70 63 69 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 63 6f 6d 70 6f 6e 65 6e 74 54 61 67 22 3a 20 22 49 63 6f 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 69 73 4f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 20 74 72 75 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 63 6f 70 79 72 69 67 68 74 73 22 3a 20 7b 0a 20 20 20 20 20 20 20 Data Ascii: "name": "pci", "componentTag": "Icon", "isOpenInNewWindow": true } } } } } }, "copyrights": {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49717	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:55 UTC	692	OUT	GET /api/profile HTTP/1.1 Host: contact-center.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins
2024-03-29 13:44:56 UTC	477	IN	HTTP/1.1 401 Unauthorized Date: Fri, 29 Mar 2024 13:44:56 GMT Content-Type: application/json; charset=utf-8 Content-Length: 103 Connection: close access-control-allow-origin: https://cex.io vary: Origin, Accept-Encoding access-control-allow-credentials: true etag: W/"67-Cmc2AscoS2r8vg8CB+VPq8J+FYo" CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=0; includeSubDomains X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c27198f1318-IAD
2024-03-29 13:44:56 UTC	103	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 34 30 31 2c 22 64 61 74 61 22 3a 7b 22 6e 61 6d 65 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 45 78 63 65 70 74 69 6f 6e 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 4e 6f 74 20 66 6f 75 6e 64 20 63 6f 6f 6b 69 65 20 75 73 65 72 5f 61 75 74 68 6f 72 69 74 79 5f 64 61 74 61 22 7d 7d Data Ascii: {"status":401,"data":{"name":"UnauthorizedException","message":"Not found cookie user_authority_data"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49718	172.67.20.8	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:56 UTC	553	OUT	GET /client_data/9022a6a83360995949fccfed/script.js HTTP/1.1 Host: cdn-cookieyes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:56 UTC	485	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:56 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Wed, 27 Mar 2024 14:20:02 GMT etag: W/"18626-614a51a402dd3-gzip" vary: Accept-Encoding access-control-allow-origin: * access-control-allow-methods: GET, OPTIONS Cache-Control: max-age=0, must-revalidate, s-maxage=604800, proxy-revalidate CF-Cache-Status: HIT Age: 149071 Server: cloudflare CF-RAY: 86c04c272a626fa9-IAD
2024-03-29 13:44:56 UTC	884	IN	Data Raw: 37 64 62 61 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 33 32 34 31 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 22 64 6f 63 75 6d 65 6e 74 22 69 6e 20 77 69 6e 64 6f 77 2e 73 65 6c 66 26 26 28 28 21 28 22 63 6c 61 73 73 4c 69 73 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 5f 22 29 29 7c 7c 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 26 26 21 28 22 63 6c 61 73 73 4c 69 73 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 22 67 22 29 29 29 26 26 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 22 45 6c 65 6d 65 6e 74 Data Ascii: 7dba!function(){var t={3241:function(){"document"in window.self&&((!("classList"in document.createElement("_"))\|\|document.createElementNS&&!("classList"in document.createElementNS("http://www.w3.org/2000/svg","g")))&&function(t){"use strict";if("Element
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 2b 2b 29 74 68 69 73 2e 70 75 73 68 28 72 5b 6e 5d 29 3b 74 68 69 73 2e 5f 75 70 64 61 74 65 43 6c 61 73 73 4e 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 2c 74 68 69 73 2e 74 6f 53 74 72 69 6e 67 28 29 29 7d 7d 2c 75 3d 73 2e 70 72 6f 74 6f 74 79 70 65 3d 5b 5d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 73 28 74 68 69 73 29 7d 3b 69 66 28 61 2e 70 72 6f 74 6f 74 79 70 65 3d 45 72 72 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2c 75 2e 69 74 65 6d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 5b 74 5d 7c 7c 6e 75 6c 6c 7d 2c 75 2e 63 6f 6e 74 61 69 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 2d 31 21 3d 3d 63 28 74 68 69 Data Ascii: ++)this.push(r[n]);this._updateClassName=function(){t.setAttribute("class",this.toString())}},u=s.prototype=[],f=function(){return new s(this)};if(a.prototype=Error.prototype,u.item=function(t){return this[t]\|\|null},u.contains=function(t){return-1!==c(thi
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 22 29 29 7b 76 61 72 20 72 3d 44 4f 4d 54 6f 6b 65 6e 4c 69 73 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 67 67 6c 65 3b 44 4f 4d 54 6f 6b 65 6e 4c 69 73 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 67 67 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 31 20 69 6e 20 61 72 67 75 6d 65 6e 74 73 26 26 21 74 68 69 73 2e 63 6f 6e 74 61 69 6e 73 28 74 29 3d 3d 21 65 3f 65 3a 72 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 7d 7d 74 3d 6e 75 6c 6c 7d 28 29 29 7d 2c 39 36 36 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 72 28 37 38 35 34 29 2c 6f 3d 72 28 36 31 34 29 2c 69 3d 72 28 36 33 33 30 29 2c 61 3d 6e 2e 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6f 28 74 Data Ascii: ")){var r=DOMTokenList.prototype.toggle;DOMTokenList.prototype.toggle=function(t,e){return 1 in arguments&&!this.contains(t)==!e?e:r.call(this,t)}}t=null}())},9662:function(t,e,r){var n=r(7854),o=r(614),i=r(6330),a=n.TypeError;t.exports=function(t){if(o(t
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 61 6c 75 65 3a 38 7d 29 7d 7d 29 29 7d 2c 38 34 35 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 37 38 35 34 29 2c 6f 3d 72 28 39 39 37 34 29 2c 69 3d 72 28 36 39 31 36 29 2c 61 3d 72 28 37 39 30 38 29 2c 63 3d 72 28 33 34 31 31 29 2c 73 3d 72 28 37 36 35 39 29 2c 75 3d 72 28 34 34 31 31 29 2c 66 3d 72 28 36 32 34 34 29 2c 6c 3d 72 28 36 31 33 35 29 2c 70 3d 72 28 38 35 35 34 29 2c 68 3d 72 28 31 32 34 36 29 2c 64 3d 6e 2e 41 72 72 61 79 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 61 28 74 29 2c 72 3d 75 28 74 68 69 73 29 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 76 3d 6e 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f Data Ascii: alue:8})}}))},8457:function(t,e,r){"use strict";var n=r(7854),o=r(9974),i=r(6916),a=r(7908),c=r(3411),s=r(7659),u=r(4411),f=r(6244),l=r(6135),p=r(8554),h=r(1246),d=n.Array;t.exports=function(t){var e=a(t),r=u(this),n=arguments.length,v=n>1?arguments[1]:vo
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 3a 66 28 33 29 2c 65 76 65 72 79 3a 66 28 34 29 2c 66 69 6e 64 3a 66 28 35 29 2c 66 69 6e 64 49 6e 64 65 78 3a 66 28 36 29 2c 66 69 6c 74 65 72 52 65 6a 65 63 74 3a 66 28 37 29 7d 7d 2c 31 31 39 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 72 28 37 32 39 33 29 2c 6f 3d 72 28 35 31 31 32 29 2c 69 3d 72 28 37 33 39 32 29 2c 61 3d 6f 28 22 73 70 65 63 69 65 73 22 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 3e 3d 35 31 7c 7c 21 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 5b 5d 3b 72 65 74 75 72 6e 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 7b 7d 29 5b 61 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 66 6f 6f 3a 31 7d 7d 2c 31 21 3d 3d 65 5b 74 5d 28 Data Ascii: :f(3),every:f(4),find:f(5),findIndex:f(6),filterReject:f(7)}},1194:function(t,e,r){var n=r(7293),o=r(5112),i=r(7392),a=o("species");t.exports=function(t){return i>=51\|\|!n((function(){var e=[];return(e.constructor={})[a]=function(){return{foo:1}},1!==e[t](
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 72 28 37 34 37 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 6e 28 74 29 29 28 30 3d 3d 3d 65 3f 30 3a 65 29 7d 7d 2c 33 34 31 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 72 28 39 36 37 30 29 2c 6f 3d 72 28 39 32 31 32 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 2c 69 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 69 3f 65 28 6e 28 72 29 5b 30 5d 2c 72 5b 31 5d 29 3a 65 28 72 29 7d 63 61 74 63 68 28 65 29 7b 6f 28 74 2c 22 74 68 72 6f 77 22 2c 65 29 7d 7d 7d 2c 37 30 37 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 72 28 35 31 31 32 29 28 22 69 74 65 72 61 Data Ascii: tion(t,e,r){var n=r(7475);t.exports=function(t,e){return new(n(t))(0===e?0:e)}},3411:function(t,e,r){var n=r(9670),o=r(9212);t.exports=function(t,e,r,i){try{return i?e(n(r)[0],r[1]):e(r)}catch(e){o(t,"throw",e)}}},7072:function(t,e,r){var n=r(5112)("itera
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 26 73 28 6e 2c 74 5b 75 5d 2c 7b 74 68 61 74 3a 74 2c 41 53 5f 45 4e 54 52 49 45 53 3a 72 7d 29 7d 29 29 2c 68 3d 66 2e 70 72 6f 74 6f 74 79 70 65 2c 79 3d 76 28 65 29 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 2c 6f 2c 69 3d 79 28 74 29 2c 61 3d 6d 28 74 2c 65 29 3b 72 65 74 75 72 6e 20 61 3f 61 2e 76 61 6c 75 65 3d 72 3a 28 69 2e 6c 61 73 74 3d 61 3d 7b 69 6e 64 65 78 3a 6f 3d 70 28 65 2c 21 30 29 2c 6b 65 79 3a 65 2c 76 61 6c 75 65 3a 72 2c 70 72 65 76 69 6f 75 73 3a 6e 3d 69 2e 6c 61 73 74 2c 6e 65 78 74 3a 76 6f 69 64 20 30 2c 72 65 6d 6f 76 65 64 3a 21 31 7d 2c 69 2e 66 69 72 73 74 7c 7c 28 69 2e 66 69 72 73 74 3d 61 29 2c 6e 26 26 28 6e 2e 6e 65 78 74 3d 61 29 2c 6c 3f 69 2e 73 69 7a 65 2b 2b 3a 74 2e 73 69 7a 65 2b 2b Data Ascii: &s(n,t[u],{that:t,AS_ENTRIES:r})})),h=f.prototype,y=v(e),g=function(t,e,r){var n,o,i=y(t),a=m(t,e);return a?a.value=r:(i.last=a={index:o=p(e,!0),key:e,value:r,previous:n=i.last,next:void 0,removed:!1},i.first\|\|(i.first=a),n&&(n.next=a),l?i.size++:t.size++
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 69 28 74 68 69 73 29 2c 65 3d 74 2e 6b 69 6e 64 2c 72 3d 74 2e 6c 61 73 74 3b 72 26 26 72 2e 72 65 6d 6f 76 65 64 3b 29 72 3d 72 2e 70 72 65 76 69 6f 75 73 3b 72 65 74 75 72 6e 20 74 2e 74 61 72 67 65 74 26 26 28 74 2e 6c 61 73 74 3d 72 3d 72 3f 72 2e 6e 65 78 74 3a 74 2e 73 74 61 74 65 2e 66 69 72 73 74 29 3f 22 6b 65 79 73 22 3d 3d 65 3f 7b 76 61 6c 75 65 3a 72 2e 6b 65 79 2c 64 6f 6e 65 3a 21 31 7d 3a 22 76 61 6c 75 65 73 22 3d 3d 65 3f 7b 76 61 6c 75 65 3a 72 2e 76 61 6c 75 65 2c 64 6f 6e 65 3a 21 31 7d 3a 7b 76 61 6c 75 65 3a 5b 72 2e 6b 65 79 2c 72 2e 76 61 6c 75 65 5d 2c 64 6f 6e 65 3a 21 31 7d 3a 28 74 2e 74 61 72 67 65 74 3d 76 6f 69 64 20 30 2c 7b 76 61 6c 75 65 3a 76 6f 69 64 Data Ascii: ,(function(){for(var t=i(this),e=t.kind,r=t.last;r&&r.removed;)r=r.previous;return t.target&&(t.last=r=r?r.next:t.state.first)?"keys"==e?{value:r.key,done:!1}:"values"==e?{value:r.value,done:!1}:{value:[r.key,r.value],done:!1}:(t.target=void 0,{value:void
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 64 65 6c 65 74 65 22 29 2c 53 28 22 68 61 73 22 29 2c 67 26 26 53 28 22 67 65 74 22 29 29 2c 28 50 7c 7c 45 29 26 26 53 28 62 29 2c 6d 26 26 77 2e 63 6c 65 61 72 26 26 64 65 6c 65 74 65 20 77 2e 63 6c 65 61 72 7d 72 65 74 75 72 6e 20 5f 5b 74 5d 3d 6b 2c 6e 28 7b 67 6c 6f 62 61 6c 3a 21 30 2c 63 6f 6e 73 74 72 75 63 74 6f 72 3a 21 30 2c 66 6f 72 63 65 64 3a 6b 21 3d 78 7d 2c 5f 29 2c 76 28 6b 2c 74 29 2c 6d 7c 7c 72 2e 73 65 74 53 74 72 6f 6e 67 28 6b 2c 74 2c 67 29 2c 6b 7d 7d 2c 39 39 32 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 72 28 32 35 39 37 29 2c 6f 3d 72 28 33 38 38 37 29 2c 69 3d 72 28 31 32 33 36 29 2c 61 3d 72 28 33 30 37 30 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f Data Ascii: delete"),S("has"),g&&S("get")),(P\|\|E)&&S(b),m&&w.clear&&delete w.clear}return _[t]=k,n({global:!0,constructor:!0,forced:k!=x},_),v(k,t),m\|\|r.setStrong(k,t,g),k}},9920:function(t,e,r){var n=r(2597),o=r(3887),i=r(1236),a=r(3070);t.exports=function(t,e,r){fo
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 72 2e 67 65 74 26 26 6e 28 72 2e 67 65 74 2c 65 2c 7b 67 65 74 74 65 72 3a 21 30 7d 29 2c 72 2e 73 65 74 26 26 6e 28 72 2e 73 65 74 2c 65 2c 7b 73 65 74 74 65 72 3a 21 30 7d 29 2c 6f 2e 66 28 74 2c 65 2c 72 29 7d 7d 2c 38 30 35 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 72 28 37 38 35 34 29 2c 6f 3d 72 28 36 31 34 29 2c 69 3d 72 28 38 38 38 30 29 2c 61 3d 72 28 36 33 33 39 29 2c 63 3d 72 28 33 35 30 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 2c 73 29 7b 76 61 72 20 75 3d 21 21 73 26 26 21 21 73 2e 75 6e 73 61 66 65 2c 66 3d 21 21 73 26 26 21 21 73 2e 65 6e 75 6d 65 72 61 62 6c 65 2c 6c 3d 21 21 73 26 26 21 21 73 2e 6e 6f 54 61 72 67 65 74 47 65 74 2c 70 3d 73 26 26 76 6f 69 64 20 30 21 3d Data Ascii: r.get&&n(r.get,e,{getter:!0}),r.set&&n(r.set,e,{setter:!0}),o.f(t,e,r)}},8052:function(t,e,r){var n=r(7854),o=r(614),i=r(8880),a=r(6339),c=r(3505);t.exports=function(t,e,r,s){var u=!!s&&!!s.unsafe,f=!!s&&!!s.enumerable,l=!!s&&!!s.noTargetGet,p=s&&void 0!=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49719	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:56 UTC	588	OUT	GET /is-user-logged-in HTTP/1.1 Host: cex.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As
2024-03-29 13:44:56 UTC	1203	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:56 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 content-security-policy-report-only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; x-frame-options: SAMEORIGIN vary: Accept-Encoding set-cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fis-user-logged-in; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure access-control-allow-origin: access-control-allow-methods: POST, GET, OPTIONS strict-transport-security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c288d9c0a89-IAD
2024-03-29 13:44:56 UTC	53	IN	Data Raw: 32 66 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 64 61 74 61 22 3a 7b 22 69 73 55 73 65 72 4c 6f 67 67 65 64 49 6e 22 3a 66 61 6c 73 65 7d 7d 0d 0a Data Ascii: 2f{"status":"ok","data":{"isUserLoggedIn":false}}
2024-03-29 13:44:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49720	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:56 UTC	803	OUT	GET /single-bundle-widget?forPage=/buy-bitcoins&originator=cex HTTP/1.1 Host: cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/buy-bitcoins Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As
2024-03-29 13:44:56 UTC	1073	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:56 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 content-security-policy-report-only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://*.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; x-frame-options: SAMEORIGIN vary: Origin access-control-allow-origin: https://cex.io access-control-allow-methods: POST, GET, OPTIONS strict-transport-security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c2988ec3b2a-IAD
2024-03-29 13:44:56 UTC	296	IN	Data Raw: 32 63 37 30 0d 0a 3c 21 2d 2d 42 55 4e 44 4c 45 20 52 45 47 49 53 54 52 41 54 49 4f 4e 20 54 45 4d 50 4c 41 54 45 2d 2d 3e 0a 3c 64 69 76 20 69 64 3d 22 62 75 6e 64 6c 65 2d 66 6c 6f 77 2d 65 6e 74 72 79 22 3e 0a 20 20 20 20 3c 68 32 20 63 6c 61 73 73 3d 22 73 69 6e 67 6c 65 2d 62 75 6e 64 6c 65 2d 74 69 74 6c 65 2d 62 69 67 22 3e 0a 20 20 20 20 20 20 20 20 42 75 79 20 0a 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 69 64 3d 22 63 75 72 72 65 6e 74 43 72 79 70 74 6f 4e 61 6d 65 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 77 69 74 68 20 56 49 53 41 20 6f 72 20 4d 61 73 74 65 72 63 61 72 64 20 69 6e 20 0a 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 69 64 3d 22 63 75 72 72 65 6e 74 46 69 61 74 4e 61 6d 65 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c Data Ascii: 2c70...BUNDLE REGISTRATION TEMPLATE--><div id="bundle-flow-entry"> <h2 class="single-bundle-title-big"> Buy <span id="currentCryptoName"></span> with VISA or Mastercard in <span id="currentFiatName"></span> <
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 69 6e 67 6c 65 2d 62 75 6e 64 6c 65 2d 63 75 72 72 65 6e 63 79 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 69 6e 67 6c 65 2d 62 75 6e 64 6c 65 2d 63 75 72 72 65 6e 63 79 2d 69 74 65 6d 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 69 6e 67 6c 65 2d 62 75 6e 64 6c 65 2d 63 75 72 72 65 6e 63 79 2d 69 74 65 6d 2d 74 69 74 6c 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 42 75 79 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 69 6e 67 6c 65 2d 62 75 6e 64 6c Data Ascii: r"> <div class="single-bundle-currency"> <div class="single-bundle-currency-item"> <div class="single-bundle-currency-item-title"> Buy </div> <div class="single-bundl
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 69 76 20 63 6c 61 73 73 3d 22 62 75 6e 64 6c 65 2d 69 74 65 6d 2d 62 6f 64 79 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 75 6e 64 6c 65 2d 69 74 65 6d 2d 74 69 6d 65 72 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 75 6e 64 6c 65 2d 74 69 6d 65 72 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 75 6e 64 6c 65 2d 69 74 65 6d 2d 74 65 78 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 62 75 6e 64 6c 65 Data Ascii: iv class="bundle-item-body"> <div class="bundle-item-timer-wrapper"> <div class="bundle-timer-container"></div> <div class="bundle-item-text"> <p class="bundle
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 62 75 6e 64 6c 65 2d 65 6e 74 72 79 2d 63 75 72 72 65 6e 74 2d 73 79 6d 62 6f 6c 31 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 62 75 6e 64 6c 65 2d 65 6e 74 72 79 2d 62 75 79 2d 32 22 20 63 6c 61 73 73 3d 22 62 75 6e 64 6c 65 2d 69 74 65 6d 2d 62 75 74 74 6f 6e 22 3e 42 75 Data Ascii: n> <span class="bundle-entry-current-symbol1"></span> </p> </div> </div> <div id="bundle-entry-buy-2" class="bundle-item-button">Bu
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 59 6f 75 72 20 41 6d 6f 75 6e 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 75 6e 64 6c 65 2d 69 74 65 6d 2d 62 6f 64 79 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 75 73 74 6f 6d 2d 62 75 6e 64 6c 65 2d 69 6e 70 75 74 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 75 73 74 6f 6d 2d 62 75 6e 64 6c 65 73 2d 69 6e 70 75 74 20 73 79 6d 62 6f 6c 32 20 69 6e 70 75 74 2d 68 6f 6c 64 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: Your Amount </div> <div class="bundle-item-body"> <div class="custom-bundle-input-wrapper"> <div class="custom-bundles-input symbol2 input-holder">
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 76 3e 0a 0a 20 20 20 20 3c 21 2d 2d 2f 50 6f 70 75 70 73 2d 2d 3e 0a 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 75 6e 64 6c 65 2d 70 6f 70 75 70 20 70 6f 70 75 70 2d 63 6c 6f 73 65 22 20 69 64 3d 22 68 6f 77 49 74 57 6f 72 6b 73 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 75 6e 64 6c 65 2d 70 6f 70 75 70 2d 77 72 61 70 70 65 72 20 77 69 64 65 2d 70 6f 70 75 70 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 75 6e 64 6c 65 2d 70 6f 70 75 70 2d 68 65 61 64 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 2d 63 6c 6f 73 65 20 63 6c 6f 73 65 22 20 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 43 6c 6f 73 65 22 0a 20 20 20 20 20 20 20 Data Ascii: v> .../Popups--> <div class="bundle-popup popup-close" id="howItWorks"> <div class="bundle-popup-wrapper wide-popup"> <div class="bundle-popup-header"> <a class="modal-close close" aria-label="Close"
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 31 4f 57 4d 74 4c 6a 49 7a 4c 6a 49 77 4d 53 30 75 4e 54 59 32 4c 6a 49 7a 4e 53 30 75 4f 44 49 35 4c 6a 41 33 4f 53 30 75 4f 44 49 30 4c 53 34 30 4f 44 67 74 4d 53 34 32 4d 6a 67 74 4d 53 34 77 4d 54 63 74 4d 69 34 30 4d 44 6b 74 4d 53 34 31 4f 44 59 74 4c 6a 49 30 4f 43 30 75 4d 54 67 79 4c 53 34 7a 4e 53 30 75 4e 54 41 34 4c 53 34 79 4e 54 51 74 4c 6a 68 73 4d 53 34 78 4e 6a 59 74 4d 79 34 31 4e 44 46 6a 4c 6a 41 34 4f 43 30 75 4d 6a 59 33 4c 6a 41 77 4e 79 30 75 4e 54 55 32 4c 53 34 79 4d 44 4d 74 4c 6a 63 30 4d 69 30 75 4e 54 6b 32 4c 53 34 31 4d 6a 6b 74 4d 53 34 78 4e 79 30 78 4c 6a 41 35 4d 53 30 78 4c 6a 63 79 4d 79 30 78 4c 6a 59 34 4d 53 30 75 4d 54 6b 79 4c 53 34 79 4d 44 59 74 4c 6a 51 34 4e 53 30 75 4d 6a 67 74 4c 6a 63 31 4c 53 34 78 4f 44 Data Ascii: 1OWMtLjIzLjIwMS0uNTY2LjIzNS0uODI5LjA3OS0uODI0LS40ODgtMS42MjgtMS4wMTctMi40MDktMS41ODYtLjI0OC0uMTgyLS4zNS0uNTA4LS4yNTQtLjhsMS4xNjYtMy41NDFjLjA4OC0uMjY3LjAwNy0uNTU2LS4yMDMtLjc0Mi0uNTk2LS41MjktMS4xNy0xLjA5MS0xLjcyMy0xLjY4MS0uMTkyLS4yMDYtLjQ4NS0uMjgtLjc1LS4xOD
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 4c 6a 59 78 4e 79 34 78 4e 54 67 74 4c 6a 67 79 4e 69 34 33 4e 43 30 75 4e 6a 67 67 4d 53 34 31 4d 6a 45 74 4d 53 34 7a 4d 6a 67 67 4d 69 34 7a 4e 43 30 78 4c 6a 6b 30 4e 43 34 79 4e 44 4d 74 4c 6a 45 34 4d 69 34 31 4e 7a 67 74 4c 6a 45 34 4f 43 34 34 4d 6a 6b 74 4c 6a 41 78 4f 47 77 7a 4c 6a 45 79 4e 69 41 79 4c 6a 45 78 4e 32 4d 75 4d 6a 4d 75 4d 54 55 32 4c 6a 55 79 4e 79 34 78 4e 54 6b 75 4e 7a 59 7a 4c 6a 41 78 4e 43 34 31 4f 54 59 74 4c 6a 4d 32 4e 69 41 78 4c 6a 49 77 4d 53 30 75 4e 7a 41 30 49 44 45 75 4f 44 45 31 4c 54 45 75 4d 44 45 32 4c 6a 49 31 4d 69 30 75 4d 54 49 34 4c 6a 51 77 4e 43 30 75 4d 7a 6b 78 4c 6a 4d 34 4e 53 30 75 4e 6a 63 7a 62 43 30 75 4d 6a 55 7a 4c 54 4d 75 4e 7a 46 6a 4c 53 34 77 4d 6a 45 74 4c 6a 4d 77 4f 43 34 78 4e 54 6b Data Ascii: LjYxNy4xNTgtLjgyNi43NC0uNjggMS41MjEtMS4zMjggMi4zNC0xLjk0NC4yNDMtLjE4Mi41NzgtLjE4OC44MjktLjAxOGwzLjEyNiAyLjExN2MuMjMuMTU2LjUyNy4xNTkuNzYzLjAxNC41OTYtLjM2NiAxLjIwMS0uNzA0IDEuODE1LTEuMDE2LjI1Mi0uMTI4LjQwNC0uMzkxLjM4NS0uNjczbC0uMjUzLTMuNzFjLS4wMjEtLjMwOC4xNTk
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 6d 4d 74 4c 6a 49 78 4d 79 34 78 4e 7a 6b 74 4c 6a 49 35 4e 69 34 30 4e 6a 55 74 4c 6a 49 78 4f 43 34 33 4d 7a 49 75 4d 54 63 79 4c 6a 55 35 4c 6a 4d 79 4d 69 41 78 4c 6a 45 34 4e 43 34 30 4e 54 45 67 4d 53 34 33 4f 44 45 75 4d 44 55 34 4c 6a 49 33 4c 6a 49 32 4e 53 34 30 4f 43 34 31 4d 7a 55 75 4e 54 4d 33 62 44 4d 75 4e 6a 6b 79 4c 6a 63 34 4d 32 4d 75 4d 6a 6b 34 4c 6a 41 32 4d 79 34 31 4d 6a 67 75 4d 7a 45 75 4e 54 59 7a 4c 6a 59 78 4d 79 34 78 4d 6a 59 67 4d 53 34 77 4e 6a 63 75 4d 54 6b 31 49 44 49 75 4d 54 4d 34 4c 6a 49 77 4e 79 41 7a 4c 6a 49 77 4f 43 34 77 4d 44 51 75 4d 7a 41 33 4c 53 34 78 4f 54 55 75 4e 54 67 79 4c 53 34 30 4f 44 59 75 4e 6a 67 78 62 43 30 7a 4c 6a 55 7a 4e 53 41 78 4c 6a 49 77 4e 57 4d 74 4c 6a 49 32 4e 79 34 77 4f 54 45 74 Data Ascii: mMtLjIxMy4xNzktLjI5Ni40NjUtLjIxOC43MzIuMTcyLjU5LjMyMiAxLjE4NC40NTEgMS43ODEuMDU4LjI3LjI2NS40OC41MzUuNTM3bDMuNjkyLjc4M2MuMjk4LjA2My41MjguMzEuNTYzLjYxMy4xMjYgMS4wNjcuMTk1IDIuMTM4LjIwNyAzLjIwOC4wMDQuMzA3LS4xOTUuNTgyLS40ODYuNjgxbC0zLjUzNSAxLjIwNWMtLjI2Ny4wOTEt
2024-03-29 13:44:56 UTC	136	IN	Data Raw: 63 35 4f 53 30 7a 4c 6a 41 34 4d 32 4d 74 4d 53 34 30 4e 54 55 74 4c 6a 45 7a 4d 79 30 79 4c 6a 67 33 4f 43 30 75 4e 54 41 32 4c 54 51 75 4d 6a 45 7a 4c 54 45 75 4d 54 41 30 62 43 30 79 4c 6a 49 77 4e 79 41 79 4c 6a 49 35 4e 32 4d 74 4d 53 34 31 4d 54 4d 74 4c 6a 67 77 4e 43 30 79 4c 6a 6b 77 4f 43 30 78 4c 6a 67 31 4d 79 30 30 4c 6a 45 79 4d 53 30 7a 4c 6a 45 7a 4d 57 77 78 4c 6a 59 78 4d 79 30 79 0d 0a Data Ascii: c5OS0zLjA4M2MtMS40NTUtLjEzMy0yLjg3OC0uNTA2LTQuMjEzLTEuMTA0bC0yLjIwNyAyLjI5N2MtMS41MTMtLjgwNC0yLjkwOC0xLjg1My00LjEyMS0zLjEzMWwxLjYxMy0y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49721	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:56 UTC	783	OUT	GET /scripts/currencyProfileForWidget/ HTTP/1.1 Host: cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cex.io/buy-bitcoins Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As
2024-03-29 13:44:56 UTC	1137	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:56 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 content-security-policy-report-only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; x-frame-options: SAMEORIGIN vary: Accept-Encoding access-control-allow-origin: access-control-allow-methods: POST, GET, OPTIONS Cache-Control: max-age=21600 strict-transport-security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c299f984b87-IAD
2024-03-29 13:44:56 UTC	232	IN	Data Raw: 37 62 33 32 0d 0a 20 76 61 72 20 63 75 72 72 65 6e 63 79 50 72 6f 66 69 6c 65 44 61 74 61 20 3d 20 7b 22 63 66 67 22 3a 7b 22 47 48 53 22 3a 7b 22 73 63 61 6c 65 22 3a 30 2c 22 63 75 73 74 6f 6d 54 78 4c 69 6e 6b 46 6e 4e 61 6d 65 22 3a 22 22 2c 22 70 72 65 63 69 73 69 6f 6e 22 3a 38 2c 22 66 69 61 74 22 3a 66 61 6c 73 65 2c 22 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 73 22 3a 36 2c 22 63 6f 6d 6d 69 73 73 69 6f 6e 22 3a 30 2e 30 30 30 31 2c 22 6d 69 6e 69 6d 61 6c 57 69 74 68 64 72 61 77 61 6c 41 6d 6f 75 6e 74 22 3a 30 2e 30 31 2c 22 6e 61 6d 65 22 3a 22 47 48 53 22 2c 22 64 69 73 61 62 6c 65 43 72 65 61 74 65 56 6f 75 63 68 65 72 22 3a 66 61 6c 73 65 2c 22 64 69 73 61 62 6c 65 52 65 64 65 Data Ascii: 7b32 var currencyProfileData = {"cfg":{"GHS":{"scale":0,"customTxLinkFnName":"","precision":8,"fiat":false,"confirmations":6,"commission":0.0001,"minimalWithdrawalAmount":0.01,"name":"GHS","disableCreateVoucher":false,"disableRede
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 65 6d 56 6f 75 63 68 65 72 22 3a 66 61 6c 73 65 7d 2c 22 42 54 43 22 3a 7b 22 73 63 61 6c 65 22 3a 30 2c 22 63 75 73 74 6f 6d 54 78 4c 69 6e 6b 46 6e 4e 61 6d 65 22 3a 22 22 2c 22 70 72 65 63 69 73 69 6f 6e 22 3a 38 2c 22 66 69 61 74 22 3a 66 61 6c 73 65 2c 22 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 73 22 3a 32 2c 22 63 6f 6d 6d 69 73 73 69 6f 6e 22 3a 30 2e 30 30 30 35 2c 22 6d 69 6e 69 6d 61 6c 57 69 74 68 64 72 61 77 61 6c 41 6d 6f 75 6e 74 22 3a 30 2e 30 30 32 2c 22 6e 61 6d 65 22 3a 22 62 69 74 63 6f 69 6e 22 2c 22 74 78 4c 69 6e 6b 22 3a 22 68 74 74 70 3a 2f 2f 62 6c 6f 63 6b 63 68 61 69 6e 2e 69 6e 66 6f 2f 74 78 2f 22 2c 22 64 69 73 61 62 6c 65 43 72 65 61 74 65 56 6f 75 63 68 65 72 22 3a 66 61 6c 73 65 2c 22 64 69 73 61 62 6c 65 52 65 64 65 65 6d 56 Data Ascii: emVoucher":false},"BTC":{"scale":0,"customTxLinkFnName":"","precision":8,"fiat":false,"confirmations":2,"commission":0.0005,"minimalWithdrawalAmount":0.002,"name":"bitcoin","txLink":"http://blockchain.info/tx/","disableCreateVoucher":false,"disableRedeemV
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 3a 7b 22 73 63 61 6c 65 22 3a 30 2c 22 63 75 73 74 6f 6d 54 78 4c 69 6e 6b 46 6e 4e 61 6d 65 22 3a 22 22 2c 22 70 72 65 63 69 73 69 6f 6e 22 3a 38 2c 22 66 69 61 74 22 3a 66 61 6c 73 65 2c 22 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 73 22 3a 36 2c 22 63 6f 6d 6d 69 73 73 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 6d 69 6e 69 6d 61 6c 57 69 74 68 64 72 61 77 61 6c 41 6d 6f 75 6e 74 22 3a 31 2c 22 6e 61 6d 65 22 3a 22 4e 4d 43 22 2c 22 64 69 73 61 62 6c 65 43 72 65 61 74 65 56 6f 75 63 68 65 72 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 52 65 64 65 65 6d 56 6f 75 63 68 65 72 22 3a 66 61 6c 73 65 7d 2c 22 44 4f 47 45 22 3a 7b 22 73 63 61 6c 65 22 3a 30 2c 22 63 75 73 74 6f 6d 54 78 4c 69 6e 6b 46 6e 4e 61 6d 65 22 3a 22 22 2c 22 70 72 65 63 69 73 69 6f 6e 22 3a 36 2c Data Ascii: :{"scale":0,"customTxLinkFnName":"","precision":8,"fiat":false,"confirmations":6,"commission":0.001,"minimalWithdrawalAmount":1,"name":"NMC","disableCreateVoucher":true,"disableRedeemVoucher":false},"DOGE":{"scale":0,"customTxLinkFnName":"","precision":6,
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 6e 66 69 72 6d 61 74 69 6f 6e 73 22 3a 36 2c 22 63 6f 6d 6d 69 73 73 69 6f 6e 22 3a 30 2e 30 30 30 31 2c 22 6d 69 6e 69 6d 61 6c 57 69 74 68 64 72 61 77 61 6c 41 6d 6f 75 6e 74 22 3a 30 2e 30 31 2c 22 6e 61 6d 65 22 3a 22 52 55 42 22 7d 2c 22 46 54 43 22 3a 7b 22 73 63 61 6c 65 22 3a 30 2c 22 63 75 73 74 6f 6d 54 78 4c 69 6e 6b 46 6e 4e 61 6d 65 22 3a 22 22 2c 22 70 72 65 63 69 73 69 6f 6e 22 3a 32 2c 22 66 69 61 74 22 3a 66 61 6c 73 65 2c 22 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 73 22 3a 36 2c 22 63 6f 6d 6d 69 73 73 69 6f 6e 22 3a 30 2e 31 2c 22 6d 69 6e 69 6d 61 6c 57 69 74 68 64 72 61 77 61 6c 41 6d 6f 75 6e 74 22 3a 31 2c 22 6e 61 6d 65 22 3a 22 46 54 43 22 2c 22 64 69 73 61 62 6c 65 43 72 65 61 74 65 56 6f 75 63 68 65 72 22 3a 66 61 6c 73 65 2c 22 64 Data Ascii: nfirmations":6,"commission":0.0001,"minimalWithdrawalAmount":0.01,"name":"RUB"},"FTC":{"scale":0,"customTxLinkFnName":"","precision":2,"fiat":false,"confirmations":6,"commission":0.1,"minimalWithdrawalAmount":1,"name":"FTC","disableCreateVoucher":false,"d
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 65 2c 22 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 73 22 3a 36 2c 22 63 6f 6d 6d 69 73 73 69 6f 6e 22 3a 30 2e 31 2c 22 6d 69 6e 69 6d 61 6c 57 69 74 68 64 72 61 77 61 6c 41 6d 6f 75 6e 74 22 3a 31 2c 22 6e 61 6d 65 22 3a 22 4d 45 43 22 2c 22 64 69 73 61 62 6c 65 43 72 65 61 74 65 56 6f 75 63 68 65 72 22 3a 66 61 6c 73 65 2c 22 64 69 73 61 62 6c 65 52 65 64 65 65 6d 56 6f 75 63 68 65 72 22 3a 66 61 6c 73 65 7d 2c 22 57 44 43 22 3a 7b 22 73 63 61 6c 65 22 3a 30 2c 22 63 75 73 74 6f 6d 54 78 4c 69 6e 6b 46 6e 4e 61 6d 65 22 3a 22 22 2c 22 70 72 65 63 69 73 69 6f 6e 22 3a 32 2c 22 66 69 61 74 22 3a 66 61 6c 73 65 2c 22 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 73 22 3a 36 2c 22 63 6f 6d 6d 69 73 73 69 6f 6e 22 3a 30 2e 31 2c 22 6d 69 6e 69 6d 61 6c 57 69 74 68 64 72 61 Data Ascii: e,"confirmations":6,"commission":0.1,"minimalWithdrawalAmount":1,"name":"MEC","disableCreateVoucher":false,"disableRedeemVoucher":false},"WDC":{"scale":0,"customTxLinkFnName":"","precision":2,"fiat":false,"confirmations":6,"commission":0.1,"minimalWithdra
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 22 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 73 22 3a 30 2c 22 63 6f 6d 6d 69 73 73 69 6f 6e 22 3a 30 2e 30 32 2c 22 6d 69 6e 69 6d 61 6c 57 69 74 68 64 72 61 77 61 6c 41 6d 6f 75 6e 74 22 3a 30 2e 31 2c 22 6e 61 6d 65 22 3a 22 58 52 50 22 2c 22 74 78 4c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 78 72 70 63 68 61 72 74 73 2e 72 69 70 70 6c 65 2e 63 6f 6d 2f 23 2f 74 72 61 6e 73 61 63 74 69 6f 6e 73 2f 22 2c 22 64 69 73 61 62 6c 65 43 72 65 61 74 65 56 6f 75 63 68 65 72 22 3a 66 61 6c 73 65 2c 22 64 69 73 61 62 6c 65 52 65 64 65 65 6d 56 6f 75 63 68 65 72 22 3a 66 61 6c 73 65 7d 2c 22 58 4c 4d 22 3a 7b 22 73 63 61 6c 65 22 3a 30 2c 22 63 75 73 74 6f 6d 54 78 4c 69 6e 6b 46 6e 4e 61 6d 65 22 3a 22 22 2c 22 70 72 65 63 69 73 69 6f 6e 22 3a 37 2c 22 66 69 61 74 22 Data Ascii: "confirmations":0,"commission":0.02,"minimalWithdrawalAmount":0.1,"name":"XRP","txLink":"https://xrpcharts.ripple.com/#/transactions/","disableCreateVoucher":false,"disableRedeemVoucher":false},"XLM":{"scale":0,"customTxLinkFnName":"","precision":7,"fiat"
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 6f 2f 74 78 2f 22 2c 22 64 69 73 61 62 6c 65 43 72 65 61 74 65 56 6f 75 63 68 65 72 22 3a 66 61 6c 73 65 2c 22 64 69 73 61 62 6c 65 52 65 64 65 65 6d 56 6f 75 63 68 65 72 22 3a 66 61 6c 73 65 2c 22 64 75 73 74 4c 69 6d 69 74 22 3a 31 30 7d 2c 22 4d 48 43 22 3a 7b 22 73 63 61 6c 65 22 3a 30 2c 22 63 75 73 74 6f 6d 54 78 4c 69 6e 6b 46 6e 4e 61 6d 65 22 3a 22 22 2c 22 70 72 65 63 69 73 69 6f 6e 22 3a 36 2c 22 66 69 61 74 22 3a 66 61 6c 73 65 2c 22 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 73 22 3a 31 2c 22 63 6f 6d 6d 69 73 73 69 6f 6e 22 3a 35 30 30 2c 22 6d 69 6e 69 6d 61 6c 57 69 74 68 64 72 61 77 61 6c 41 6d 6f 75 6e 74 22 3a 35 2c 22 6e 61 6d 65 22 3a 22 4d 48 43 22 2c 22 74 78 4c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 76 65 6e 75 73 2e 6d 68 73 63 61 6e Data Ascii: o/tx/","disableCreateVoucher":false,"disableRedeemVoucher":false,"dustLimit":10},"MHC":{"scale":0,"customTxLinkFnName":"","precision":6,"fiat":false,"confirmations":1,"commission":500,"minimalWithdrawalAmount":5,"name":"MHC","txLink":"https://venus.mhscan
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 43 72 65 61 74 65 56 6f 75 63 68 65 72 22 3a 66 61 6c 73 65 2c 22 64 69 73 61 62 6c 65 52 65 64 65 65 6d 56 6f 75 63 68 65 72 22 3a 66 61 6c 73 65 2c 22 64 75 73 74 4c 69 6d 69 74 22 3a 31 7d 2c 22 55 53 44 54 22 3a 7b 22 73 63 61 6c 65 22 3a 30 2c 22 63 75 73 74 6f 6d 54 78 4c 69 6e 6b 46 6e 4e 61 6d 65 22 3a 22 22 2c 22 70 72 65 63 69 73 69 6f 6e 22 3a 36 2c 22 66 69 61 74 22 3a 66 61 6c 73 65 2c 22 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 73 22 3a 32 35 2c 22 63 6f 6d 6d 69 73 73 69 6f 6e 22 3a 32 2e 35 2c 22 6d 69 6e 69 6d 61 6c 57 69 74 68 64 72 61 77 61 6c 41 6d 6f 75 6e 74 22 3a 31 30 2c 22 6e 61 6d 65 22 3a 22 55 53 44 54 22 2c 22 74 78 4c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 65 74 68 65 72 73 63 61 6e 2e 69 6f 2f 74 78 2f 22 2c 22 64 69 73 61 62 Data Ascii: CreateVoucher":false,"disableRedeemVoucher":false,"dustLimit":1},"USDT":{"scale":0,"customTxLinkFnName":"","precision":6,"fiat":false,"confirmations":25,"commission":2.5,"minimalWithdrawalAmount":10,"name":"USDT","txLink":"https://etherscan.io/tx/","disab
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 42 41 54 22 3a 7b 22 73 63 61 6c 65 22 3a 30 2c 22 63 75 73 74 6f 6d 54 78 4c 69 6e 6b 46 6e 4e 61 6d 65 22 3a 22 22 2c 22 70 72 65 63 69 73 69 6f 6e 22 3a 36 2c 22 66 69 61 74 22 3a 66 61 6c 73 65 2c 22 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 73 22 3a 32 35 2c 22 63 6f 6d 6d 69 73 73 69 6f 6e 22 3a 35 2c 22 6d 69 6e 69 6d 61 6c 57 69 74 68 64 72 61 77 61 6c 41 6d 6f 75 6e 74 22 3a 32 30 2c 22 6e 61 6d 65 22 3a 22 42 41 54 22 2c 22 74 78 4c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 65 74 68 65 72 73 63 61 6e 2e 69 6f 2f 74 78 2f 22 2c 22 64 69 73 61 62 6c 65 43 72 65 61 74 65 56 6f 75 63 68 65 72 22 3a 66 61 6c 73 65 2c 22 64 69 73 61 62 6c 65 52 65 64 65 65 6d 56 6f 75 63 68 65 72 22 3a 66 61 6c 73 65 2c 22 64 75 73 74 4c 69 6d 69 74 22 3a 31 30 7d 2c 22 41 Data Ascii: BAT":{"scale":0,"customTxLinkFnName":"","precision":6,"fiat":false,"confirmations":25,"commission":5,"minimalWithdrawalAmount":20,"name":"BAT","txLink":"https://etherscan.io/tx/","disableCreateVoucher":false,"disableRedeemVoucher":false,"dustLimit":10},"A
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 6f 6e 66 69 72 6d 61 74 69 6f 6e 73 22 3a 32 35 2c 22 63 6f 6d 6d 69 73 73 69 6f 6e 22 3a 30 2e 33 2c 22 6d 69 6e 69 6d 61 6c 57 69 74 68 64 72 61 77 61 6c 41 6d 6f 75 6e 74 22 3a 30 2e 36 2c 22 6e 61 6d 65 22 3a 22 4c 49 4e 4b 22 2c 22 74 78 4c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 65 74 68 65 72 73 63 61 6e 2e 69 6f 2f 74 78 2f 22 2c 22 64 69 73 61 62 6c 65 43 72 65 61 74 65 56 6f 75 63 68 65 72 22 3a 66 61 6c 73 65 2c 22 64 69 73 61 62 6c 65 52 65 64 65 65 6d 56 6f 75 63 68 65 72 22 3a 66 61 6c 73 65 2c 22 64 75 73 74 4c 69 6d 69 74 22 3a 30 2e 34 7d 2c 22 4d 4b 52 22 3a 7b 22 73 63 61 6c 65 22 3a 30 2c 22 63 75 73 74 6f 6d 54 78 4c 69 6e 6b 46 6e 4e 61 6d 65 22 3a 22 22 2c 22 70 72 65 63 69 73 69 6f 6e 22 3a 36 2c 22 66 69 61 74 22 3a 66 61 6c 73 Data Ascii: onfirmations":25,"commission":0.3,"minimalWithdrawalAmount":0.6,"name":"LINK","txLink":"https://etherscan.io/tx/","disableCreateVoucher":false,"disableRedeemVoucher":false,"dustLimit":0.4},"MKR":{"scale":0,"customTxLinkFnName":"","precision":6,"fiat":fals

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49724	172.67.20.8	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:56 UTC	553	OUT	GET /client_data/9022a6a83360995949fccfed/banner.js HTTP/1.1 Host: cdn-cookieyes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:56 UTC	485	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:56 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Wed, 27 Mar 2024 14:20:02 GMT etag: W/"18395-614a51a401e33-gzip" vary: Accept-Encoding access-control-allow-origin: * access-control-allow-methods: GET, OPTIONS Cache-Control: max-age=0, must-revalidate, s-maxage=604800, proxy-revalidate CF-Cache-Status: HIT Age: 154737 Server: cloudflare CF-RAY: 86c04c2ace7a177e-IAD
2024-03-29 13:44:56 UTC	884	IN	Data Raw: 37 64 62 61 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 39 36 36 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 38 35 34 29 2c 6f 3d 6e 28 36 31 34 29 2c 69 3d 6e 28 36 33 33 30 29 2c 63 3d 72 2e 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6f 28 74 29 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 63 28 69 28 74 29 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 7d 2c 39 34 38 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 38 35 34 29 2c 6f 3d 6e 28 34 34 31 31 29 2c 69 3d 6e 28 36 33 33 30 29 2c 63 3d 72 2e 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f Data Ascii: 7dba!function(){var t={9662:function(t,e,n){var r=n(7854),o=n(614),i=n(6330),c=r.TypeError;t.exports=function(t){if(o(t))return t;throw c(i(t)+" is not a function")}},9483:function(t,e,n){var r=n(7854),o=n(4411),i=n(6330),c=r.TypeError;t.exports=functio
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 74 68 72 6f 77 20 69 28 22 49 6e 63 6f 72 72 65 63 74 20 69 6e 76 6f 63 61 74 69 6f 6e 22 29 7d 7d 2c 39 36 37 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 38 35 34 29 2c 6f 3d 6e 28 31 31 31 29 2c 69 3d 72 2e 53 74 72 69 6e 67 2c 63 3d 72 2e 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6f 28 74 29 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 63 28 69 28 74 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 7d 7d 2c 37 35 35 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 32 39 33 29 3b 74 2e 65 78 70 6f 72 74 73 3d 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: throw i("Incorrect invocation")}},9670:function(t,e,n){var r=n(7854),o=n(111),i=r.String,c=r.TypeError;t.exports=function(t){if(o(t))return t;throw c(i(t)+" is not an object")}},7556:function(t,e,n){var r=n(7293);t.exports=r((function(){if("function"==typ
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 39 39 37 34 29 2c 6f 3d 6e 28 31 37 30 32 29 2c 69 3d 6e 28 38 33 36 31 29 2c 63 3d 6e 28 37 39 30 38 29 2c 61 3d 6e 28 36 32 34 34 29 2c 75 3d 6e 28 35 34 31 37 29 2c 73 3d 6f 28 5b 5d 2e 70 75 73 68 29 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 31 3d 3d 74 2c 6e 3d 32 3d 3d 74 2c 6f 3d 33 3d 3d 74 2c 66 3d 34 3d 3d 74 2c 6c 3d 36 3d 3d 74 2c 70 3d 37 3d 3d 74 2c 64 3d 35 3d 3d 74 7c 7c 6c 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 76 2c 79 2c 68 2c 67 29 7b 66 6f 72 28 76 61 72 20 62 2c 6d 2c 5f 3d 63 28 76 29 2c 78 3d 69 28 5f 29 2c 6b 3d 72 28 79 2c 68 29 2c 53 3d 61 28 78 29 2c 77 3d 30 2c 4f 3d 67 7c 7c 75 2c 6a 3d 65 3f 4f 28 76 2c 53 29 3a 6e 7c 7c 70 3f 4f 28 76 Data Ascii: ion(t,e,n){var r=n(9974),o=n(1702),i=n(8361),c=n(7908),a=n(6244),u=n(5417),s=o([].push),f=function(t){var e=1==t,n=2==t,o=3==t,f=4==t,l=6==t,p=7==t,d=5==t\|\|l;return function(v,y,h,g){for(var b,m,_=c(v),x=i(_),k=r(y,h),S=a(x),w=0,O=g\|\|u,j=e?O(v,S):n\|\|p?O(v
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 6e 73 74 72 75 63 74 6f 72 2c 28 69 28 65 29 26 26 28 65 3d 3d 3d 75 7c 7c 6f 28 65 2e 70 72 6f 74 6f 74 79 70 65 29 29 7c 7c 63 28 65 29 26 26 6e 75 6c 6c 3d 3d 3d 28 65 3d 65 5b 61 5d 29 29 26 26 28 65 3d 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 3d 3d 3d 65 3f 75 3a 65 7d 7d 2c 35 34 31 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 34 37 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 72 28 74 29 29 28 30 3d 3d 3d 65 3f 30 3a 65 29 7d 7d 2c 33 34 31 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 39 36 37 30 29 2c 6f 3d 6e 28 39 32 31 32 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 69 Data Ascii: nstructor,(i(e)&&(e===u\|\|o(e.prototype))\|\|c(e)&&null===(e=e[a]))&&(e=void 0)),void 0===e?u:e}},5417:function(t,e,n){var r=n(7475);t.exports=function(t,e){return new(r(t))(0===e?0:e)}},3411:function(t,e,n){var r=n(9670),o=n(9212);t.exports=function(t,e,n,i
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 61 28 74 2c 64 29 2c 76 28 74 2c 7b 74 79 70 65 3a 65 2c 69 6e 64 65 78 3a 6f 28 6e 75 6c 6c 29 2c 66 69 72 73 74 3a 76 6f 69 64 20 30 2c 6c 61 73 74 3a 76 6f 69 64 20 30 2c 73 69 7a 65 3a 30 7d 29 2c 6c 7c 7c 28 74 2e 73 69 7a 65 3d 30 29 2c 6e 75 6c 6c 21 3d 72 26 26 75 28 72 2c 74 5b 73 5d 2c 7b 74 68 61 74 3a 74 2c 41 53 5f 45 4e 54 52 49 45 53 3a 6e 7d 29 7d 29 29 2c 64 3d 66 2e 70 72 6f 74 6f 74 79 70 65 2c 68 3d 79 28 65 29 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 2c 6f 2c 69 3d 68 28 74 29 2c 63 3d 62 28 74 2c 65 29 3b 72 65 74 75 72 6e 20 63 3f 63 2e 76 61 6c 75 65 3d 6e 3a 28 69 2e 6c 61 73 74 3d 63 3d 7b 69 6e 64 65 78 3a 6f 3d 70 28 65 2c 21 30 29 2c 6b 65 79 3a 65 2c Data Ascii: (function(t,r){a(t,d),v(t,{type:e,index:o(null),first:void 0,last:void 0,size:0}),l\|\|(t.size=0),null!=r&&u(r,t[s],{that:t,AS_ENTRIES:n})})),d=f.prototype,h=y(e),g=function(t,e,n){var r,o,i=h(t),c=b(t,e);return c?c.value=n:(i.last=c={index:o=p(e,!0),key:e,
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 22 20 49 74 65 72 61 74 6f 72 22 2c 6f 3d 79 28 65 29 2c 69 3d 79 28 72 29 3b 73 28 74 2c 65 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 28 74 68 69 73 2c 7b 74 79 70 65 3a 72 2c 74 61 72 67 65 74 3a 74 2c 73 74 61 74 65 3a 6f 28 74 29 2c 6b 69 6e 64 3a 65 2c 6c 61 73 74 3a 76 6f 69 64 20 30 7d 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 69 28 74 68 69 73 29 2c 65 3d 74 2e 6b 69 6e 64 2c 6e 3d 74 2e 6c 61 73 74 3b 6e 26 26 6e 2e 72 65 6d 6f 76 65 64 3b 29 6e 3d 6e 2e 70 72 65 76 69 6f 75 73 3b 72 65 74 75 72 6e 20 74 2e 74 61 72 67 65 74 26 26 28 74 2e 6c 61 73 74 3d 6e 3d 6e 3f 6e 2e 6e 65 78 74 3a 74 2e 73 74 61 74 65 2e 66 69 72 73 74 29 3f 22 6b 65 79 73 22 3d 3d 65 3f 7b 76 61 6c 75 65 3a 6e 2e 6b 65 79 2c 64 Data Ascii: " Iterator",o=y(e),i=y(r);s(t,e,(function(t,e){v(this,{type:r,target:t,state:o(t),kind:e,last:void 0})}),(function(){for(var t=i(this),e=t.kind,n=t.last;n&&n.removed;)n=n.previous;return t.target&&(t.last=n=n?n.next:t.state.first)?"keys"==e?{value:n.key,d
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 77 20 5f 2c 74 2c 6b 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 73 28 65 2c 6e 5b 6d 5d 2c 7b 74 68 61 74 3a 6e 2c 41 53 5f 45 4e 54 52 49 45 53 3a 67 7d 29 2c 6e 7d 29 29 29 2e 70 72 6f 74 6f 74 79 70 65 3d 78 2c 78 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 6b 29 2c 28 45 7c 7c 43 29 26 26 28 77 28 22 64 65 6c 65 74 65 22 29 2c 77 28 22 68 61 73 22 29 2c 67 26 26 77 28 22 67 65 74 22 29 29 2c 28 43 7c 7c 6a 29 26 26 77 28 6d 29 2c 62 26 26 78 2e 63 6c 65 61 72 26 26 64 65 6c 65 74 65 20 78 2e 63 6c 65 61 72 7d 72 65 74 75 72 6e 20 53 5b 74 5d 3d 6b 2c 72 28 7b 67 6c 6f 62 61 6c 3a 21 30 2c 63 6f 6e 73 74 72 75 63 74 6f 72 3a 21 30 2c 66 6f 72 63 65 64 3a 6b 21 3d 5f 7d 2c 53 29 2c 79 28 6b 2c 74 29 2c 62 7c 7c 6e 2e 73 65 74 53 74 72 6f 6e 67 28 Data Ascii: w _,t,k);return null!=e&&s(e,n[m],{that:n,AS_ENTRIES:g}),n}))).prototype=x,x.constructor=k),(E\|\|C)&&(w("delete"),w("has"),g&&w("get")),(C\|\|j)&&w(m),b&&x.clear&&delete x.clear}return S[t]=k,r({global:!0,constructor:!0,forced:k!=_},S),y(k,t),b\|\|n.setStrong(
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 3f 6f 2e 66 28 74 2c 63 2c 69 28 30 2c 6e 29 29 3a 74 5b 63 5d 3d 6e 7d 7d 2c 38 30 35 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 38 35 34 29 2c 6f 3d 6e 28 36 31 34 29 2c 69 3d 6e 28 38 38 38 30 29 2c 63 3d 6e 28 36 33 33 39 29 2c 61 3d 6e 28 33 35 30 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 75 29 7b 76 61 72 20 73 3d 21 21 75 26 26 21 21 75 2e 75 6e 73 61 66 65 2c 66 3d 21 21 75 26 26 21 21 75 2e 65 6e 75 6d 65 72 61 62 6c 65 2c 6c 3d 21 21 75 26 26 21 21 75 2e 6e 6f 54 61 72 67 65 74 47 65 74 2c 70 3d 75 26 26 76 6f 69 64 20 30 21 3d 3d 75 2e 6e 61 6d 65 3f 75 2e 6e 61 6d 65 3a 65 3b 72 65 74 75 72 6e 20 6f 28 6e 29 26 26 63 28 6e 2c 70 2c 75 29 2c 74 3d 3d 3d 72 3f 28 66 Data Ascii: ?o.f(t,c,i(0,n)):t[c]=n}},8052:function(t,e,n){var r=n(7854),o=n(614),i=n(8880),c=n(6339),a=n(3505);t.exports=function(t,e,n,u){var s=!!u&&!!u.unsafe,f=!!u&&!!u.enumerable,l=!!u&&!!u.noTargetGet,p=u&&void 0!==u.name?u.name:e;return o(n)&&c(n,p,u),t===r?(f
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 69 6e 20 50 29 29 26 26 64 28 50 2c 43 2c 54 5b 43 5d 29 3b 65 6c 73 65 20 72 28 7b 74 61 72 67 65 74 3a 65 2c 70 72 6f 74 6f 3a 21 30 2c 66 6f 72 63 65 64 3a 5f 7c 7c 49 7d 2c 54 29 3b 72 65 74 75 72 6e 20 69 26 26 21 6a 7c 7c 50 5b 78 5d 3d 3d 3d 4e 7c 7c 64 28 50 2c 78 2c 4e 2c 7b 6e 61 6d 65 3a 76 7d 29 2c 79 5b 65 5d 3d 4e 2c 54 7d 7d 2c 37 32 33 35 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 38 35 37 29 2c 6f 3d 6e 28 32 35 39 37 29 2c 69 3d 6e 28 36 30 36 31 29 2c 63 3d 6e 28 33 30 37 30 29 2e 66 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 72 2e 53 79 6d 62 6f 6c 7c 7c 28 72 2e 53 79 6d 62 6f 6c 3d 7b 7d 29 3b 6f 28 65 2c 74 29 7c 7c 63 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 69 Data Ascii: in P))&&d(P,C,T[C]);else r({target:e,proto:!0,forced:_\|\|I},T);return i&&!j\|\|P[x]===N\|\|d(P,x,N,{name:v}),y[e]=N,T}},7235:function(t,e,n){var r=n(857),o=n(2597),i=n(6061),c=n(3070).f;t.exports=function(t){var e=r.Symbol\|\|(r.Symbol={});o(e,t)\|\|c(e,t,{value:i
2024-03-29 13:44:56 UTC	1369	IN	Data Raw: 3d 6f 2e 50 65 62 62 6c 65 7d 2c 36 38 33 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 38 31 31 33 29 3b 74 2e 65 78 70 6f 72 74 73 3d 2f 28 3f 3a 69 70 61 64 7c 69 70 68 6f 6e 65 7c 69 70 6f 64 29 2e 2a 61 70 70 6c 65 77 65 62 6b 69 74 2f 69 2e 74 65 73 74 28 72 29 7d 2c 35 32 36 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 34 33 32 36 29 2c 6f 3d 6e 28 37 38 35 34 29 3b 74 2e 65 78 70 6f 72 74 73 3d 22 70 72 6f 63 65 73 73 22 3d 3d 72 28 6f 2e 70 72 6f 63 65 73 73 29 7d 2c 31 30 33 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 38 31 31 33 29 3b 74 2e 65 78 70 6f 72 74 73 3d 2f 77 65 62 30 73 28 3f 21 2e 2a 63 68 72 6f 6d 65 29 2f 69 2e 74 65 73 74 28 72 29 Data Ascii: =o.Pebble},6833:function(t,e,n){var r=n(8113);t.exports=/(?:ipad\|iphone\|ipod).applewebkit/i.test(r)},5268:function(t,e,n){var r=n(4326),o=n(7854);t.exports="process"==r(o.process)},1036:function(t,e,n){var r=n(8113);t.exports=/web0s(?!.chrome)/i.test(r)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49723	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:56 UTC	529	OUT	GET /static/resources/media/chevron-right.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins
2024-03-29 13:44:57 UTC	439	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:57 GMT Content-Type: image/svg+xml Content-Length: 238 Connection: close last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: "65fb2453-ee" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: MISS Accept-Ranges: bytes X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c2aa8a0393e-IAD
2024-03-29 13:44:57 UTC	238	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 30 2e 37 30 37 20 31 37 2e 37 30 37 4c 31 36 2e 34 31 34 20 31 32 4c 31 30 2e 37 30 37 20 36 2e 32 39 32 39 37 4c 39 2e 32 39 32 39 37 20 37 2e 37 30 36 39 37 4c 31 33 2e 35 38 36 20 31 32 4c 39 2e 32 39 32 39 37 20 31 36 2e 32 39 33 4c 31 30 2e 37 30 37 20 31 37 2e 37 30 37 5a 22 0a 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 62 6c 61 63 6b 22 2f 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: <svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M10.707 17.707L16.414 12L10.707 6.29297L9.29297 7.70697L13.586 12L9.29297 16.293L10.707 17.707Z" fill="black"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49722	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:56 UTC	529	OUT	GET /static/resources/media/cex-full-logo.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins
2024-03-29 13:44:57 UTC	457	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:57 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-dae" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: REVALIDATED X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c2aad9a72e7-IAD
2024-03-29 13:44:57 UTC	912	IN	Data Raw: 64 61 65 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 33 39 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 39 20 34 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 39 2e 38 35 37 32 20 32 32 2e 32 30 34 37 48 33 34 2e 37 39 33 36 4c 33 37 2e 31 36 36 34 20 31 39 2e 38 33 34 35 4c 33 34 2e 37 39 33 36 20 31 37 2e 34 36 34 34 48 31 39 2e 38 35 37 32 43 31 38 2e 35 34 35 39 20 31 37 2e 34 36 34 34 20 31 37 2e 34 38 34 34 20 31 38 2e 35 32 34 37 20 31 37 2e 34 38 34 34 20 31 39 2e 38 33 34 35 43 31 37 2e 34 38 34 34 20 32 31 2e 31 34 34 33 20 31 38 2e 35 34 35 39 20 32 32 Data Ascii: dae<svg width="139" height="40" viewBox="0 0 139 40" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M19.8572 22.2047H34.7936L37.1664 19.8345L34.7936 17.4644H19.8572C18.5459 17.4644 17.4844 18.5247 17.4844 19.8345C17.4844 21.1443 18.5459 22
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 33 33 2e 33 35 36 38 20 39 2e 31 36 36 36 35 20 33 30 2e 35 31 32 37 43 36 2e 33 31 39 32 34 20 32 37 2e 36 35 36 20 34 2e 37 34 35 36 38 20 32 33 2e 38 36 33 37 20 34 2e 37 34 35 36 38 20 31 39 2e 38 33 34 35 43 34 2e 37 34 35 36 38 20 31 35 2e 38 30 35 32 20 36 2e 33 31 39 32 34 20 31 32 2e 30 31 33 20 39 2e 31 36 36 36 35 20 39 2e 31 35 36 32 39 43 31 32 2e 30 32 36 35 20 36 2e 33 31 32 31 20 31 35 2e 38 32 33 31 20 34 2e 37 34 30 33 31 20 31 39 2e 38 35 36 39 20 34 2e 37 34 30 33 31 48 33 39 2e 37 31 33 38 56 30 48 31 39 2e 38 35 36 39 43 31 34 2e 35 34 39 32 20 30 20 39 2e 35 36 36 32 39 20 32 2e 30 35 38 32 39 20 35 2e 38 31 39 37 20 35 2e 38 31 33 31 32 5a 22 0a 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 43 43 43 43 22 2f 3e 0a 20 20 Data Ascii: 33.3568 9.16665 30.5127C6.31924 27.656 4.74568 23.8637 4.74568 19.8345C4.74568 15.8052 6.31924 12.013 9.16665 9.15629C12.0265 6.3121 15.8231 4.74031 19.8569 4.74031H39.7138V0H19.8569C14.5492 0 9.56629 2.05829 5.8197 5.81312Z" fill="#00CCCC"/>
2024-03-29 13:44:57 UTC	1228	IN	Data Raw: 38 37 2e 37 38 32 32 20 33 30 2e 30 35 37 48 38 39 2e 35 33 30 36 4c 39 36 2e 33 36 31 39 20 32 30 2e 33 37 36 38 4c 39 36 2e 34 34 39 33 20 32 30 2e 32 36 34 35 4c 39 36 2e 35 32 34 33 20 32 30 2e 33 37 36 38 4c 31 30 33 2e 33 35 36 20 33 30 2e 30 35 37 48 31 30 35 2e 30 39 31 4c 39 37 2e 33 36 31 20 31 39 2e 33 30 34 4c 39 37 2e 33 32 33 35 20 31 39 2e 32 35 34 31 5a 22 0a 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 32 36 32 43 33 33 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 31 33 2e 39 34 36 20 39 48 31 31 32 2e 35 36 56 33 30 2e 30 35 37 48 31 31 33 2e 39 34 36 56 39 5a 22 20 66 69 6c 6c 3d 22 23 30 30 43 43 43 43 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 33 35 2e 33 37 37 20 31 31 2e 38 39 34 31 43 31 33 33 2e 34 Data Ascii: 87.7822 30.057H89.5306L96.3619 20.3768L96.4493 20.2645L96.5243 20.3768L103.356 30.057H105.091L97.361 19.304L97.3235 19.2541Z" fill="#262C33"/> <path d="M113.946 9H112.56V30.057H113.946V9Z" fill="#00CCCC"/> <path d="M135.377 11.8941C133.4
2024-03-29 13:44:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49726	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:56 UTC	664	OUT	GET /static/resources/content/header.json HTTP/1.1 Host: profile.cex.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:
2024-03-29 13:44:57 UTC	427	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:57 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-1d9b" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c2ba80b577c-IAD
2024-03-29 13:44:57 UTC	942	IN	Data Raw: 31 64 39 62 0d 0a 7b 0a 20 20 20 20 22 63 6f 6d 70 61 6e 79 4c 6f 67 6f 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 43 45 58 2e 49 4f 22 2c 0a 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 22 3a 20 22 68 74 74 70 73 3a 2f 2f 63 65 78 2e 69 6f 2f 22 2c 0a 20 20 20 20 20 20 20 20 22 69 63 6f 6e 22 3a 20 22 63 65 78 2d 66 75 6c 6c 2d 6c 6f 67 6f 22 2c 0a 20 20 20 20 20 20 20 20 22 69 63 6f 6e 4c 65 67 61 63 79 22 3a 20 22 63 65 78 46 75 6c 6c 4c 6f 67 6f 22 2c 0a 20 20 20 20 20 20 20 20 22 77 69 64 74 68 22 3a 20 31 33 39 2c 0a 20 20 20 20 20 20 20 20 22 68 65 69 67 68 74 22 3a 20 34 30 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 6d 65 6e 75 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 70 72 6f 64 75 63 74 73 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 Data Ascii: 1d9b{ "companyLogo": { "title": "CEX.IO", "link": "https://cex.io/", "icon": "cex-full-logo", "iconLegacy": "cexFullLogo", "width": 139, "height": 40 }, "menu": { "products": {
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 69 63 6f 6e 4c 65 67 61 63 79 22 3a 20 22 63 68 69 70 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 54 72 61 64 69 6e 67 20 41 50 49 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 73 63 22 3a 20 22 41 75 74 6f 6d 61 74 65 20 79 6f 75 72 20 63 72 79 70 74 6f 63 75 72 72 65 6e 63 79 20 74 72 61 64 69 6e 67 20 77 69 74 68 20 72 65 6c 69 61 62 6c 65 20 61 6e 64 20 73 74 61 62 6c 65 20 41 50 49 2e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 22 3a 20 22 68 74 74 70 73 3a 2f 2f 63 65 78 2e 69 6f 2f 63 65 78 2d 61 Data Ascii: "iconLegacy": "chip", "title": "Trading API", "desc": "Automate your cryptocurrency trading with reliable and stable API.", "link": "https://cex.io/cex-a
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 73 63 22 3a 20 22 47 65 74 20 6d 6f 6e 74 68 6c 79 20 72 65 77 61 72 64 73 20 66 6f 72 20 73 69 6d 70 6c 79 20 68 6f 6c 64 69 6e 67 20 73 74 61 6b 65 2d 61 62 6c 65 20 63 6f 69 6e 73 2e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 22 3a 20 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 2e 63 65 78 2e 69 6f 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 63 61 72 64 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 69 63 6f 6e 22 3a 20 22 63 72 65 64 69 74 2d 63 61 72 Data Ascii: "desc": "Get monthly rewards for simply holding stake-able coins.", "link": "https://earn.cex.io" }, "card": { "icon": "credit-car
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 22 63 6f 6d 70 61 6e 79 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 43 6f 6d 70 61 6e 79 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 73 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 61 62 6f 75 74 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 69 63 6f 6e 22 3a 20 22 63 65 78 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 69 63 6f 6e 4c 65 67 61 63 79 22 3a 20 22 63 65 78 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 41 62 6f 75 74 20 75 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 Data Ascii: }, "company": { "title": "Company", "links": { "about": { "icon": "cex", "iconLegacy": "cex", "title": "About us", "li
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 20 22 68 74 74 70 73 3a 2f 2f 63 65 78 2e 69 6f 2f 70 72 65 73 73 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 6f 67 6f 47 75 69 64 65 6c 69 6e 65 73 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 69 63 6f 6e 22 3a 20 22 6c 6f 67 6f 2d 67 75 69 64 65 6c 69 6e 65 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 69 63 6f 6e 4c 65 67 61 63 79 22 3a 20 22 6c 6f 67 6f 47 75 69 64 65 6c 69 6e 65 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 4c 6f 67 6f 20 67 75 69 64 65 6c 69 6e 65 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 22 3a 20 22 Data Ascii: "https://cex.io/press" }, "logoGuidelines": { "icon": "logo-guidelines", "iconLegacy": "logoGuidelines", "title": "Logo guidelines", "link": "
2024-03-29 13:44:57 UTC	1169	IN	Data Raw: 2e 63 65 78 2e 69 6f 2f 73 65 63 75 72 69 74 79 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 43 65 6e 74 65 72 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 69 63 6f 6e 22 3a 20 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 4e 6f 74 69 66 69 63 61 74 69 6f 6e 20 43 65 6e 74 65 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 22 3a 20 22 68 74 74 70 73 3a 2f 2f 63 65 78 2e 69 6f 2f 70 72 6f 63 65 73 73 69 6e 67 2d 61 6c 65 72 74 73 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a Data Ascii: .cex.io/security" }, "notificationCenter": { "icon": "notification", "title": "Notification Center", "link": "https://cex.io/processing-alerts" },
2024-03-29 13:44:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49728	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:56 UTC	575	OUT	GET /static/resources/fonts/OpenSans-SemiBold.woff2 HTTP/1.1 Host: profile.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://cex.io sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://static.cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:57 UTC	450	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:57 GMT Content-Type: font/woff2 Content-Length: 46576 Connection: close last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: "65fb2453-b5f0" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: HIT Age: 3515 Accept-Ranges: bytes X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c2c49e081fd-IAD
2024-03-29 13:44:57 UTC	919	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 b5 f0 00 12 00 00 00 01 90 8c 00 00 b5 88 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 1b 20 1c 85 14 06 60 00 88 6e 08 81 26 09 8f 34 11 0c 0a 85 83 74 84 b3 13 0b 8e 58 00 01 36 02 24 03 9d 24 04 20 05 8d 2b 07 be 05 0c 82 18 5b 9a 5f 71 06 dd b6 1d c1 a4 2a bd 59 f7 1e 7c 7a a0 23 57 b0 5b e0 41 77 82 50 9d 6e de 2e 3a d0 82 ee 80 ca c3 f3 55 ce fe ff ff ff 25 c9 24 c6 b6 db cb 6d bf e7 51 40 a0 57 09 ad aa 12 a2 89 9b 66 e2 92 23 97 be 16 09 19 0a 43 f2 f9 32 96 12 60 92 6b ee 2f a5 18 c1 09 c6 48 9c ea 8c d7 0e 0e e1 c5 60 59 b7 5a 42 de 24 d4 60 72 a3 4a aa 96 70 53 79 67 ad 55 1e 52 22 62 bf 41 04 38 9a 81 a1 bd 6f 65 c0 7c a8 d4 37 b5 8e 7c d6 87 af 52 3a 77 3c 73 3f Data Ascii: wOF2?FFTM `n&4tX6$$ +[_q*Y\|z#W[AwPn.:U%$mQ@Wf#C2`k/H`YZB$`rJpSygUR"bA8oe\|7\|R:w<s?
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 55 2d ab 6b 8f cb dc 31 cc 36 cc a9 70 f1 f9 77 6a 7e f4 29 06 0b c1 57 01 8c 24 9a 90 c1 14 35 84 65 64 1b e1 26 e1 56 74 2f 5c 29 65 cb 96 1b c6 1b b6 cb b0 39 5b b2 d5 ba b5 ba de 32 04 1e 68 ce 17 c6 c1 0b 00 17 2f 63 16 ee 89 7c e1 2b 84 ef 36 4c af ee 13 f0 d8 7e ba 7d 2d c9 49 0e 5f 66 b3 0d 9f 58 ff db 0f 7a 2d 52 03 1f 97 ef 7f aa 2a e1 56 a9 4c ba 20 05 b8 3f d2 65 2d 9d 22 78 d2 d1 9d ca 1d e0 0a 4a 2e 54 a6 d6 c7 0a 67 59 b3 3f 24 7d cb 9a 65 eb 5b 9c 0f 49 4a bd 22 13 f1 f5 70 4d ef 2e 29 00 3f 25 ed 00 85 ba 01 a0 fa ef c0 e8 b8 8d 95 fe ba ca 09 33 25 2b 37 5b b3 56 8b 54 f6 cd 64 17 21 04 16 84 42 51 a3 9a 70 5f 67 72 cf 46 99 69 b6 59 71 ca f3 bc 12 06 50 ee 44 41 99 b3 94 32 26 27 8c bf 50 77 21 3c 68 3e f7 ef 97 ab 56 b8 04 36 b3 65 96 Data Ascii: U-k16pwj~)W$5ed&Vt/\)e9[2h/c\|+6L~}-I_fXz-R*VL ?e-"xJ.TgY?$}e[IJ"pM.)?%3%+7[VTd!BQp_grFiYqPDA2&'Pw!<h>V6e
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 59 f7 02 0e f9 cb b8 0c c9 3f eb c5 e7 d0 3a 55 2e 0d b7 e6 a4 cb 8e 19 53 86 f4 69 d0 31 52 e3 5e 7b 3f 41 af f9 01 99 5a a5 26 a2 33 12 c9 9d c1 ad 8e bd 38 bd af be 44 93 c8 14 2a 8d 2e 88 92 7c 6e fe 4b 87 c3 5d 40 f2 fc 20 8c e2 24 cd f2 a2 ac ea a6 ed fa 61 9c e6 65 dd f6 c3 f1 74 46 98 50 c6 85 54 da 58 e7 43 4c b9 d4 d6 c7 5c fb ba 9f f7 fb 0f d0 0f 23 28 49 77 a3 30 4e 93 ac d0 6d a5 54 6b 74 b5 7a fa 86 c6 46 26 66 a6 56 96 d6 36 69 0a 84 e5 ca a3 07 e1 ea 7d f1 ea 83 50 9e 15 d2 99 b9 09 aa ac e2 26 2c cc a4 f7 23 77 de a2 f7 5d 6e 01 f0 c2 b7 fd ba 51 8a 8f 98 3a 9c 25 42 68 03 cf 6b ed 79 ef 7a df ab 5e 7b 9c 8f d9 cd f5 3b d9 a0 61 5c d3 bd 88 2e fb d0 57 c9 68 10 06 f9 0e fd 36 ca 52 a8 6e 60 1f 9b c3 12 ed 97 04 66 2d 8f a1 c9 9a bc ad 51 Data Ascii: Y?:U.Si1R^{?AZ&38D*.\|nK]@ $aetFPTXCL\#(Iw0NmTktzF&fV6i}P&,#w]nQ:%Bhkyz^{;a\.Wh6Rn`f-Q
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 85 b0 2e ff e0 cc 5f 38 29 74 17 0d 29 97 ff 37 f9 2d f2 03 56 a0 36 d5 f6 5c 78 5c a1 a4 4a ee 17 c5 5b 53 36 df 29 c2 84 52 f8 b9 f7 7e bd dd f8 ce c9 df d2 f3 a2 7b 9f 64 e3 8c d1 2a b4 cc b1 1e 49 6c c4 59 57 b6 e6 02 9c b3 a2 a5 12 85 31 74 9e a6 5a 48 63 b2 96 53 53 9f 45 73 f1 c2 7b 40 7a ae 5a f0 b5 d4 45 6c 98 37 cd a7 88 43 31 b8 b1 9c 6e dd 00 e8 cd 99 2f fb 42 92 a3 91 e3 e9 aa 0f 8b c0 d5 69 ea 3a bf d5 43 cb 38 ee 5f 49 49 69 b9 28 68 6b 8f 05 43 ea e9 f9 c2 02 12 ad 3b ec 1f 01 0f f0 1b 81 62 71 65 e3 f9 11 e0 ad 81 e1 69 6c c2 7b 4e 4b ed 7f 6b f0 61 28 b3 37 9b 0b 83 fe 28 f0 56 96 8b de e3 67 fd 51 54 42 c5 8a 1e 59 eb 61 64 af 0c 89 97 25 22 ee 9b cf db fe 1d 12 e7 35 13 c9 59 79 ff 87 a9 ef 5d 6c 26 3a 1d f3 54 51 96 4f 86 bd d0 ba f3 Data Ascii: ._8)t)7-V6\x\J[S6)R~{d*IlYW1tZHcSSEs{@zZEl7C1n/Bi:C8_IIi(hkC;bqeil{NKka(7(VgQTBYad%"5Yy]l&:TQO
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: e4 13 8a d1 fb fa 6c a9 57 67 e6 74 65 96 62 b6 5f bb e4 65 a6 bf 27 36 3c 41 7b 4b 8b 01 9d 1a 49 29 8b 8c 68 34 a9 9e 56 28 29 8d 92 f6 30 90 3a 3e 86 e6 75 e2 51 08 90 b2 1f db 9b 78 64 ee ae ef 2c 95 d0 35 92 b8 4b 1d c7 1e 5b 51 48 c2 2a d7 73 b8 91 69 d4 be f7 89 e2 76 00 23 c3 d9 b2 05 e0 1f ba 18 08 46 95 5c 53 e5 94 62 2a 55 26 e9 02 5a d4 8b a0 66 f1 4c 49 ba 70 81 0d 85 74 74 3d 96 30 75 8c ba 45 6d c2 c4 16 6b ba 3e 31 02 e1 37 91 ae ef 72 2d 3f 91 50 81 43 29 ff d9 3b 0b 78 2d 2b 1d b6 9e d9 16 fe 20 9d ae 9d 4e 5e e7 fa d4 e0 22 20 fc d4 e5 1c e4 f3 c8 45 03 d6 56 bf 73 67 68 b4 55 fb f9 9d 35 3b d5 f3 50 a1 2f 1c 1a 6f 6f ad dd e7 88 41 5d 0a 60 60 bb cb e1 54 39 7d 13 84 38 d5 3f ab 1e 6e fc 72 83 56 56 71 ab a8 22 2d 6b 1f cd d1 b9 d1 b5 Data Ascii: lWgteb_e'6<A{KI)h4V()0:>uQxd,5K[QHsiv#F\SbU&ZfLIptt=0uEmk>17r-?PC);x-+ N^" EVsghU5;P/ooA]``T9}8?nrVVq"-k
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 20 0c d6 be 89 34 c7 a7 c9 f7 d0 fc 15 cf d5 f0 81 29 56 04 77 39 7f 07 3c eb 14 f9 2e 49 51 95 17 ce 92 c7 e3 39 2b 11 37 7d 9b 8a 1c b8 51 da 2c e5 4f db ec e7 cc 65 82 e9 bf 59 97 46 6d c2 19 b9 5d 04 55 9d 6c a2 08 87 70 b4 a5 18 30 b0 22 e3 0e 21 fe 62 4e c3 69 3c 0f e2 f7 31 cf e1 07 cc 31 80 b2 96 cc 37 82 25 74 63 9e 46 12 32 34 bf b9 e0 5d 1e 74 1f 4d 71 9b 08 5b 67 d8 ca 79 3c 48 ae 24 71 27 04 29 96 91 29 e2 3a 76 c3 17 f4 4f 3c 16 2f a2 36 36 11 e6 67 e5 6e 5b 41 68 1e cb b7 2d 94 cc d0 c2 90 d0 2f a2 26 91 d6 8f 39 cf e1 ee 3c 7c 81 75 52 b6 1f ef 03 b5 b0 8c 40 39 b0 ee e7 c6 30 97 96 5b ea fb 06 40 63 36 7d 34 f4 14 f8 94 0d f7 6b f2 15 74 5c f1 28 dd d5 09 17 99 b3 c6 24 80 6b 8b e9 86 12 dc 48 05 ae 0c b1 76 db 79 ae e1 46 10 61 07 b1 3b Data Ascii: 4)Vw9<.IQ9+7}Q,OeYFm]Ulp0"!bNi<117%tcF24]tMq[gy<H$q')):vO</66gn[Ah-/&9<\|uR@90[@c6}4kt\($kHvyFa;
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 84 b4 98 c4 6c 43 53 d7 a5 99 85 d1 07 b8 74 ad 36 79 0c 53 db e0 92 73 87 04 c3 2f 8b a3 c1 61 78 14 92 52 36 a1 78 c3 8f a6 8b f0 92 f5 34 12 3a 46 42 1d 11 2c 84 a8 a1 87 87 86 f2 ce 7c e1 4f 60 ec 2c 58 4a 42 03 f2 91 23 ce fd d4 30 e3 e0 02 f2 06 9a d7 ff 61 e1 5d c8 4b 96 df db 55 59 5d 94 ca 2b 91 5d 83 1f 97 6c 80 b3 90 4e e5 c8 ad 0a 60 ed 54 b8 ae 07 08 59 fb 45 e5 85 f8 e5 4d 29 b4 19 c9 1b 7f 6b c2 58 97 8b 5e 52 46 49 75 34 7c d3 f7 62 3b a9 be c0 8f a7 3b 66 a2 c7 13 b1 fa 89 fc f1 62 77 89 80 41 06 9b ca a0 a4 84 7e 0d f1 5d 5a 3c a1 20 3c b5 f9 37 ce 49 10 0b 66 9f 0d c8 d8 ec b6 74 ee e9 b8 c0 26 cd 88 4f a9 64 d0 70 18 75 b5 f1 34 fc 34 26 8b 77 69 b9 06 01 05 40 73 c8 d7 f6 97 88 a4 30 57 df f6 f3 4d ac c3 aa 3b 79 7c cc 93 44 5d 82 dd Data Ascii: lCSt6ySs/axR6x4:FB,\|O`,XJB#0a]KUY]+]lN`TYEM)kX^RFIu4\|b;;fbwA~]Z< <7Ift&Odpu44&wi@s0WM;y\|D]
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 0e 62 52 d8 93 52 4c ec fe f7 e2 92 74 53 92 7e 3a 44 c9 b0 0f bd 7b eb 00 a8 db ed af d1 19 a1 b9 22 ac ba 2d fe 00 f6 0a 53 44 c0 64 e8 77 3d 7d da f6 1d bb b3 20 5a fe e3 85 20 69 f8 ef 23 38 f6 88 5b bf 13 45 f9 bb 83 38 21 34 89 46 3b 8e da 56 75 34 7a ce 1e 39 a7 c1 7a 55 4d 57 7c ba a4 d5 7c 76 22 8e 01 02 41 a3 08 d7 0e 03 83 20 23 ab 2e 1a d8 53 52 b6 38 25 87 3d 6d dd 4a d9 62 41 03 2c ad 35 04 9e ae 76 d3 11 a3 b7 07 59 3b e0 8f ef 71 66 63 95 78 81 78 dc 47 01 c4 29 d8 63 bb 0a 7f 68 12 ef 3d 5d 67 69 54 9f 14 a1 31 9a da 3b c6 c1 27 9f 98 f8 31 5a 08 3b 91 04 50 4c 50 ae 6f 2d 9d 7c 9f a2 43 47 e0 7f 98 05 a1 f3 1a 4c d5 61 0b ed ec 09 8f 7e f8 53 60 90 31 8e 88 a6 44 6c c6 59 3a b3 c6 6e ee 0d 58 1d 4b 08 47 11 b3 19 63 ea d0 33 52 bf 03 bf Data Ascii: bRRLtS~:D{"-SDdw=} Z i#8[E8!4F;Vu4z9zUMW\|\|v"A #.SR8%=mJbA,5vY;qfcxxG)ch=]giT1;'1Z;PLPo-\|CGLa~S`1DlY:nXKGc3R
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 0a 86 02 a6 bd 4f fd 2f 17 ce a6 db 91 62 c1 56 1e de 66 76 08 cd 87 68 89 1b cd b2 22 04 d2 18 01 37 c4 c0 e1 48 13 6d af e3 93 3c eb 9b 86 24 2f 54 90 29 3d 9c 42 da 28 cf c8 a6 71 6c 6b 70 fd 07 c0 6d 38 ca 0a 67 62 d8 64 ae 73 47 d9 ad d6 76 66 11 12 64 b5 ee a8 f6 36 c3 5e f3 2a 28 f1 1e 7e b2 6e da 32 ff 11 58 93 eb 4a f2 b6 34 fb d5 ef 5d cc e0 98 21 44 db fa 6a 64 96 96 9f fc e3 11 22 3e b7 dd d0 b0 a0 44 2a b7 e4 0f af c2 04 31 af c2 c4 ba 4b 7a ce 85 7c 67 19 6b a4 5c 41 52 b4 12 05 03 7e 40 92 a2 77 2a 3e a9 3d 8a 01 54 c1 9e df 51 b8 48 f7 e6 1b 0d d5 57 9b f3 d2 0c 87 40 b7 62 db 86 0d 8b 8d 7f a5 e5 81 d1 81 55 3e 8f f4 65 ef fe ad 5f f3 11 50 1e d3 bf b2 ef e6 b7 67 5f eb 84 ec 69 5b 26 7b 9e b6 98 ab 0d ef 1c 4d da 9b 3f d1 e7 6d 92 17 b4 Data Ascii: O/bVfvh"7Hm<$/T)=B(qlkpm8gbdsGvfd6^(~n2XJ4]!Djd">D1Kz\|gk\AR~@w*>=TQHW@bU>e_Pg_i[&{M?m
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: c2 a3 dc f9 14 12 c6 3d e6 1e ff c9 6e 1a 69 74 bf 6d d0 93 a1 a5 b5 ad 6b 89 1c b7 64 c4 76 f4 c3 94 dc 58 92 d1 bb 41 7b bc 65 8c 47 cc fd 73 4b 64 e0 cf c5 a8 19 a4 ee ab 3e 64 c5 91 74 53 d2 4b fc be 65 92 97 45 93 c6 b1 31 c7 45 b1 16 27 cf 0b bf a6 7f 1e 54 4a 45 99 c5 b9 78 0d 20 35 a7 62 99 83 29 7c 5a 0f 5a 48 39 ea f7 52 34 49 63 d9 f1 8d 43 7c ad e1 9d 75 64 d2 d2 e3 b1 c4 29 2d fb d6 e2 f8 8e 6e 81 b5 e4 c1 e2 d8 a4 a5 f1 a8 b9 f1 b5 0b 71 2a aa 6b e9 0d f7 26 43 88 25 90 25 7f 1e 40 6a de ec 88 3f 70 12 a1 74 6b 82 48 14 e3 e0 bb 8c 7b 6c 8a 39 3d 23 45 3a d7 98 51 ce 39 0a 45 e7 be 20 3e e5 cf 6a 0d d7 5d 07 87 29 3a ab 73 d6 6d bb 49 a2 3f 7c d4 9c 04 a6 f4 53 8b 42 73 4f ab 17 e7 bb 8d 91 7d 03 fa 91 63 9e f2 8e f0 06 cd 74 f9 28 4b b5 40 Data Ascii: =nitmkdvXA{eGsKd>dtSKeE1E'TJEx 5b)\|ZZH9R4IcC\|ud)-nq*k&C%%@j?ptkH{l9=#E:Q9E >j]):smI?\|SBsO}ct(K@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49731	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:56 UTC	554	OUT	GET /static/resources/media/grid.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:57 UTC	460	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:57 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-5c5" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: HIT Age: 3515 X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c2c6b4a8260-IAD
2024-03-29 13:44:57 UTC	909	IN	Data Raw: 35 63 35 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 30 20 33 48 34 43 33 2e 37 33 34 37 38 20 33 20 33 2e 34 38 30 34 33 20 33 2e 31 30 35 33 36 20 33 2e 32 39 32 38 39 20 33 2e 32 39 32 38 39 43 33 2e 31 30 35 33 36 20 33 2e 34 38 30 34 33 20 33 20 33 2e 37 33 34 37 38 20 33 20 34 56 31 30 43 33 20 31 30 2e 32 36 35 32 20 33 2e 31 30 35 33 36 20 31 30 2e 35 31 39 36 20 33 2e 32 39 32 38 39 20 31 30 2e 37 30 37 31 43 33 2e 34 38 30 34 33 20 31 30 2e 38 39 34 36 20 Data Ascii: 5c5<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M10 3H4C3.73478 3 3.48043 3.10536 3.29289 3.29289C3.10536 3.48043 3 3.73478 3 4V10C3 10.2652 3.10536 10.5196 3.29289 10.7071C3.48043 10.8946
2024-03-29 13:44:57 UTC	575	IN	Data Raw: 2e 35 31 39 36 20 31 31 20 32 30 2e 32 36 35 32 20 31 31 20 32 30 56 31 34 43 31 31 20 31 33 2e 37 33 34 38 20 31 30 2e 38 39 34 36 20 31 33 2e 34 38 30 34 20 31 30 2e 37 30 37 31 20 31 33 2e 32 39 32 39 43 31 30 2e 35 31 39 36 20 31 33 2e 31 30 35 34 20 31 30 2e 32 36 35 32 20 31 33 20 31 30 20 31 33 48 34 43 33 2e 37 33 34 37 38 20 31 33 20 33 2e 34 38 30 34 33 20 31 33 2e 31 30 35 34 20 33 2e 32 39 32 38 39 20 31 33 2e 32 39 32 39 43 33 2e 31 30 35 33 36 20 31 33 2e 34 38 30 34 20 33 20 31 33 2e 37 33 34 38 20 33 20 31 34 56 32 30 5a 4d 35 20 31 35 48 39 56 31 39 48 35 56 31 35 5a 4d 31 33 20 32 30 43 31 33 20 32 30 2e 32 36 35 32 20 31 33 2e 31 30 35 34 20 32 30 2e 35 31 39 36 20 31 33 2e 32 39 32 39 20 32 30 2e 37 30 37 31 43 31 33 2e 34 38 30 34 20 Data Ascii: .5196 11 20.2652 11 20V14C11 13.7348 10.8946 13.4804 10.7071 13.2929C10.5196 13.1054 10.2652 13 10 13H4C3.73478 13 3.48043 13.1054 3.29289 13.2929C3.10536 13.4804 3 13.7348 3 14V20ZM5 15H9V19H5V15ZM13 20C13 20.2652 13.1054 20.5196 13.2929 20.7071C13.4804
2024-03-29 13:44:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49729	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:56 UTC	562	OUT	GET /static/resources/media/chevron-down.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:57 UTC	449	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:57 GMT Content-Type: image/svg+xml Content-Length: 239 Connection: close last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: "65fb2453-ef" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: HIT Age: 1708 Accept-Ranges: bytes X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c2c78e638fb-IAD
2024-03-29 13:44:57 UTC	239	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 36 2e 32 39 33 20 39 2e 32 39 32 39 37 4c 31 32 20 31 33 2e 35 38 36 4c 37 2e 37 30 36 39 37 20 39 2e 32 39 32 39 37 4c 36 2e 32 39 32 39 37 20 31 30 2e 37 30 37 4c 31 32 20 31 36 2e 34 31 34 4c 31 37 2e 37 30 37 20 31 30 2e 37 30 37 4c 31 36 2e 32 39 33 20 39 2e 32 39 32 39 37 5a 22 0a 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 62 6c 61 63 6b 22 2f 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: <svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M16.293 9.29297L12 13.586L7.70697 9.29297L6.29297 10.707L12 16.414L17.707 10.707L16.293 9.29297Z" fill="black"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49733	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:56 UTC	726	OUT	GET /static/resources/content/footer.json HTTP/1.1 Host: profile.cex.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fis-user-logged-in
2024-03-29 13:44:57 UTC	427	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:57 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-3c26" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c2cae683938-IAD
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 33 63 32 36 0d 0a 7b 0a 20 20 20 20 22 6d 65 6e 75 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 73 65 72 76 69 63 65 73 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 53 65 72 76 69 63 65 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 73 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 62 75 79 53 65 6c 6c 43 72 79 70 74 6f 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 42 75 79 20 26 20 53 65 6c 6c 20 43 72 79 70 74 6f 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 22 3a 20 22 68 74 74 70 73 3a 2f 2f 63 65 78 2e 69 6f 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 Data Ascii: 3c26{ "menu": { "services": { "title": "Services", "links": { "buySellCrypto": { "title": "Buy & Sell Crypto", "link": "https://cex.io" },
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 6c 65 20 50 61 79 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 22 3a 20 22 68 74 74 70 73 3a 2f 2f 63 65 78 2e 69 6f 2f 62 75 79 2d 62 69 74 63 6f 69 6e 2d 77 69 74 68 2d 61 70 70 6c 65 2d 70 61 79 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 73 65 6f 42 75 79 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 43 6f 6c 6c 61 70 73 65 22 3a 20 22 48 69 64 65 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 45 78 70 61 6e 64 22 3a 20 22 53 68 6f 77 20 6d 6f 72 65 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 68 69 64 64 65 6e 4c 69 73 74 22 3a 20 Data Ascii: le Pay", "link": "https://cex.io/buy-bitcoin-with-apple-pay" }, "seoBuy": { "titleCollapse": "Hide", "titleExpand": "Show more", "hiddenList":
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 4e 42 29 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 22 3a 20 22 68 74 74 70 73 3a 2f 2f 63 65 78 2e 69 6f 2f 62 75 79 2d 62 69 6e 61 6e 63 65 2d 63 6f 69 6e 2d 62 6e 62 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 62 75 79 52 69 70 70 6c 65 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 42 75 79 20 52 69 70 70 6c 65 20 28 58 52 50 29 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 22 3a 20 22 68 74 74 70 73 3a 2f 2f 63 65 78 2e 69 6f 2f Data Ascii: NB)", "link": "https://cex.io/buy-binance-coin-bnb" }, "buyRipple": { "title": "Buy Ripple (XRP)", "link": "https://cex.io/
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 74 70 73 3a 2f 2f 63 65 78 2e 69 6f 2f 62 75 79 2d 69 6e 74 65 72 6e 65 74 2d 63 6f 6d 70 75 74 65 72 2d 63 6f 69 6e 2d 69 63 70 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 22 69 6e 66 6f 72 6d 61 74 69 6f 6e 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 49 6e 66 6f 72 6d 61 74 69 6f 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 73 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6d 69 74 73 41 6e 64 43 6f 6d 6d 69 73 73 69 6f Data Ascii: tps://cex.io/buy-internet-computer-coin-icp" } } } } }, "information": { "title": "Information", "links": { "limitsAndCommissio
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 63 61 72 64 56 65 72 69 66 69 63 61 74 69 6f 6e 47 75 69 64 65 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 43 61 72 64 20 56 65 72 69 66 69 63 61 74 69 6f 6e 20 47 75 69 64 65 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 22 3a 20 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 63 65 78 2e 69 6f 2f 65 6e 2f 61 72 74 69 63 6c 65 73 2f 34 33 38 33 34 34 38 2d 70 61 79 6d 65 6e 74 2d 63 61 72 64 2d 76 65 72 69 66 69 63 61 74 69 6f 6e 2d 67 75 69 64 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 67 69 76 65 61 77 61 79 Data Ascii: }, "cardVerificationGuide": { "title": "Card Verification Guide", "link": "https://support.cex.io/en/articles/4383448-payment-card-verification-guide" }, "giveaway
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 20 22 74 69 74 6c 65 22 3a 20 22 43 72 79 70 74 6f 63 75 72 72 65 6e 63 79 20 41 66 66 69 6c 69 61 74 65 20 50 72 6f 67 72 61 6d 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 22 3a 20 22 68 74 74 70 73 3a 2f 2f 63 65 78 2e 69 6f 2f 61 66 66 69 6c 69 61 74 65 2d 70 72 6f 67 72 61 6d 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 70 6f 73 69 74 52 65 63 6f 76 65 72 79 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 43 72 79 70 74 6f 20 64 65 70 6f 73 69 74 20 72 65 63 6f 76 65 72 79 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 22 3a 20 22 68 74 74 70 73 Data Ascii: "title": "Cryptocurrency Affiliate Program", "link": "https://cex.io/affiliate-program" }, "depositRecovery": { "title": "Crypto deposit recovery", "link": "https
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 73 3a 2f 2f 63 65 78 2e 69 6f 2f 6c 65 67 61 6c 2d 73 65 63 75 72 69 74 79 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 65 72 6d 73 4f 66 55 73 65 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 54 65 72 6d 73 20 6f 66 20 55 73 65 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 22 3a 20 22 68 74 74 70 73 3a 2f 2f 63 65 78 2e 69 6f 2f 74 65 72 6d 73 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 72 65 66 75 6e 64 50 6f 6c 69 63 79 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a Data Ascii: s://cex.io/legal-security" }, "termsOfUse": { "title": "Terms of Use", "link": "https://cex.io/terms" }, "refundPolicy": { "title":
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 74 72 75 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 22 3a 20 22 68 74 74 70 73 3a 2f 2f 74 2e 6d 65 2f 43 45 58 5f 49 4f 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 69 63 6f 6e 22 3a 20 22 74 65 6c 65 67 72 61 6d 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 63 6f 6d 70 6f 6e 65 6e 74 54 61 67 22 3a 20 22 49 63 6f 6e 42 75 74 74 6f 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 63 6f 6c Data Ascii: true }, { "link": "https://t.me/CEX_IO", "icon": "telegram", "componentTag": "IconButton", "col
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 64 6f 6e 61 74 69 6f 6e 42 75 74 74 6f 6e 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 48 65 6c 70 20 75 6b 72 61 69 6e 65 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 65 6e 64 49 63 6f 6e 22 3a 20 22 75 61 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 22 3a 20 22 68 74 74 70 73 3a 2f 2f 63 65 78 2e 69 6f 2f 64 6f 6e 61 74 65 2d 74 6f 2d 75 6b 72 61 69 6e 65 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 63 6f 6d 70 6f 6e 65 6e 74 54 61 67 22 3a 20 22 42 75 74 74 6f 6e 22 2c 0a 20 20 20 20 20 20 20 Data Ascii: }, "donationButton": { "title": "Help ukraine", "endIcon": "ua", "link": "https://cex.io/donate-to-ukraine", "componentTag": "Button",
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 43 20 61 72 65 20 63 6f 6c 6c 65 63 74 69 76 65 6c 79 20 6d 61 6e 61 67 69 6e 67 20 74 68 65 20 43 45 58 2e 49 4f 20 70 6c 61 74 66 6f 72 6d 2e 22 2c 0a 20 20 20 20 20 20 20 20 22 63 6f 70 79 72 69 67 68 74 55 53 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 65 78 74 22 3a 20 22 43 45 58 2e 49 4f 20 43 6f 72 70 2e 20 28 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 6e 6b 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 74 6c 65 22 3a 20 22 4e 4d 4c 53 23 20 31 38 30 34 31 37 30 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 75 72 Data Ascii: C are collectively managing the CEX.IO platform.", "copyrightUS": [ { "text": "CEX.IO Corp. (" }, { "link": { "title": "NMLS# 1804170", "ur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49732	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:56 UTC	558	OUT	GET /static/resources/media/exchange.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:57 UTC	460	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:57 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-312" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: HIT Age: 3515 X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c2c9b569c46-IAD
2024-03-29 13:44:57 UTC	793	IN	Data Raw: 33 31 32 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 35 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 34 2e 36 34 39 36 31 20 32 32 2e 30 34 39 38 43 34 2e 30 31 36 32 38 20 32 32 2e 30 34 39 38 20 33 2e 34 37 34 36 31 20 32 31 2e 38 32 39 20 33 2e 30 32 34 36 31 20 32 31 2e 33 38 37 33 43 32 2e 35 37 34 36 31 20 32 30 2e 39 34 35 36 20 32 2e 33 34 39 36 31 20 32 30 2e 34 30 38 31 20 32 2e 33 34 39 36 31 20 31 39 2e 37 37 34 38 56 35 2e 32 34 39 38 43 32 2e 33 34 39 36 31 20 34 2e 36 31 36 34 37 20 32 2e 35 37 34 36 Data Ascii: 312<svg width="24" height="25" viewBox="0 0 24 25" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M4.64961 22.0498C4.01628 22.0498 3.47461 21.829 3.02461 21.3873C2.57461 20.9456 2.34961 20.4081 2.34961 19.7748V5.2498C2.34961 4.61647 2.5746
2024-03-29 13:44:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49727	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:56 UTC	554	OUT	GET /static/resources/media/chip.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:57 UTC	460	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:57 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-1bb" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: HIT Age: 3515 X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c2cadca9c1f-IAD
2024-03-29 13:44:57 UTC	450	IN	Data Raw: 31 62 62 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 39 20 39 48 31 35 56 31 35 48 39 56 39 5a 22 20 66 69 6c 6c 3d 22 62 6c 61 63 6b 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 30 20 36 43 32 30 20 34 2e 38 39 37 20 31 39 2e 31 30 33 20 34 20 31 38 20 34 48 31 37 56 32 48 31 35 56 34 48 31 33 56 32 48 31 31 56 34 48 39 56 32 48 37 56 34 48 36 43 34 2e 38 39 37 20 34 20 34 20 34 2e 38 39 37 20 34 20 36 56 37 48 32 56 39 48 34 56 31 31 48 32 56 31 33 48 34 Data Ascii: 1bb<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M9 9H15V15H9V9Z" fill="black"/> <path d="M20 6C20 4.897 19.103 4 18 4H17V2H15V4H13V2H11V4H9V2H7V4H6C4.897 4 4 4.897 4 6V7H2V9H4V11H2V13H4
2024-03-29 13:44:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49730	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:56 UTC	568	OUT	GET /static/resources/media/arrow-up-and-right.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:57 UTC	460	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:57 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-12e" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: HIT Age: 1708 X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c2cbc5e07ff-IAD
2024-03-29 13:44:57 UTC	309	IN	Data Raw: 31 32 65 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 37 2e 38 32 35 34 33 20 39 2e 35 39 31 33 36 4c 31 33 2e 38 39 33 37 20 39 2e 37 38 30 31 38 4c 36 2e 39 30 37 38 36 20 31 36 2e 33 34 34 34 4c 38 2e 32 37 37 34 20 31 37 2e 38 30 31 39 4c 31 35 2e 32 36 33 33 20 31 31 2e 32 33 37 37 4c 31 35 2e 30 37 34 34 20 31 37 2e 33 30 36 4c 31 37 2e 30 37 33 32 20 31 37 2e 33 36 38 32 4c 31 37 2e 33 36 38 32 20 37 2e 38 38 37 36 32 4c 37 2e 38 38 37 36 32 20 37 2e 35 39 32 36 Data Ascii: 12e<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M7.82543 9.59136L13.8937 9.78018L6.90786 16.3444L8.2774 17.8019L15.2633 11.2377L15.0744 17.306L17.0732 17.3682L17.3682 7.88762L7.88762 7.5926
2024-03-29 13:44:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49725	54.229.44.173	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:57 UTC	646	OUT	POST /api/v1/log HTTP/1.1 Host: log.cookieyes.com Connection: keep-alive Content-Length: 556 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryRoGcWJo04bQwJLGk Accept: / Origin: https://cex.io Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:57 UTC	556	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 52 6f 47 63 57 4a 6f 30 34 62 51 77 4a 4c 47 6b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6b 65 79 22 0d 0a 0d 0a 39 30 32 32 61 36 61 38 33 33 36 30 39 39 35 39 34 39 66 63 63 66 65 64 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 52 6f 47 63 57 4a 6f 30 34 62 51 77 4a 4c 47 6b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 72 65 71 75 65 73 74 5f 74 79 70 65 22 0d 0a 0d 0a 62 61 6e 6e 65 72 5f 6c 6f 61 64 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 52 6f 47 63 57 4a 6f Data Ascii: ------WebKitFormBoundaryRoGcWJo04bQwJLGkContent-Disposition: form-data; name="key"9022a6a83360995949fccfed------WebKitFormBoundaryRoGcWJo04bQwJLGkContent-Disposition: form-data; name="request_type"banner_load------WebKitFormBoundaryRoGcWJo
2024-03-29 13:44:57 UTC	231	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:57 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
2024-03-29 13:44:57 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49736	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:57 UTC	829	OUT	GET /single-bundle-widget?forPage=/buy-bitcoins&originator=cex HTTP/1.1 Host: cex.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fis-user-logged-in
2024-03-29 13:44:57 UTC	1248	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:57 GMT Content-Length: 0 Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 content-security-policy-report-only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://*.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; x-frame-options: SAMEORIGIN vary: Origin set-cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure access-control-allow-origin: https://cex.io access-control-allow-methods: POST, GET, OPTIONS strict-transport-security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c2e2ed40831-IAD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49735	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:57 UTC	1071	OUT	GET /single-bundle-widget-get-config?forPage=/buy-bitcoins&originator=cex&widgetSymbols=BTC&widgetPairsForSymbols=USD,EUR,GBP,RUB HTTP/1.1 Host: cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/buy-bitcoins Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fis-user-logged-in
2024-03-29 13:44:57 UTC	1105	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:57 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 content-security-policy-report-only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://*.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; x-frame-options: SAMEORIGIN vary: Origin access-control-allow-origin: https://cex.io access-control-allow-methods: POST, GET, OPTIONS strict-transport-security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c2e396b5890-IAD
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 35 37 64 62 0d 0a 7b 22 62 75 6e 64 6c 65 73 43 6f 6e 66 69 67 22 3a 7b 22 73 79 6d 62 6f 6c 73 22 3a 5b 5b 22 42 54 43 22 2c 5b 22 55 53 44 22 2c 22 45 55 52 22 2c 22 47 42 50 22 5d 5d 5d 2c 22 6c 69 6d 69 74 73 22 3a 7b 22 42 54 43 22 3a 7b 22 6d 69 6e 22 3a 39 30 30 30 30 2c 22 6d 69 6e 53 65 6c 6c 22 3a 39 30 30 30 30 7d 2c 22 45 54 48 22 3a 7b 22 6d 69 6e 22 3a 35 30 30 30 2c 22 6d 69 6e 53 65 6c 6c 22 3a 35 30 30 30 7d 2c 22 42 43 48 22 3a 7b 22 6d 69 6e 22 3a 35 30 30 30 30 30 30 2c 22 6d 69 6e 53 65 6c 6c 22 3a 35 30 30 30 30 30 30 7d 2c 22 44 41 53 48 22 3a 7b 22 6d 69 6e 22 3a 31 36 30 30 30 30 30 30 2c 22 6d 69 6e 53 65 6c 6c 22 3a 31 36 30 30 30 30 30 30 7d 2c 22 4c 54 43 22 3a 7b 22 6d 69 6e 22 3a 32 30 30 30 30 30 30 30 2c 22 6d 69 6e 53 65 Data Ascii: 57db{"bundlesConfig":{"symbols":[["BTC",["USD","EUR","GBP"]]],"limits":{"BTC":{"min":90000,"minSell":90000},"ETH":{"min":5000,"minSell":5000},"BCH":{"min":5000000,"minSell":5000000},"DASH":{"min":16000000,"minSell":16000000},"LTC":{"min":20000000,"minSe
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 30 2c 22 6d 69 6e 53 65 6c 6c 22 3a 34 35 30 30 30 7d 2c 22 4c 41 4d 42 22 3a 7b 22 6d 69 6e 22 3a 31 30 30 30 30 30 30 30 30 30 2c 22 6d 69 6e 53 65 6c 6c 22 3a 31 30 30 30 30 30 30 30 30 30 7d 2c 22 44 4f 54 22 3a 7b 22 6d 69 6e 22 3a 36 35 30 30 30 30 2c 22 6d 69 6e 53 65 6c 6c 22 3a 36 35 30 30 30 30 7d 2c 22 5a 49 4c 22 3a 7b 22 6d 69 6e 22 3a 31 37 32 31 31 37 30 30 30 30 30 2c 22 6d 69 6e 53 65 6c 6c 22 3a 31 37 32 31 31 37 30 30 30 30 30 7d 2c 22 55 4e 49 22 3a 7b 22 6d 69 6e 22 3a 37 37 36 30 30 30 2c 22 6d 69 6e 53 65 6c 6c 22 3a 37 37 36 30 30 30 7d 2c 22 4c 45 4e 44 22 3a 7b 22 6d 69 6e 22 3a 33 35 30 30 30 30 30 30 2c 22 6d 69 6e 53 65 6c 6c 22 3a 33 35 30 30 30 30 30 30 7d 2c 22 55 4d 41 22 3a 7b 22 6d 69 6e 22 3a 31 36 34 31 30 30 30 2c 22 Data Ascii: 0,"minSell":45000},"LAMB":{"min":1000000000,"minSell":1000000000},"DOT":{"min":650000,"minSell":650000},"ZIL":{"min":17211700000,"minSell":17211700000},"UNI":{"min":776000,"minSell":776000},"LEND":{"min":35000000,"minSell":35000000},"UMA":{"min":1641000,"
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 22 6d 69 6e 22 3a 36 30 30 30 30 30 2c 22 6d 69 6e 53 65 6c 6c 22 3a 36 30 30 30 30 30 7d 2c 22 49 4e 4a 22 3a 7b 22 6d 69 6e 22 3a 31 35 34 30 30 30 30 2c 22 6d 69 6e 53 65 6c 6c 22 3a 31 35 34 30 30 30 30 7d 2c 22 52 45 4e 42 54 43 22 3a 7b 22 6d 69 6e 22 3a 34 30 30 2c 22 6d 69 6e 53 65 6c 6c 22 3a 34 30 30 7d 2c 22 52 53 52 22 3a 7b 22 6d 69 6e 22 3a 34 36 39 34 38 34 30 30 30 2c 22 6d 69 6e 53 65 6c 6c 22 3a 34 36 39 34 38 34 30 30 30 7d 2c 22 4d 41 4e 41 22 3a 7b 22 6d 69 6e 22 3a 32 31 33 39 38 30 30 30 2c 22 6d 69 6e 53 65 6c 6c 22 3a 32 31 33 39 38 30 30 30 7d 2c 22 4c 52 43 22 3a 7b 22 6d 69 6e 22 3a 32 35 30 30 30 30 30 30 2c 22 6d 69 6e 53 65 6c 6c 22 3a 32 35 30 30 30 30 30 30 7d 2c 22 44 4e 54 22 3a 7b 22 6d 69 6e 22 3a 31 30 32 38 38 31 30 Data Ascii: "min":600000,"minSell":600000},"INJ":{"min":1540000,"minSell":1540000},"RENBTC":{"min":400,"minSell":400},"RSR":{"min":469484000,"minSell":469484000},"MANA":{"min":21398000,"minSell":21398000},"LRC":{"min":25000000,"minSell":25000000},"DNT":{"min":1028810
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 2c 22 41 50 49 33 22 3a 7b 22 6d 69 6e 22 3a 33 39 32 39 32 37 33 2c 22 6d 69 6e 53 65 6c 6c 22 3a 33 39 32 39 32 37 33 7d 2c 22 4d 49 4e 41 22 3a 7b 22 6d 69 6e 22 3a 34 30 39 38 33 36 30 2c 22 6d 69 6e 53 65 6c 6c 22 3a 34 30 39 38 33 36 30 7d 2c 22 41 58 53 22 3a 7b 22 6d 69 6e 22 3a 31 38 37 31 36 31 2c 22 6d 69 6e 53 65 6c 6c 22 3a 31 38 37 31 36 31 7d 2c 22 4c 55 4e 41 22 3a 7b 22 6d 69 6e 22 3a 32 31 37 32 39 37 2c 22 6d 69 6e 53 65 6c 6c 22 3a 32 31 37 32 39 37 7d 2c 22 41 50 45 22 3a 7b 22 6d 69 6e 22 3a 31 37 36 30 35 36 33 2c 22 6d 69 6e 53 65 6c 6c 22 3a 31 37 36 30 35 36 33 7d 2c 22 51 52 44 4f 22 3a 7b 22 6d 69 6e 22 3a 38 30 30 30 30 30 30 2c 22 6d 69 6e 53 65 6c 6c 22 3a 38 30 30 30 30 30 30 7d 2c 22 44 41 49 22 3a 7b 22 6d 69 6e 22 3a 32 Data Ascii: ,"API3":{"min":3929273,"minSell":3929273},"MINA":{"min":4098360,"minSell":4098360},"AXS":{"min":187161,"minSell":187161},"LUNA":{"min":217297,"minSell":217297},"APE":{"min":1760563,"minSell":1760563},"QRDO":{"min":8000000,"minSell":8000000},"DAI":{"min":2
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 5b 22 55 53 44 22 5d 5d 2c 5b 22 41 4e 54 22 2c 5b 22 55 53 44 22 5d 5d 2c 5b 22 50 41 58 47 22 2c 5b 22 55 53 44 22 5d 5d 2c 5b 22 4f 43 45 41 4e 22 2c 5b 22 55 53 44 22 5d 5d 2c 5b 22 53 52 4d 22 2c 5b 22 55 53 44 22 5d 5d 2c 5b 22 4b 41 56 41 22 2c 5b 22 55 53 44 22 5d 5d 2c 5b 22 53 54 4f 52 4a 22 2c 5b 22 55 53 44 22 5d 5d 2c 5b 22 47 5a 49 4c 22 2c 5b 22 55 53 44 22 5d 5d 2c 5b 22 45 56 45 52 22 2c 5b 22 55 53 44 22 5d 5d 2c 5b 22 47 4c 4d 22 2c 5b 22 55 53 44 22 5d 5d 2c 5b 22 55 53 44 43 22 2c 5b 22 45 55 52 22 2c 22 55 53 44 22 5d 5d 2c 5b 22 47 55 53 44 22 2c 5b 22 55 53 44 22 5d 5d 2c 5b 22 41 57 47 22 2c 5b 22 55 53 44 22 2c 22 47 42 50 22 5d 5d 2c 5b 22 46 55 4e 22 2c 5b 22 55 53 44 22 5d 5d 2c 5b 22 55 54 4b 22 2c 5b 22 55 53 44 22 5d 5d 2c Data Ascii: ["USD"]],["ANT",["USD"]],["PAXG",["USD"]],["OCEAN",["USD"]],["SRM",["USD"]],["KAVA",["USD"]],["STORJ",["USD"]],["GZIL",["USD"]],["EVER",["USD"]],["GLM",["USD"]],["USDC",["EUR","USD"]],["GUSD",["USD"]],["AWG",["USD","GBP"]],["FUN",["USD"]],["UTK",["USD"]],
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 30 30 30 30 30 30 22 2c 22 30 2e 33 30 30 30 30 30 30 30 22 5d 2c 22 62 75 79 22 3a 5b 22 32 30 30 22 2c 22 35 30 30 22 2c 22 31 30 30 30 22 2c 22 33 30 30 30 22 5d 2c 22 62 75 79 5f 70 6f 70 75 6c 61 72 22 3a 22 32 22 7d 2c 22 42 54 43 3a 45 55 52 22 3a 7b 22 73 65 6c 6c 22 3a 5b 22 30 2e 30 32 30 30 30 30 30 30 22 2c 22 30 2e 30 35 30 30 30 30 30 30 22 2c 22 30 2e 31 30 30 30 30 30 30 30 22 2c 22 30 2e 33 30 30 30 30 30 30 30 22 5d 2c 22 62 75 79 22 3a 5b 22 32 30 30 22 2c 22 34 30 30 22 2c 22 31 30 30 30 22 2c 22 32 30 30 30 22 5d 2c 22 62 75 79 5f 70 6f 70 75 6c 61 72 22 3a 22 32 22 7d 2c 22 42 54 43 3a 47 42 50 22 3a 7b 22 73 65 6c 6c 22 3a 5b 22 30 2e 30 32 30 30 30 30 30 30 22 2c 22 30 2e 30 35 30 30 30 30 30 30 22 2c 22 30 2e 31 30 30 30 30 30 30 Data Ascii: 000000","0.30000000"],"buy":["200","500","1000","3000"],"buy_popular":"2"},"BTC:EUR":{"sell":["0.02000000","0.05000000","0.10000000","0.30000000"],"buy":["200","400","1000","2000"],"buy_popular":"2"},"BTC:GBP":{"sell":["0.02000000","0.05000000","0.1000000
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 30 30 30 30 22 2c 22 38 2e 30 30 30 30 30 30 30 30 22 2c 22 32 30 2e 30 30 30 30 30 30 30 30 22 5d 2c 22 62 75 79 22 3a 5b 22 31 30 30 22 2c 22 33 30 30 22 2c 22 38 30 30 22 2c 22 31 30 30 30 22 5d 2c 22 62 75 79 5f 70 6f 70 75 6c 61 72 22 3a 22 32 22 7d 2c 22 4c 54 43 3a 55 53 44 22 3a 7b 22 73 65 6c 6c 22 3a 5b 22 31 2e 35 30 30 30 30 30 30 30 22 2c 22 33 2e 30 30 30 30 30 30 30 30 22 2c 22 38 2e 30 30 30 30 30 30 30 30 22 2c 22 35 30 2e 30 30 30 30 30 30 30 30 22 5d 2c 22 62 75 79 22 3a 5b 22 31 30 30 22 2c 22 32 30 30 22 2c 22 35 30 30 22 2c 22 31 30 30 30 22 5d 2c 22 62 75 79 5f 70 6f 70 75 6c 61 72 22 3a 22 32 22 7d 2c 22 4c 54 43 3a 45 55 52 22 3a 7b 22 73 65 6c 6c 22 3a 5b 22 31 2e 35 30 30 30 30 30 30 30 22 2c 22 33 2e 30 30 30 30 30 30 30 30 22 Data Ascii: 0000","8.00000000","20.00000000"],"buy":["100","300","800","1000"],"buy_popular":"2"},"LTC:USD":{"sell":["1.50000000","3.00000000","8.00000000","50.00000000"],"buy":["100","200","500","1000"],"buy_popular":"2"},"LTC:EUR":{"sell":["1.50000000","3.00000000"
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 3a 5b 22 32 35 30 30 30 30 2e 30 30 30 30 30 30 22 2c 22 35 30 30 30 30 30 2e 30 30 30 30 30 30 22 2c 22 31 35 30 30 30 30 30 2e 30 30 30 30 30 30 22 2c 22 36 30 30 30 30 30 30 2e 30 30 30 30 30 30 22 5d 2c 22 62 75 79 22 3a 5b 22 31 30 30 22 2c 22 32 30 30 22 2c 22 35 30 30 22 2c 22 33 30 30 30 22 5d 2c 22 62 75 79 5f 70 6f 70 75 6c 61 72 22 3a 22 32 22 7d 2c 22 42 54 54 3a 45 55 52 22 3a 7b 22 73 65 6c 6c 22 3a 5b 22 32 35 30 30 30 30 2e 30 30 30 30 30 30 22 2c 22 35 30 30 30 30 30 2e 30 30 30 30 30 30 22 2c 22 31 35 30 30 30 30 30 2e 30 30 30 30 30 30 22 2c 22 36 30 30 30 30 30 30 2e 30 30 30 30 30 30 22 5d 2c 22 62 75 79 22 3a 5b 22 31 30 30 22 2c 22 32 30 30 22 2c 22 35 30 30 22 2c 22 33 30 30 30 22 5d 2c 22 62 75 79 5f 70 6f 70 75 6c 61 72 22 3a 22 Data Ascii: :["250000.000000","500000.000000","1500000.000000","6000000.000000"],"buy":["100","200","500","3000"],"buy_popular":"2"},"BTT:EUR":{"sell":["250000.000000","500000.000000","1500000.000000","6000000.000000"],"buy":["100","200","500","3000"],"buy_popular":"
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 22 32 22 7d 2c 22 4e 45 4f 3a 55 53 44 22 3a 7b 22 73 65 6c 6c 22 3a 5b 22 32 30 22 2c 22 34 35 22 2c 22 31 30 30 22 2c 22 32 35 30 22 5d 2c 22 62 75 79 22 3a 5b 22 32 30 30 22 2c 22 35 30 30 22 2c 22 31 30 30 30 22 2c 22 33 30 30 30 22 5d 2c 22 62 75 79 5f 70 6f 70 75 6c 61 72 22 3a 22 32 22 7d 2c 22 4e 45 4f 3a 45 55 52 22 3a 7b 22 73 65 6c 6c 22 3a 5b 22 32 30 22 2c 22 34 35 22 2c 22 31 30 30 22 2c 22 32 35 30 22 5d 2c 22 62 75 79 22 3a 5b 22 32 30 30 22 2c 22 34 30 30 22 2c 22 31 30 30 30 22 2c 22 32 30 30 30 22 5d 2c 22 62 75 79 5f 70 6f 70 75 6c 61 72 22 3a 22 32 22 7d 2c 22 4e 45 4f 3a 47 42 50 22 3a 7b 22 73 65 6c 6c 22 3a 5b 22 32 30 22 2c 22 34 35 22 2c 22 31 30 30 22 2c 22 32 35 30 22 5d 2c 22 62 75 79 22 3a 5b 22 31 30 30 22 2c 22 33 30 30 22 Data Ascii: "2"},"NEO:USD":{"sell":["20","45","100","250"],"buy":["200","500","1000","3000"],"buy_popular":"2"},"NEO:EUR":{"sell":["20","45","100","250"],"buy":["200","400","1000","2000"],"buy_popular":"2"},"NEO:GBP":{"sell":["20","45","100","250"],"buy":["100","300"
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 7d 2c 22 58 54 5a 3a 47 42 50 22 3a 7b 22 73 65 6c 6c 22 3a 5b 22 36 35 22 2c 22 31 36 30 22 2c 22 33 30 30 22 2c 22 31 30 30 30 22 5d 2c 22 62 75 79 22 3a 5b 22 31 30 30 22 2c 22 33 30 30 22 2c 22 38 30 30 22 2c 22 31 30 30 30 22 5d 2c 22 62 75 79 5f 70 6f 70 75 6c 61 72 22 3a 22 32 22 7d 2c 22 4d 41 54 49 43 3a 55 53 44 22 3a 7b 22 73 65 6c 6c 22 3a 5b 22 32 30 30 30 30 22 2c 22 34 30 30 30 30 22 2c 22 38 30 30 30 30 22 2c 22 31 32 35 30 30 30 22 5d 2c 22 62 75 79 22 3a 5b 22 32 30 30 22 2c 22 35 30 30 22 2c 22 31 30 30 30 22 2c 22 31 35 30 30 22 5d 2c 22 62 75 79 5f 70 6f 70 75 6c 61 72 22 3a 22 32 22 7d 2c 22 4d 41 54 49 43 3a 45 55 52 22 3a 7b 22 73 65 6c 6c 22 3a 5b 22 32 30 30 30 30 22 2c 22 34 30 30 30 30 22 2c 22 38 30 30 30 30 22 2c 22 31 32 35 Data Ascii: },"XTZ:GBP":{"sell":["65","160","300","1000"],"buy":["100","300","800","1000"],"buy_popular":"2"},"MATIC:USD":{"sell":["20000","40000","80000","125000"],"buy":["200","500","1000","1500"],"buy_popular":"2"},"MATIC:EUR":{"sell":["20000","40000","80000","125

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49739	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:57 UTC	559	OUT	GET /static/resources/media/briefcase.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:57 UTC	460	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:57 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-173" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: HIT Age: 3625 X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c2f49576908-IAD
2024-03-29 13:44:57 UTC	378	IN	Data Raw: 31 37 33 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 30 20 36 48 31 37 56 34 43 31 37 20 32 2e 38 39 37 20 31 36 2e 31 30 33 20 32 20 31 35 20 32 48 39 43 37 2e 38 39 37 20 32 20 37 20 32 2e 38 39 37 20 37 20 34 56 36 48 34 43 32 2e 38 39 37 20 36 20 32 20 36 2e 38 39 37 20 32 20 38 56 31 38 43 32 20 31 39 2e 31 30 33 20 32 2e 38 39 37 20 32 30 20 34 20 32 30 48 32 30 43 32 31 2e 31 30 33 20 32 30 20 32 32 20 31 39 2e 31 30 33 20 32 32 20 31 38 56 38 43 32 32 20 36 Data Ascii: 173<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M20 6H17V4C17 2.897 16.103 2 15 2H9C7.897 2 7 2.897 7 4V6H4C2.897 6 2 6.897 2 8V18C2 19.103 2.897 20 4 20H20C21.103 20 22 19.103 22 18V8C22 6
2024-03-29 13:44:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49740	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:57 UTC	721	OUT	GET /static/resources/media/grid.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fis-user-logged-in
2024-03-29 13:44:57 UTC	457	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:57 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-5c5" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: REVALIDATED X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c2f5bdf81b8-IAD
2024-03-29 13:44:57 UTC	912	IN	Data Raw: 35 63 35 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 30 20 33 48 34 43 33 2e 37 33 34 37 38 20 33 20 33 2e 34 38 30 34 33 20 33 2e 31 30 35 33 36 20 33 2e 32 39 32 38 39 20 33 2e 32 39 32 38 39 43 33 2e 31 30 35 33 36 20 33 2e 34 38 30 34 33 20 33 20 33 2e 37 33 34 37 38 20 33 20 34 56 31 30 43 33 20 31 30 2e 32 36 35 32 20 33 2e 31 30 35 33 36 20 31 30 2e 35 31 39 36 20 33 2e 32 39 32 38 39 20 31 30 2e 37 30 37 31 43 33 2e 34 38 30 34 33 20 31 30 2e 38 39 34 36 20 Data Ascii: 5c5<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M10 3H4C3.73478 3 3.48043 3.10536 3.29289 3.29289C3.10536 3.48043 3 3.73478 3 4V10C3 10.2652 3.10536 10.5196 3.29289 10.7071C3.48043 10.8946
2024-03-29 13:44:57 UTC	572	IN	Data Raw: 39 36 20 31 31 20 32 30 2e 32 36 35 32 20 31 31 20 32 30 56 31 34 43 31 31 20 31 33 2e 37 33 34 38 20 31 30 2e 38 39 34 36 20 31 33 2e 34 38 30 34 20 31 30 2e 37 30 37 31 20 31 33 2e 32 39 32 39 43 31 30 2e 35 31 39 36 20 31 33 2e 31 30 35 34 20 31 30 2e 32 36 35 32 20 31 33 20 31 30 20 31 33 48 34 43 33 2e 37 33 34 37 38 20 31 33 20 33 2e 34 38 30 34 33 20 31 33 2e 31 30 35 34 20 33 2e 32 39 32 38 39 20 31 33 2e 32 39 32 39 43 33 2e 31 30 35 33 36 20 31 33 2e 34 38 30 34 20 33 20 31 33 2e 37 33 34 38 20 33 20 31 34 56 32 30 5a 4d 35 20 31 35 48 39 56 31 39 48 35 56 31 35 5a 4d 31 33 20 32 30 43 31 33 20 32 30 2e 32 36 35 32 20 31 33 2e 31 30 35 34 20 32 30 2e 35 31 39 36 20 31 33 2e 32 39 32 39 20 32 30 2e 37 30 37 31 43 31 33 2e 34 38 30 34 20 32 30 2e Data Ascii: 96 11 20.2652 11 20V14C11 13.7348 10.8946 13.4804 10.7071 13.2929C10.5196 13.1054 10.2652 13 10 13H4C3.73478 13 3.48043 13.1054 3.29289 13.2929C3.10536 13.4804 3 13.7348 3 14V20ZM5 15H9V19H5V15ZM13 20C13 20.2652 13.1054 20.5196 13.2929 20.7071C13.4804 20.
2024-03-29 13:44:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49741	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:57 UTC	554	OUT	GET /static/resources/media/data.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:57 UTC	460	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:57 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-284" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: HIT Age: 3515 X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c2f599d82a2-IAD
2024-03-29 13:44:57 UTC	651	IN	Data Raw: 32 38 34 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 30 20 31 37 56 37 43 32 30 20 34 2e 38 33 32 20 31 36 2e 33 33 37 20 33 20 31 32 20 33 43 37 2e 36 36 33 20 33 20 34 20 34 2e 38 33 32 20 34 20 37 56 31 37 43 34 20 31 39 2e 31 36 38 20 37 2e 36 36 33 20 32 31 20 31 32 20 32 31 43 31 36 2e 33 33 37 20 32 31 20 32 30 20 31 39 2e 31 36 38 20 32 30 20 31 37 5a 4d 31 32 20 35 43 31 35 2e 36 39 31 20 35 20 31 37 2e 39 33 31 20 36 2e 35 30 37 20 31 38 20 36 2e 39 39 34 Data Ascii: 284<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M20 17V7C20 4.832 16.337 3 12 3C7.663 3 4 4.832 4 7V17C4 19.168 7.663 21 12 21C16.337 21 20 19.168 20 17ZM12 5C15.691 5 17.931 6.507 18 6.994
2024-03-29 13:44:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49742	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:57 UTC	729	OUT	GET /static/resources/media/chevron-down.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fis-user-logged-in
2024-03-29 13:44:57 UTC	446	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:57 GMT Content-Type: image/svg+xml Content-Length: 239 Connection: close last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: "65fb2453-ef" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c2f6a353b2c-IAD
2024-03-29 13:44:57 UTC	239	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 36 2e 32 39 33 20 39 2e 32 39 32 39 37 4c 31 32 20 31 33 2e 35 38 36 4c 37 2e 37 30 36 39 37 20 39 2e 32 39 32 39 37 4c 36 2e 32 39 32 39 37 20 31 30 2e 37 30 37 4c 31 32 20 31 36 2e 34 31 34 4c 31 37 2e 37 30 37 20 31 30 2e 37 30 37 4c 31 36 2e 32 39 33 20 39 2e 32 39 32 39 37 5a 22 0a 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 62 6c 61 63 6b 22 2f 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: <svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M16.293 9.29297L12 13.586L7.70697 9.29297L6.29297 10.707L12 16.414L17.707 10.707L16.293 9.29297Z" fill="black"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49743	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:57 UTC	561	OUT	GET /static/resources/media/credit-card.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:57 UTC	460	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:57 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-155" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: HIT Age: 1708 X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c2f78fe07fe-IAD
2024-03-29 13:44:57 UTC	348	IN	Data Raw: 31 35 35 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 30 20 34 48 34 43 32 2e 38 39 37 20 34 20 32 20 34 2e 38 39 37 20 32 20 36 56 31 38 43 32 20 31 39 2e 31 30 33 20 32 2e 38 39 37 20 32 30 20 34 20 32 30 48 32 30 43 32 31 2e 31 30 33 20 32 30 20 32 32 20 31 39 2e 31 30 33 20 32 32 20 31 38 56 36 43 32 32 20 34 2e 38 39 37 20 32 31 2e 31 30 33 20 34 20 32 30 20 34 5a 4d 32 30 20 36 56 38 48 34 56 36 48 32 30 5a 4d 34 20 31 38 56 31 32 48 32 30 2e 30 30 31 4c 32 30 Data Ascii: 155<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M20 4H4C2.897 4 2 4.897 2 6V18C2 19.103 2.897 20 4 20H20C21.103 20 22 19.103 22 18V6C22 4.897 21.103 4 20 4ZM20 6V8H4V6H20ZM4 18V12H20.001L20
2024-03-29 13:44:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49744	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:57 UTC	725	OUT	GET /static/resources/media/exchange.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fis-user-logged-in
2024-03-29 13:44:57 UTC	457	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:57 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-312" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: REVALIDATED X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c2f7be457d6-IAD
2024-03-29 13:44:57 UTC	793	IN	Data Raw: 33 31 32 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 35 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 34 2e 36 34 39 36 31 20 32 32 2e 30 34 39 38 43 34 2e 30 31 36 32 38 20 32 32 2e 30 34 39 38 20 33 2e 34 37 34 36 31 20 32 31 2e 38 32 39 20 33 2e 30 32 34 36 31 20 32 31 2e 33 38 37 33 43 32 2e 35 37 34 36 31 20 32 30 2e 39 34 35 36 20 32 2e 33 34 39 36 31 20 32 30 2e 34 30 38 31 20 32 2e 33 34 39 36 31 20 31 39 2e 37 37 34 38 56 35 2e 32 34 39 38 43 32 2e 33 34 39 36 31 20 34 2e 36 31 36 34 37 20 32 2e 35 37 34 36 Data Ascii: 312<svg width="24" height="25" viewBox="0 0 24 25" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M4.64961 22.0498C4.01628 22.0498 3.47461 21.829 3.02461 21.3873C2.57461 20.9456 2.34961 20.4081 2.34961 19.7748V5.2498C2.34961 4.61647 2.5746
2024-03-29 13:44:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49745	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:57 UTC	558	OUT	GET /static/resources/media/transfer.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:57 UTC	449	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:57 GMT Content-Type: image/svg+xml Content-Length: 200 Connection: close last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: "65fb2453-c8" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: HIT Age: 1708 Accept-Ranges: bytes X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c2f8e530810-IAD
2024-03-29 13:44:57 UTC	200	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 36 20 31 32 4c 32 30 20 38 4c 31 36 20 34 56 36 2e 39 39 39 48 32 56 38 2e 39 39 39 48 31 36 56 31 32 5a 4d 38 20 31 32 4c 34 20 31 36 4c 38 20 32 30 56 31 37 48 32 32 56 31 35 48 38 56 31 32 5a 22 20 66 69 6c 6c 3d 22 62 6c 61 63 6b 22 2f 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: <svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M16 12L20 8L16 4V6.999H2V8.999H16V12ZM8 12L4 16L8 20V17H22V15H8V12Z" fill="black"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49747	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:57 UTC	553	OUT	GET /static/resources/media/cex.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:57 UTC	460	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:57 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-493" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: HIT Age: 2879 X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c2f9dd02027-IAD
2024-03-29 13:44:57 UTC	909	IN	Data Raw: 34 39 33 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 31 22 20 68 65 69 67 68 74 3d 22 32 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 31 20 32 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 0a 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 34 2e 33 36 34 38 33 20 35 2e 30 34 33 33 36 43 32 2e 38 36 36 31 35 20 36 2e 35 33 37 30 37 20 32 2e 30 34 34 36 32 20 38 2e 35 32 33 36 39 20 32 2e 30 34 34 36 32 20 31 30 2e 36 33 39 38 43 32 2e 30 34 34 36 32 20 31 32 2e 37 35 35 38 20 32 2e 38 36 36 31 35 20 31 34 Data Ascii: 493<svg width="21" height="21" viewBox="0 0 21 21" fill="none" xmlns="http://www.w3.org/2000/svg"> <path fill-rule="evenodd" clip-rule="evenodd" d="M4.36483 5.04336C2.86615 6.53707 2.04462 8.52369 2.04462 10.6398C2.04462 12.7558 2.86615 14
2024-03-29 13:44:57 UTC	269	IN	Data Raw: 39 38 4c 31 35 2e 39 31 35 38 20 39 2e 36 39 33 37 37 48 39 2e 39 36 30 39 35 43 39 2e 34 33 38 31 36 20 39 2e 36 39 33 37 37 20 39 2e 30 31 34 39 34 20 31 30 2e 31 31 37 20 39 2e 30 31 34 39 34 20 31 30 2e 36 33 39 38 43 39 2e 30 31 34 39 34 20 31 31 2e 31 36 32 36 20 39 2e 34 33 38 31 36 20 31 31 2e 35 38 35 38 20 39 2e 39 36 30 39 35 20 31 31 2e 35 38 35 38 5a 4d 31 37 2e 38 37 37 32 20 31 33 2e 31 37 39 56 31 35 2e 30 37 31 31 48 31 34 2e 35 36 31 32 4c 31 36 2e 34 35 33 32 20 31 33 2e 31 37 39 48 31 37 2e 38 37 37 32 5a 4d 31 37 2e 38 37 37 32 20 38 2e 31 30 30 34 34 48 31 36 2e 34 35 33 32 4c 31 34 2e 35 36 31 32 20 36 2e 32 30 38 34 31 48 31 37 2e 38 37 37 32 56 38 2e 31 30 30 34 34 5a 22 0a 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 43 Data Ascii: 98L15.9158 9.69377H9.96095C9.43816 9.69377 9.01494 10.117 9.01494 10.6398C9.01494 11.1626 9.43816 11.5858 9.96095 11.5858ZM17.8772 13.179V15.0711H14.5612L16.4532 13.179H17.8772ZM17.8772 8.10044H16.4532L14.5612 6.20841H17.8772V8.10044Z" fill="#0C
2024-03-29 13:44:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49749	172.67.20.8	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:57 UTC	577	OUT	GET /client_data/9022a6a83360995949fccfed/CnaQzp8F.json HTTP/1.1 Host: cdn-cookieyes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:57 UTC	473	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:57 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 27 Mar 2024 14:20:02 GMT etag: W/"5000-614a51a401e33" access-control-allow-origin: * access-control-allow-methods: GET, OPTIONS Cache-Control: max-age=0, must-revalidate, s-maxage=604800, proxy-revalidate CF-Cache-Status: HIT Age: 164154 Server: cloudflare CF-RAY: 86c04c2fad3459e5-IAD
2024-03-29 13:44:57 UTC	896	IN	Data Raw: 35 30 30 30 0d 0a 5b 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 4e 41 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 55 53 27 20 41 4e 44 20 72 65 67 69 6f 6e 43 6f 64 65 20 49 53 20 27 47 41 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 4e 41 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 55 53 27 20 41 4e 44 20 72 65 67 69 6f 6e 43 6f 64 65 20 49 53 20 27 43 41 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 Data Ascii: 5000[{"targetBanner":1192903,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode IS 'GA'"},{"targetBanner":1192903,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode IS 'CA'"},{"targetBanner":1192903,"condition":"r
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 53 20 27 4e 41 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 55 53 27 20 41 4e 44 20 72 65 67 69 6f 6e 43 6f 64 65 20 49 53 20 27 41 52 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 34 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 4e 41 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 55 53 27 20 41 4e 44 20 72 65 67 69 6f 6e 43 6f 64 65 20 49 53 20 27 43 54 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 34 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 4e 41 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 55 53 27 20 41 4e 44 20 72 65 67 69 6f 6e 43 6f 64 65 Data Ascii: S 'NA' AND countryName IS 'US' AND regionCode IS 'AR'"},{"targetBanner":1192904,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode IS 'CT'"},{"targetBanner":1192904,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 41 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 55 53 27 20 41 4e 44 20 72 65 67 69 6f 6e 43 6f 64 65 20 49 53 20 27 4d 44 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 34 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 4e 41 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 55 53 27 20 41 4e 44 20 72 65 67 69 6f 6e 43 6f 64 65 20 49 53 20 27 4d 45 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 34 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 4e 41 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 55 53 27 20 41 4e 44 20 72 65 67 69 6f 6e 43 6f 64 65 20 49 53 20 Data Ascii: A' AND countryName IS 'US' AND regionCode IS 'MD'"},{"targetBanner":1192904,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode IS 'ME'"},{"targetBanner":1192904,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode IS
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 55 53 27 20 41 4e 44 20 72 65 67 69 6f 6e 43 6f 64 65 20 49 53 20 27 4f 48 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 34 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 4e 41 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 55 53 27 20 41 4e 44 20 72 65 67 69 6f 6e 43 6f 64 65 20 49 53 20 27 4f 4b 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 34 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 4e 41 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 55 53 27 20 41 4e 44 20 72 65 67 69 6f 6e 43 6f 64 65 20 49 53 20 27 4f 52 27 Data Ascii: ND countryName IS 'US' AND regionCode IS 'OH'"},{"targetBanner":1192904,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode IS 'OK'"},{"targetBanner":1192904,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode IS 'OR'
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 55 53 27 20 41 4e 44 20 72 65 67 69 6f 6e 43 6f 64 65 20 49 53 20 27 57 56 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 34 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 4e 41 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 55 53 27 20 41 4e 44 20 72 65 67 69 6f 6e 43 6f 64 65 20 49 53 20 27 57 59 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 45 55 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 41 54 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c Data Ascii: ountryName IS 'US' AND regionCode IS 'WV'"},{"targetBanner":1192904,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode IS 'WY'"},{"targetBanner":1192903,"condition":"regionName IS 'EU' AND countryName IS 'AT'"},{"targetBanner":1192903,
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 49 53 20 27 49 45 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 45 55 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 49 54 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 45 55 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 4c 56 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 45 55 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 4c 49 27 22 7d Data Ascii: IS 'IE'"},{"targetBanner":1192903,"condition":"regionName IS 'EU' AND countryName IS 'IT'"},{"targetBanner":1192903,"condition":"regionName IS 'EU' AND countryName IS 'LV'"},{"targetBanner":1192903,"condition":"regionName IS 'EU' AND countryName IS 'LI'"}
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 20 49 53 20 27 45 55 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 43 48 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 45 55 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 47 42 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 45 55 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 41 44 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 4e 41 27 20 Data Ascii: IS 'EU' AND countryName IS 'CH'"},{"targetBanner":1192903,"condition":"regionName IS 'EU' AND countryName IS 'GB'"},{"targetBanner":1192903,"condition":"regionName IS 'EU' AND countryName IS 'AD'"},{"targetBanner":1192903,"condition":"regionName IS 'NA'
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 41 46 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 45 47 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 45 55 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 46 4f 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 4f 43 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 50 46 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 Data Ascii: 3,"condition":"regionName IS 'AF' AND countryName IS 'EG'"},{"targetBanner":1192903,"condition":"regionName IS 'EU' AND countryName IS 'FO'"},{"targetBanner":1192903,"condition":"regionName IS 'OC' AND countryName IS 'PF'"},{"targetBanner":1192903,"condit
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 41 53 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 4b 5a 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 41 46 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 4b 45 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 45 55 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 52 53 27 22 7d 2c 7b 22 74 61 72 67 Data Ascii: "},{"targetBanner":1192903,"condition":"regionName IS 'AS' AND countryName IS 'KZ'"},{"targetBanner":1192903,"condition":"regionName IS 'AF' AND countryName IS 'KE'"},{"targetBanner":1192903,"condition":"regionName IS 'EU' AND countryName IS 'RS'"},{"targ
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 4d 45 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 4e 41 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 4d 53 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 41 46 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 4d 41 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 41 53 27 20 41 4e 44 20 63 6f 75 Data Ascii: ' AND countryName IS 'ME'"},{"targetBanner":1192903,"condition":"regionName IS 'NA' AND countryName IS 'MS'"},{"targetBanner":1192903,"condition":"regionName IS 'AF' AND countryName IS 'MA'"},{"targetBanner":1192903,"condition":"regionName IS 'AS' AND cou

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49750	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:57 UTC	1034	OUT	GET /img/favicon/favicon.ico HTTP/1.1 Host: cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cex.io/buy-bitcoins Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fis-user-logged-in
2024-03-29 13:44:57 UTC	1153	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:57 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 content-security-policy-report-only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://*.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; x-frame-options: SAMEORIGIN etag: W/"15086-1711632670000" Cache-Control: public, max-age=18000 last-modified: Thu, 28 Mar 2024 13:31:10 GMT strict-transport-security: max-age=0; includeSubDomains CF-Cache-Status: EXPIRED X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c2fbeee3b59-IAD
2024-03-29 13:44:57 UTC	216	IN	Data Raw: 33 61 65 65 0d 0a 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 01 c1 b6 1b 12 c1 b6 1b 3a c1 b6 1b 6b c1 b6 1b 98 c1 b6 1b b9 c1 b6 1b cf c1 b6 1b da c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd Data Ascii: 3aee00 %6 % h6(0` $:k
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 0a c1 b6 1b 3d c1 b6 1b 88 c1 b6 1b c7 c1 b6 1b ec c1 b6 1b fc c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b Data Ascii: =
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 20 c1 b6 1b c1 c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b f6 c1 b6 1b a4 c1 b6 1b 32 c1 b6 1b 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 2
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 1b 45 c1 b6 1b de c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff 00 00 00 00 c1 b6 1b 2c c1 b6 1b e6 c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ee c1 b6 1b 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 36 c1 b6 1b da c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b f4 c1 b6 1b 76 c1 b6 1b 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 45 c1 b6 1b de c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff 00 00 00 00 c1 b6 1b 6f c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b a6 c1 b6 1b 06 00 Data Ascii: E,@6vEo
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 00 c1 b6 1b a5 c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ef c1 b6 1b 33 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 27 c1 b6 1b e7 c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ac c1 b6 1b 04 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 45 c1 b6 1b eb c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b f5 c1 b6 1b 76 c1 b6 1b 06 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b b0 c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b e9 c1 b6 1b 2a 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 33 c1 b6 1b ef c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 Data Ascii: 3'Ev*3
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: c1 b6 1b d1 c1 b6 1b 17 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 1d c1 b6 1b d5 c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b c1 c1 b6 1b 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 07 c1 b6 1b b0 c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b f7 c1 b6 1b 4e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 74 c1 b6 1b fd c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b d3 c1 b6 1b 5c c1 b6 1b Data Ascii: *Nt\
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 02 c1 b6 1b 2a c1 b6 1b 7a c1 b6 1b c0 c1 b6 1b e6 c1 b6 1b f7 c1 b6 1b fc c1 b6 1b fe c1 b6 1b fe c1 b6 1b fe c1 b6 1b fe c1 b6 1b fe c1 b6 1b fe c1 b6 1b fe c1 b6 1b f4 c1 b6 1b 76 c1 b6 1b 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 44 c1 b6 1b dd c1 b6 1b ff c1 b6 1b fe c1 b6 1b fe c1 b6 1b fe c1 b6 1b fe c1 b6 1b fe c1 b6 1b fe c1 b6 1b fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 73 c1 b6 1b fb c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b d5 c1 b6 1b 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 0c c1 b6 1b 27 c1 b6 1b 44 c1 b6 1b 55 c1 b6 1b 5a c1 b6 1b 5a c1 b6 1b 5a c1 b6 1b 5a Data Ascii: *zvDsB'DUZZZZ
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 03 c1 b6 1b 3e c1 b6 1b b3 c1 b6 1b f7 c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 Data Ascii: >
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: d7 c1 b6 1b e6 c1 b6 1b e9 c1 b6 1b e9 c1 b6 1b e9 c1 b6 1b e9 c1 b6 1b e9 c1 b6 1b e9 c1 b6 1b e9 c1 b6 1b e9 c1 b6 1b e9 c1 b6 1b e9 c1 b6 1b e9 c1 b6 1b e9 c1 b6 1b e9 c1 b6 1b e9 c1 b6 1b e9 c1 b6 1b e9 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 1b c1 b6 1b 6f c1 b6 1b c4 c1 b6 1b f1 c1 b6 1b fe c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 08 c1 b6 1b 5c c1 b6 1b cf c1 b6 1b fd c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 Data Ascii: o\
2024-03-29 13:44:57 UTC	1369	IN	Data Raw: c1 b6 1b 18 00 00 00 00 c1 b6 1b 01 c1 b6 1b 85 c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b f6 c1 b6 1b a0 c1 b6 1b 3f c1 b6 1b 1a c1 b6 1b 13 c1 b6 1b 14 c1 b6 1b 14 c1 b6 1b 14 c1 b6 1b 14 c1 b6 1b 14 c1 b6 1b 14 c1 b6 1b 15 c1 b6 1b 10 c1 b6 1b 01 00 00 00 00 00 00 00 00 c1 b6 1b 02 c1 b6 1b 11 c1 b6 1b 14 c1 b6 1b 14 c1 b6 1b 6f c1 b6 1b fc c1 b6 1b ff c1 b6 1b ff c1 b6 1b 8d 00 00 00 00 00 00 00 00 c1 b6 1b 28 c1 b6 1b e0 c1 b6 1b ff c1 b6 1b ff c1 b6 1b f8 c1 b6 1b 78 c1 b6 1b 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 9e c1 b6 1b ff c1 b6 1b ff c1 b6 1b fc c1 b6 1b Data Ascii: ?o(x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49748	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:57 UTC	721	OUT	GET /static/resources/media/chip.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fis-user-logged-in
2024-03-29 13:44:57 UTC	457	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:57 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-1bb" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: REVALIDATED X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c2fadfc9c88-IAD
2024-03-29 13:44:57 UTC	450	IN	Data Raw: 31 62 62 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 39 20 39 48 31 35 56 31 35 48 39 56 39 5a 22 20 66 69 6c 6c 3d 22 62 6c 61 63 6b 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 30 20 36 43 32 30 20 34 2e 38 39 37 20 31 39 2e 31 30 33 20 34 20 31 38 20 34 48 31 37 56 32 48 31 35 56 34 48 31 33 56 32 48 31 31 56 34 48 39 56 32 48 37 56 34 48 36 43 34 2e 38 39 37 20 34 20 34 20 34 2e 38 39 37 20 34 20 36 56 37 48 32 56 39 48 34 56 31 31 48 32 56 31 33 48 34 Data Ascii: 1bb<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M9 9H15V15H9V9Z" fill="black"/> <path d="M20 6C20 4.897 19.103 4 18 4H17V2H15V4H13V2H11V4H9V2H7V4H6C4.897 4 4 4.897 4 6V7H2V9H4V11H2V13H4
2024-03-29 13:44:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49746	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:57 UTC	555	OUT	GET /static/resources/media/phone.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:57 UTC	460	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:57 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-6d5" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: HIT Age: 1708 X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c302b223934-IAD
2024-03-29 13:44:57 UTC	909	IN	Data Raw: 36 64 35 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 37 2e 37 30 37 33 20 31 32 2e 32 39 33 32 43 31 37 2e 36 31 34 35 20 31 32 2e 32 30 30 33 20 31 37 2e 35 30 34 33 20 31 32 2e 31 32 36 35 20 31 37 2e 33 38 33 20 31 32 2e 30 37 36 32 43 31 37 2e 32 36 31 37 20 31 32 2e 30 32 35 39 20 31 37 2e 31 33 31 37 20 31 32 20 31 37 2e 30 30 30 33 20 31 32 43 31 36 2e 38 36 39 20 31 32 20 31 36 2e 37 33 39 20 31 32 2e 30 32 35 39 20 31 36 2e 36 31 37 36 20 31 32 2e 30 37 36 Data Ascii: 6d5<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M17.7073 12.2932C17.6145 12.2003 17.5043 12.1265 17.383 12.0762C17.2617 12.0259 17.1317 12 17.0003 12C16.869 12 16.739 12.0259 16.6176 12.076
2024-03-29 13:44:57 UTC	847	IN	Data Raw: 43 31 31 2e 31 39 31 33 20 32 30 2e 36 30 36 32 20 31 36 2e 31 33 37 33 20 32 30 2e 39 38 32 32 20 31 37 2e 35 36 32 33 20 32 31 2e 30 30 36 32 48 31 37 2e 35 39 30 33 43 31 38 2e 31 31 38 33 20 32 31 2e 30 30 36 32 20 31 38 2e 36 31 37 33 20 32 30 2e 37 39 38 32 20 31 38 2e 39 39 35 33 20 32 30 2e 34 32 30 32 4c 32 31 2e 37 30 37 33 20 31 37 2e 37 30 38 32 43 32 31 2e 38 30 30 33 20 31 37 2e 36 31 35 34 20 32 31 2e 38 37 34 20 31 37 2e 35 30 35 32 20 32 31 2e 39 32 34 33 20 31 37 2e 33 38 33 39 43 32 31 2e 39 37 34 36 20 31 37 2e 32 36 32 36 20 32 32 2e 30 30 30 35 20 31 37 2e 31 33 32 35 20 32 32 2e 30 30 30 35 20 31 37 2e 30 30 31 32 43 32 32 2e 30 30 30 35 20 31 36 2e 38 36 39 39 20 32 31 2e 39 37 34 36 20 31 36 2e 37 33 39 38 20 32 31 2e 39 32 34 33 Data Ascii: C11.1913 20.6062 16.1373 20.9822 17.5623 21.0062H17.5903C18.1183 21.0062 18.6173 20.7982 18.9953 20.4202L21.7073 17.7082C21.8003 17.6154 21.874 17.5052 21.9243 17.3839C21.9746 17.2626 22.0005 17.1325 22.0005 17.0012C22.0005 16.8699 21.9746 16.7398 21.9243
2024-03-29 13:44:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49751	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:57 UTC	735	OUT	GET /static/resources/media/arrow-up-and-right.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fis-user-logged-in
2024-03-29 13:44:57 UTC	457	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:57 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-12e" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: REVALIDATED X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c303cfc81b8-IAD
2024-03-29 13:44:57 UTC	309	IN	Data Raw: 31 32 65 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 37 2e 38 32 35 34 33 20 39 2e 35 39 31 33 36 4c 31 33 2e 38 39 33 37 20 39 2e 37 38 30 31 38 4c 36 2e 39 30 37 38 36 20 31 36 2e 33 34 34 34 4c 38 2e 32 37 37 34 20 31 37 2e 38 30 31 39 4c 31 35 2e 32 36 33 33 20 31 31 2e 32 33 37 37 4c 31 35 2e 30 37 34 34 20 31 37 2e 33 30 36 4c 31 37 2e 30 37 33 32 20 31 37 2e 33 36 38 32 4c 31 37 2e 33 36 38 32 20 37 2e 38 38 37 36 32 4c 37 2e 38 38 37 36 32 20 37 2e 35 39 32 36 Data Ascii: 12e<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M7.82543 9.59136L13.8937 9.78018L6.90786 16.3444L8.2774 17.8019L15.2633 11.2377L15.0744 17.306L17.0732 17.3682L17.3682 7.88762L7.88762 7.5926
2024-03-29 13:44:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49753	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:57 UTC	556	OUT	GET /static/resources/media/groups.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:58 UTC	460	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:57 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-644" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: HIT Age: 3515 X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c322c0481e2-IAD
2024-03-29 13:44:58 UTC	909	IN	Data Raw: 36 34 34 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 36 2e 36 30 30 32 20 31 32 2e 30 31 35 37 43 31 36 2e 34 30 33 38 20 31 32 2e 33 31 34 38 20 31 36 2e 31 37 39 20 31 32 2e 35 39 33 35 20 31 35 2e 39 32 39 37 20 31 32 2e 38 34 38 43 31 36 2e 36 32 31 37 20 31 33 2e 31 30 37 34 20 31 37 2e 32 34 37 35 20 31 33 2e 35 30 32 31 20 31 37 2e 37 37 34 39 20 31 34 Data Ascii: 644<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M16.6002 12.0157C16.4038 12.3148 16.179 12.5935 15.9297 12.848C16.6217 13.1074 17.2475 13.5021 17.7749 14
2024-03-29 13:44:58 UTC	702	IN	Data Raw: 31 35 37 20 36 20 36 2e 35 20 36 43 36 2e 37 37 37 37 33 20 36 20 37 2e 30 33 37 38 33 20 36 2e 30 37 35 34 38 20 37 2e 32 36 30 39 31 20 36 2e 32 30 37 30 35 43 37 2e 36 30 35 39 34 20 35 2e 36 32 32 38 36 20 38 2e 30 35 35 39 31 20 35 2e 31 30 38 30 31 20 38 2e 35 38 34 38 39 20 34 2e 36 38 38 34 36 5a 4d 37 2e 33 39 39 37 37 20 31 32 2e 30 31 35 37 43 37 2e 32 36 37 38 39 20 31 32 2e 30 30 35 33 20 37 2e 31 33 34 35 37 20 31 32 20 37 20 31 32 48 36 43 33 2e 32 33 38 35 38 20 31 32 20 31 20 31 34 2e 32 33 38 36 20 31 20 31 37 56 31 38 48 33 56 31 37 43 33 20 31 35 2e 33 34 33 31 20 34 2e 33 34 33 31 35 20 31 34 20 36 20 31 34 48 36 2e 32 32 35 30 36 43 36 2e 37 35 32 34 36 20 31 33 2e 35 30 32 31 20 37 2e 33 37 38 32 39 20 31 33 2e 31 30 37 34 20 38 2e Data Ascii: 157 6 6.5 6C6.77773 6 7.03783 6.07548 7.26091 6.20705C7.60594 5.62286 8.05591 5.10801 8.58489 4.68846ZM7.39977 12.0157C7.26789 12.0053 7.13457 12 7 12H6C3.23858 12 1 14.2386 1 17V18H3V17C3 15.3431 4.34315 14 6 14H6.22506C6.75246 13.5021 7.37829 13.1074 8.
2024-03-29 13:44:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49754	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:57 UTC	776	OUT	GET /static/resources/media/briefcase.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex
2024-03-29 13:44:58 UTC	457	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:58 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-173" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: REVALIDATED X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c322f1881f4-IAD
2024-03-29 13:44:58 UTC	378	IN	Data Raw: 31 37 33 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 30 20 36 48 31 37 56 34 43 31 37 20 32 2e 38 39 37 20 31 36 2e 31 30 33 20 32 20 31 35 20 32 48 39 43 37 2e 38 39 37 20 32 20 37 20 32 2e 38 39 37 20 37 20 34 56 36 48 34 43 32 2e 38 39 37 20 36 20 32 20 36 2e 38 39 37 20 32 20 38 56 31 38 43 32 20 31 39 2e 31 30 33 20 32 2e 38 39 37 20 32 30 20 34 20 32 30 48 32 30 43 32 31 2e 31 30 33 20 32 30 20 32 32 20 31 39 2e 31 30 33 20 32 32 20 31 38 56 38 43 32 32 20 36 Data Ascii: 173<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M20 6H17V4C17 2.897 16.103 2 15 2H9C7.897 2 7 2.897 7 4V6H4C2.897 6 2 6.897 2 8V18C2 19.103 2.897 20 4 20H20C21.103 20 22 19.103 22 18V8C22 6
2024-03-29 13:44:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49755	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:57 UTC	556	OUT	GET /static/resources/media/shield.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:58 UTC	460	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:57 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-2ed" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: HIT Age: 3515 X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c323b9f829c-IAD
2024-03-29 13:44:58 UTC	756	IN	Data Raw: 32 65 64 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 30 2e 39 39 34 37 20 36 2e 39 30 33 31 43 32 30 2e 39 37 38 36 20 36 2e 37 33 34 37 37 20 32 30 2e 39 31 39 39 20 36 2e 35 37 33 32 39 20 32 30 2e 38 32 34 32 20 36 2e 34 33 33 38 37 43 32 30 2e 37 32 38 35 20 36 2e 32 39 34 34 35 20 32 30 2e 35 39 39 20 36 2e 31 38 31 36 35 20 32 30 2e 34 34 37 37 20 36 2e 31 30 36 31 4c 31 32 2e 34 37 34 37 20 32 2e 31 30 36 31 43 31 32 2e 33 33 36 20 32 2e 30 33 36 30 34 20 31 Data Ascii: 2ed<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M20.9947 6.9031C20.9786 6.73477 20.9199 6.57329 20.8242 6.43387C20.7285 6.29445 20.599 6.18165 20.4477 6.1061L12.4747 2.1061C12.336 2.03604 1
2024-03-29 13:44:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49756	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:57 UTC	557	OUT	GET /static/resources/media/message.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:58 UTC	460	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:57 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-2ae" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: HIT Age: 3195 X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c324e09576c-IAD
2024-03-29 13:44:58 UTC	693	IN	Data Raw: 32 61 65 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 38 20 32 32 43 37 2e 38 36 38 36 34 20 32 32 2e 30 30 30 31 20 37 2e 37 33 38 35 35 20 32 31 2e 39 37 34 34 20 37 2e 36 31 37 31 36 20 32 31 2e 39 32 34 31 43 37 2e 34 39 35 37 38 20 32 31 2e 38 37 33 39 20 37 2e 33 38 35 34 38 20 32 31 2e 38 30 30 33 20 37 2e 32 39 32 36 20 32 31 2e 37 30 37 34 43 37 2e 31 39 39 37 31 20 32 31 2e 36 31 34 35 20 37 2e 31 32 36 30 36 20 32 31 2e 35 30 34 32 20 37 2e 30 37 35 38 35 20 Data Ascii: 2ae<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M8 22C7.86864 22.0001 7.73855 21.9744 7.61716 21.9241C7.49578 21.8739 7.38548 21.8003 7.2926 21.7074C7.19971 21.6145 7.12606 21.5042 7.07585
2024-03-29 13:44:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49757	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:57 UTC	946	OUT	GET /single-bundle-widget-get-config?forPage=/buy-bitcoins&originator=cex&widgetSymbols=BTC&widgetPairsForSymbols=USD,EUR,GBP,RUB HTTP/1.1 Host: cex.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex
2024-03-29 13:44:58 UTC	1329	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:58 GMT Content-Length: 0 Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 content-security-policy-report-only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://*.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; x-frame-options: SAMEORIGIN vary: Origin set-cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure access-control-allow-origin: https://cex.io access-control-allow-methods: POST, GET, OPTIONS strict-transport-security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c32898620cf-IAD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49758	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:57 UTC	945	OUT	GET /bundles/scripts/singleBundleFlowWidget.js HTTP/1.1 Host: static.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex
2024-03-29 13:44:58 UTC	485	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:58 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cf-Bgj: minify Cf-Polished: origSize=792602 etag: W/"63723245-c181a" last-modified: Mon, 14 Nov 2022 12:19:17 GMT strict-transport-security: max-age=0; includeSubDomains vary: Accept-Encoding Cache-Control: max-age=18000 CF-Cache-Status: HIT Age: 6467 X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c329c8e083e-IAD
2024-03-29 13:44:58 UTC	884	IN	Data Raw: 37 64 62 37 0d 0a 76 61 72 20 72 65 71 75 69 72 65 6a 73 2c 72 65 71 75 69 72 65 2c 64 65 66 69 6e 65 3b 28 66 75 6e 63 74 69 6f 6e 28 63 61 29 7b 66 75 6e 63 74 69 6f 6e 20 47 28 62 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 46 75 6e 63 74 69 6f 6e 5d 22 3d 3d 3d 4e 2e 63 61 6c 6c 28 62 29 7d 66 75 6e 63 74 69 6f 6e 20 48 28 62 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 4e 2e 63 61 6c 6c 28 62 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 62 2c 63 29 7b 69 66 28 62 29 7b 76 61 72 20 64 3b 66 6f 72 28 64 3d 30 3b 64 3c 62 2e 6c 65 6e 67 74 68 26 26 28 21 62 5b 64 5d 7c 7c 21 63 28 62 5b 64 5d 2c 64 2c 62 29 29 3b 64 2b 3d 31 29 3b 7d 7d 66 75 6e 63 74 69 6f 6e 20 55 28 62 2c 63 29 7b 69 66 28 62 29 7b 76 61 72 20 64 Data Ascii: 7db7var requirejs,require,define;(function(ca){function G(b){return"[object Function]"===N.call(b)}function H(b){return"[object Array]"===N.call(b)}function v(b,c){if(b){var d;for(d=0;d<b.length&&(!b[d]\|\|!c(b[d],d,b));d+=1);}}function U(b,c){if(b){var d
2024-03-29 13:44:58 UTC	1369	IN	Data Raw: 6c 65 73 3d 67 3b 64 26 26 28 63 2e 6f 72 69 67 69 6e 61 6c 45 72 72 6f 72 3d 64 29 3b 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 68 61 28 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 61 2c 65 2c 62 29 7b 76 61 72 20 66 2c 6e 2c 63 2c 64 2c 67 2c 68 2c 69 2c 49 3d 65 26 26 65 2e 73 70 6c 69 74 28 22 2f 22 29 3b 6e 3d 49 3b 76 61 72 20 6d 3d 6c 2e 6d 61 70 2c 6b 3d 6d 26 26 6d 5b 22 2a 22 5d 3b 69 66 28 61 26 26 22 2e 22 3d 3d 3d 61 2e 63 68 61 72 41 74 28 30 29 29 69 66 28 65 29 7b 6e 3d 49 2e 73 6c 69 63 65 28 30 2c 49 2e 6c 65 6e 67 74 68 2d 31 29 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2f 22 29 3b 65 3d 61 2e 6c 65 6e 67 74 68 2d 31 3b 6c 2e 6e 6f 64 65 49 64 43 6f 6d 70 61 74 26 26 52 2e 74 65 73 74 28 61 5b 65 5d 29 26 26 28 61 5b 65 5d 3d 61 5b Data Ascii: les=g;d&&(c.originalError=d);return c}function ha(b){function c(a,e,b){var f,n,c,d,g,h,i,I=e&&e.split("/");n=I;var m=l.map,k=m&&m["*"];if(a&&"."===a.charAt(0))if(e){n=I.slice(0,I.length-1);a=a.split("/");e=a.length-1;l.nodeIdCompat&&R.test(a[e])&&(a[e]=a[
2024-03-29 13:44:58 UTC	1369	IN	Data Raw: 6e 6f 72 6d 61 6c 69 7a 65 3f 64 2e 6e 6f 72 6d 61 6c 69 7a 65 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 28 61 2c 68 2c 66 29 7d 29 3a 63 28 61 2c 68 2c 66 29 3a 28 6b 3d 63 28 61 2c 68 2c 66 29 2c 61 3d 75 28 6b 29 2c 67 3d 61 5b 30 5d 2c 6b 3d 61 5b 31 5d 2c 62 3d 21 30 2c 6e 3d 69 2e 6e 61 6d 65 54 6f 55 72 6c 28 6b 29 29 29 3b 62 3d 67 26 26 21 64 26 26 21 62 3f 22 5f 75 6e 6e 6f 72 6d 61 6c 69 7a 65 64 22 2b 28 51 2b 3d 31 29 3a 22 22 3b 72 65 74 75 72 6e 7b 70 72 65 66 69 78 3a 67 2c 6e 61 6d 65 3a 6b 2c 70 61 72 65 6e 74 4d 61 70 3a 65 2c 75 6e 6e 6f 72 6d 61 6c 69 7a 65 64 3a 21 21 62 2c 75 72 6c 3a 6e 2c 6f 72 69 67 69 6e 61 6c 4e 61 6d 65 3a 6c 2c 69 73 44 65 66 69 6e 65 3a 6d 2c 69 64 3a 28 67 3f 67 2b 22 21 22 2b 6b Data Ascii: normalize?d.normalize(a,function(a){return c(a,h,f)}):c(a,h,f):(k=c(a,h,f),a=u(k),g=a[0],k=a[1],b=!0,n=i.nameToUrl(k)));b=g&&!d&&!b?"_unnormalized"+(Q+=1):"";return{prefix:g,name:k,parentMap:e,unnormalized:!!b,url:n,originalName:l,isDefine:m,id:(g?g+"!"+k
2024-03-29 13:44:58 UTC	1369	IN	Data Raw: 6d 65 3d 69 2e 63 6f 6e 74 65 78 74 4e 61 6d 65 2c 77 28 61 29 3b 6b 26 26 76 28 63 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 46 28 61 2c 7b 7d 2c 7b 7d 29 7d 29 3b 69 66 28 28 21 62 7c 7c 65 29 26 26 68 29 69 66 28 28 7a 7c 7c 66 61 29 26 26 21 59 29 59 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 59 3d 30 3b 44 28 29 7d 2c 35 30 29 3b 58 3d 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 45 28 61 29 7b 73 28 70 2c 61 5b 30 5d 29 7c 7c 71 28 6d 28 61 5b 30 5d 2c 6e 75 6c 6c 2c 21 30 29 29 2e 69 6e 69 74 28 61 5b 31 5d 2c 61 5b 32 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 61 29 7b 76 61 72 20 61 3d 61 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 7c 7c 61 2e 73 72 63 45 6c 65 6d 65 6e 74 2c 65 3d 69 2e 6f 6e 53 63 72 69 70 74 4c 6f 61 64 3b 61 2e Data Ascii: me=i.contextName,w(a);k&&v(c,function(a){F(a,{},{})});if((!b\|\|e)&&h)if((z\|\|fa)&&!Y)Y=setTimeout(function(){Y=0;D()},50);X=!1}}function E(a){s(p,a[0])\|\|q(m(a[0],null,!0)).init(a[1],a[2])}function L(a){var a=a.currentTarget\|\|a.srcElement,e=i.onScriptLoad;a.
2024-03-29 13:44:58 UTC	1369	IN	Data Raw: 6f 72 22 2c 62 29 3b 65 6c 73 65 20 74 68 69 73 2e 65 76 65 6e 74 73 2e 65 72 72 6f 72 26 26 28 62 3d 74 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 65 6d 69 74 28 22 65 72 72 6f 72 22 2c 61 29 7d 29 29 3b 74 68 69 73 2e 64 65 70 4d 61 70 73 3d 61 26 26 61 2e 73 6c 69 63 65 28 30 29 3b 74 68 69 73 2e 65 72 72 62 61 63 6b 3d 62 3b 74 68 69 73 2e 69 6e 69 74 65 64 3d 21 30 3b 74 68 69 73 2e 69 67 6e 6f 72 65 3d 66 2e 69 67 6e 6f 72 65 3b 66 2e 65 6e 61 62 6c 65 64 7c 7c 74 68 69 73 2e 65 6e 61 62 6c 65 64 3f 74 68 69 73 2e 65 6e 61 62 6c 65 28 29 3a 74 68 69 73 2e 63 68 65 63 6b 28 29 7d 7d 2c 64 65 66 69 6e 65 44 65 70 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 65 29 7b 74 68 69 73 2e 64 65 70 4d 61 74 63 68 65 64 5b 61 5d 7c 7c 28 74 68 Data Ascii: or",b);else this.events.error&&(b=t(this,function(a){this.emit("error",a)}));this.depMaps=a&&a.slice(0);this.errback=b;this.inited=!0;this.ignore=f.ignore;f.enabled\|\|this.enabled?this.enable():this.check()}},defineDep:function(a,e){this.depMatched[a]\|\|(th
2024-03-29 13:44:58 UTC	1369	IN	Data Raw: 6e 65 26 26 21 74 68 69 73 2e 69 67 6e 6f 72 65 26 26 28 70 5b 62 5d 3d 66 2c 68 2e 6f 6e 52 65 73 6f 75 72 63 65 4c 6f 61 64 29 29 68 2e 6f 6e 52 65 73 6f 75 72 63 65 4c 6f 61 64 28 69 2c 74 68 69 73 2e 6d 61 70 2c 74 68 69 73 2e 64 65 70 4d 61 70 73 29 3b 79 28 62 29 3b 74 68 69 73 2e 64 65 66 69 6e 65 64 3d 21 30 7d 74 68 69 73 2e 64 65 66 69 6e 69 6e 67 3d 21 31 3b 74 68 69 73 2e 64 65 66 69 6e 65 64 26 26 21 74 68 69 73 2e 64 65 66 69 6e 65 45 6d 69 74 74 65 64 26 26 28 74 68 69 73 2e 64 65 66 69 6e 65 45 6d 69 74 74 65 64 3d 21 30 2c 74 68 69 73 2e 65 6d 69 74 28 22 64 65 66 69 6e 65 64 22 2c 74 68 69 73 2e 65 78 70 6f 72 74 73 29 2c 74 68 69 73 2e 64 65 66 69 6e 65 45 6d 69 74 43 6f 6d 70 6c 65 74 65 3d 21 30 29 7d 7d 65 6c 73 65 20 74 68 69 73 2e Data Ascii: ne&&!this.ignore&&(p[b]=f,h.onResourceLoad))h.onResourceLoad(i,this.map,this.depMaps);y(b);this.defined=!0}this.defining=!1;this.defined&&!this.defineEmitted&&(this.defineEmitted=!0,this.emit("defined",this.exports),this.defineEmitComplete=!0)}}else this.
2024-03-29 13:44:58 UTC	1369	IN	Data Raw: 2b 6a 2c 6a 2c 5b 62 5d 29 29 7d 6b 26 26 28 4f 3d 21 30 29 3b 74 68 69 73 2e 64 65 70 4d 61 70 73 2e 70 75 73 68 28 4a 29 3b 69 2e 63 6f 6d 70 6c 65 74 65 4c 6f 61 64 28 67 29 3b 70 28 5b 67 5d 2c 64 29 7d 29 2c 66 2e 6c 6f 61 64 28 61 2e 6e 61 6d 65 2c 70 2c 64 2c 6c 29 29 7d 29 29 3b 69 2e 65 6e 61 62 6c 65 28 64 2c 74 68 69 73 29 3b 74 68 69 73 2e 70 6c 75 67 69 6e 4d 61 70 73 5b 64 2e 69 64 5d 3d 64 7d 2c 65 6e 61 62 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 57 5b 74 68 69 73 2e 6d 61 70 2e 69 64 5d 3d 74 68 69 73 3b 74 68 69 73 2e 65 6e 61 62 6c 69 6e 67 3d 74 68 69 73 2e 65 6e 61 62 6c 65 64 3d 21 30 3b 76 28 74 68 69 73 2e 64 65 70 4d 61 70 73 2c 74 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 66 3b 69 66 28 22 73 Data Ascii: +j,j,[b]))}k&&(O=!0);this.depMaps.push(J);i.completeLoad(g);p([g],d)}),f.load(a.name,p,d,l))}));i.enable(d,this);this.pluginMaps[d.id]=d},enable:function(){W[this.map.id]=this;this.enabling=this.enabled=!0;v(this.depMaps,t(this,function(a,b){var c,f;if("s
2024-03-29 13:44:58 UTC	1369	IN	Data Raw: 7c 7c 61 2e 69 6e 69 74 29 26 26 21 61 2e 65 78 70 6f 72 74 73 46 6e 29 61 2e 65 78 70 6f 72 74 73 46 6e 3d 69 2e 6d 61 6b 65 53 68 69 6d 45 78 70 6f 72 74 73 28 61 29 3b 62 5b 63 5d 3d 61 7d 29 2c 6c 2e 73 68 69 6d 3d 62 29 3b 61 2e 70 61 63 6b 61 67 65 73 26 26 76 28 61 2e 70 61 63 6b 61 67 65 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 61 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 7b 6e 61 6d 65 3a 61 7d 3a 61 3b 62 3d 61 2e 6e 61 6d 65 3b 61 2e 6c 6f 63 61 74 69 6f 6e 26 26 28 6c 2e 70 61 74 68 73 5b 62 5d 3d 61 2e 6c 6f 63 61 74 69 6f 6e 29 3b 6c 2e 70 6b 67 73 5b 62 5d 3d 61 2e 6e 61 6d 65 2b 22 2f 22 2b 28 61 2e 6d 61 69 6e 7c 7c 22 6d 61 69 6e 22 29 2e 72 65 70 6c 61 63 65 28 6a 61 2c 22 22 29 2e 72 65 70 6c 61 Data Ascii: \|\|a.init)&&!a.exportsFn)a.exportsFn=i.makeShimExports(a);b[c]=a}),l.shim=b);a.packages&&v(a.packages,function(a){var b,a="string"===typeof a?{name:a}:a;b=a.name;a.location&&(l.paths[b]=a.location);l.pkgs[b]=a.name+"/"+(a.main\|\|"main").replace(ja,"").repla
2024-03-29 13:44:58 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 62 29 7b 78 28 29 3b 76 61 72 20 63 3d 6d 28 62 2c 61 2c 21 30 29 2c 65 3d 6a 28 6b 2c 62 29 3b 64 28 62 29 3b 64 65 6c 65 74 65 20 70 5b 62 5d 3b 64 65 6c 65 74 65 20 54 5b 63 2e 75 72 6c 5d 3b 64 65 6c 65 74 65 20 61 61 5b 62 5d 3b 55 28 41 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 61 5b 30 5d 3d 3d 3d 62 26 26 41 2e 73 70 6c 69 63 65 28 63 2c 31 29 7d 29 3b 65 26 26 28 65 2e 65 76 65 6e 74 73 2e 64 65 66 69 6e 65 64 26 26 28 61 61 5b 62 5d 3d 65 2e 65 76 65 6e 74 73 29 2c 79 28 62 29 29 7d 29 3b 72 65 74 75 72 6e 20 67 7d 2c 65 6e 61 62 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6a 28 6b 2c 61 2e 69 64 29 26 26 71 28 61 29 2e 65 6e 61 62 6c 65 28 29 7d 2c 63 6f 6d 70 6c 65 74 65 4c 6f 61 64 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: function(b){x();var c=m(b,a,!0),e=j(k,b);d(b);delete p[b];delete T[c.url];delete aa[b];U(A,function(a,c){a[0]===b&&A.splice(c,1)});e&&(e.events.defined&&(aa[b]=e.events),y(b))});return g},enable:function(a){j(k,a.id)&&q(a).enable()},completeLoad:function(
2024-03-29 13:44:58 UTC	1369	IN	Data Raw: 74 75 72 6e 20 69 7d 76 61 72 20 68 2c 78 2c 79 2c 44 2c 4c 2c 45 2c 50 2c 4d 2c 71 2c 51 2c 6c 61 3d 2f 28 5c 2f 5c 2a 28 5b 5c 73 5c 53 5d 2a 3f 29 5c 2a 5c 2f 7c 28 5b 5e 3a 5d 7c 5e 29 5c 2f 5c 2f 28 2e 2a 29 24 29 2f 6d 67 2c 6d 61 3d 2f 5b 5e 2e 5d 5c 73 2a 72 65 71 75 69 72 65 5c 73 2a 5c 28 5c 73 2a 5b 22 27 5d 28 5b 5e 27 22 5c 73 5d 2b 29 5b 22 27 5d 5c 73 2a 5c 29 2f 67 2c 52 3d 2f 5c 2e 6a 73 24 2f 2c 6a 61 3d 2f 5e 5c 2e 5c 2f 2f 3b 78 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 3b 76 61 72 20 4e 3d 78 2e 74 6f 53 74 72 69 6e 67 2c 67 61 3d 78 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 69 61 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 70 6c 69 63 65 2c 7a 3d 21 21 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 Data Ascii: turn i}var h,x,y,D,L,E,P,M,q,Q,la=/(\/\([\s\S]?)\\/\|([^:]\|^)\/\/(.)$)/mg,ma=/[^.]\srequire\s$\s["']([^'"\s]+)["']\s$/g,R=/\.js$/,ja=/^\.\//;x=Object.prototype;var N=x.toString,ga=x.hasOwnProperty,ia=Array.prototype.splice,z=!!("undefined"!==type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49760	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:57 UTC	554	OUT	GET /static/resources/media/file.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:58 UTC	457	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:58 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-475" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: REVALIDATED X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c329e2720a6-IAD
2024-03-29 13:44:58 UTC	912	IN	Data Raw: 34 37 35 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 31 22 20 68 65 69 67 68 74 3d 22 32 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 31 20 32 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 36 2e 39 36 33 37 20 37 2e 37 39 34 34 39 43 31 36 2e 39 32 34 32 20 37 2e 37 30 34 30 34 20 31 36 2e 38 36 38 39 20 37 2e 36 32 31 33 36 20 31 36 2e 38 30 30 34 20 37 2e 35 35 30 33 32 4c 31 31 2e 38 30 30 34 20 32 2e 35 35 30 33 32 43 31 31 2e 37 32 39 34 20 32 2e 34 38 31 38 20 31 31 2e 36 34 36 37 20 32 2e 34 32 36 35 20 31 31 2e 35 35 36 32 20 32 2e 33 38 36 39 39 43 31 31 2e 35 33 31 32 20 32 2e 33 37 35 33 Data Ascii: 475<svg width="21" height="21" viewBox="0 0 21 21" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M16.9637 7.79449C16.9242 7.70404 16.8689 7.62136 16.8004 7.55032L11.8004 2.55032C11.7294 2.4818 11.6467 2.4265 11.5562 2.38699C11.5312 2.3753
2024-03-29 13:44:58 UTC	236	IN	Data Raw: 48 35 2e 33 37 37 39 31 5a 22 0a 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 32 36 33 37 34 43 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 37 2e 30 34 34 35 36 20 31 30 2e 36 33 39 35 48 31 33 2e 37 31 31 32 56 31 32 2e 33 30 36 32 48 37 2e 30 34 34 35 36 56 31 30 2e 36 33 39 35 5a 4d 37 2e 30 34 34 35 36 20 31 33 2e 39 37 32 38 48 31 33 2e 37 31 31 32 56 31 35 2e 36 33 39 35 48 37 2e 30 34 34 35 36 56 31 33 2e 39 37 32 38 5a 4d 37 2e 30 34 34 35 36 20 37 2e 33 30 36 31 35 48 38 2e 37 31 31 32 32 56 38 2e 39 37 32 38 32 48 37 2e 30 34 34 35 36 56 37 2e 33 30 36 31 35 5a 22 0a 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 32 36 33 37 34 43 22 2f 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: H5.37791Z" fill="#26374C"/> <path d="M7.04456 10.6395H13.7112V12.3062H7.04456V10.6395ZM7.04456 13.9728H13.7112V15.6395H7.04456V13.9728ZM7.04456 7.30615H8.71122V8.97282H7.04456V7.30615Z" fill="#26374C"/></svg>
2024-03-29 13:44:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	49759	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:57 UTC	565	OUT	GET /static/resources/media/logo-guidelines.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:58 UTC	460	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:58 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-370" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: HIT Age: 3516 X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c329e6a81f7-IAD
2024-03-29 13:44:58 UTC	887	IN	Data Raw: 33 37 30 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 30 22 20 68 65 69 67 68 74 3d 22 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 30 20 32 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 2e 35 34 34 36 32 20 31 35 2e 36 33 39 38 43 32 2e 35 34 34 36 32 20 31 36 2e 35 35 39 20 33 2e 32 39 32 31 32 20 31 37 2e 33 30 36 35 20 34 2e 32 31 31 32 38 20 31 37 2e 33 30 36 35 48 35 2e 38 37 37 39 35 56 31 35 2e 36 33 39 38 48 34 2e 32 31 31 32 38 56 31 33 2e 39 37 33 31 48 32 2e 35 34 34 36 32 56 31 35 2e 36 33 39 38 5a 4d 31 35 2e 38 37 37 39 20 35 2e 36 33 39 38 31 43 31 35 2e 38 37 37 39 20 34 2e 37 32 Data Ascii: 370<svg width="20" height="20" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M2.54462 15.6398C2.54462 16.559 3.29212 17.3065 4.21128 17.3065H5.87795V15.6398H4.21128V13.9731H2.54462V15.6398ZM15.8779 5.63981C15.8779 4.72
2024-03-29 13:44:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	49762	104.22.58.91	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:57 UTC	391	OUT	GET /client_data/9022a6a83360995949fccfed/CnaQzp8F.json HTTP/1.1 Host: cdn-cookieyes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:58 UTC	472	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:58 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 27 Mar 2024 14:20:02 GMT etag: W/"5000-614a51a401e33" access-control-allow-origin: * access-control-allow-methods: GET, OPTIONS Cache-Control: max-age=0, must-revalidate, s-maxage=604800, proxy-revalidate CF-Cache-Status: HIT Age: 23406 Server: cloudflare CF-RAY: 86c04c332c4d05f3-IAD
2024-03-29 13:44:58 UTC	897	IN	Data Raw: 35 30 30 30 0d 0a 5b 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 4e 41 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 55 53 27 20 41 4e 44 20 72 65 67 69 6f 6e 43 6f 64 65 20 49 53 20 27 47 41 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 4e 41 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 55 53 27 20 41 4e 44 20 72 65 67 69 6f 6e 43 6f 64 65 20 49 53 20 27 43 41 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 Data Ascii: 5000[{"targetBanner":1192903,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode IS 'GA'"},{"targetBanner":1192903,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode IS 'CA'"},{"targetBanner":1192903,"condition":"r
2024-03-29 13:44:58 UTC	1369	IN	Data Raw: 20 27 4e 41 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 55 53 27 20 41 4e 44 20 72 65 67 69 6f 6e 43 6f 64 65 20 49 53 20 27 41 52 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 34 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 4e 41 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 55 53 27 20 41 4e 44 20 72 65 67 69 6f 6e 43 6f 64 65 20 49 53 20 27 43 54 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 34 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 4e 41 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 55 53 27 20 41 4e 44 20 72 65 67 69 6f 6e 43 6f 64 65 20 Data Ascii: 'NA' AND countryName IS 'US' AND regionCode IS 'AR'"},{"targetBanner":1192904,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode IS 'CT'"},{"targetBanner":1192904,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode
2024-03-29 13:44:58 UTC	1369	IN	Data Raw: 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 55 53 27 20 41 4e 44 20 72 65 67 69 6f 6e 43 6f 64 65 20 49 53 20 27 4d 44 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 34 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 4e 41 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 55 53 27 20 41 4e 44 20 72 65 67 69 6f 6e 43 6f 64 65 20 49 53 20 27 4d 45 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 34 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 4e 41 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 55 53 27 20 41 4e 44 20 72 65 67 69 6f 6e 43 6f 64 65 20 49 53 20 27 Data Ascii: ' AND countryName IS 'US' AND regionCode IS 'MD'"},{"targetBanner":1192904,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode IS 'ME'"},{"targetBanner":1192904,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode IS '
2024-03-29 13:44:58 UTC	1369	IN	Data Raw: 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 55 53 27 20 41 4e 44 20 72 65 67 69 6f 6e 43 6f 64 65 20 49 53 20 27 4f 48 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 34 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 4e 41 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 55 53 27 20 41 4e 44 20 72 65 67 69 6f 6e 43 6f 64 65 20 49 53 20 27 4f 4b 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 34 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 4e 41 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 55 53 27 20 41 4e 44 20 72 65 67 69 6f 6e 43 6f 64 65 20 49 53 20 27 4f 52 27 22 Data Ascii: D countryName IS 'US' AND regionCode IS 'OH'"},{"targetBanner":1192904,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode IS 'OK'"},{"targetBanner":1192904,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode IS 'OR'"
2024-03-29 13:44:58 UTC	1369	IN	Data Raw: 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 55 53 27 20 41 4e 44 20 72 65 67 69 6f 6e 43 6f 64 65 20 49 53 20 27 57 56 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 34 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 4e 41 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 55 53 27 20 41 4e 44 20 72 65 67 69 6f 6e 43 6f 64 65 20 49 53 20 27 57 59 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 45 55 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 41 54 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 Data Ascii: untryName IS 'US' AND regionCode IS 'WV'"},{"targetBanner":1192904,"condition":"regionName IS 'NA' AND countryName IS 'US' AND regionCode IS 'WY'"},{"targetBanner":1192903,"condition":"regionName IS 'EU' AND countryName IS 'AT'"},{"targetBanner":1192903,"
2024-03-29 13:44:58 UTC	1369	IN	Data Raw: 53 20 27 49 45 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 45 55 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 49 54 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 45 55 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 4c 56 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 45 55 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 4c 49 27 22 7d 2c Data Ascii: S 'IE'"},{"targetBanner":1192903,"condition":"regionName IS 'EU' AND countryName IS 'IT'"},{"targetBanner":1192903,"condition":"regionName IS 'EU' AND countryName IS 'LV'"},{"targetBanner":1192903,"condition":"regionName IS 'EU' AND countryName IS 'LI'"},
2024-03-29 13:44:58 UTC	1369	IN	Data Raw: 49 53 20 27 45 55 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 43 48 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 45 55 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 47 42 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 45 55 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 41 44 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 4e 41 27 20 41 Data Ascii: IS 'EU' AND countryName IS 'CH'"},{"targetBanner":1192903,"condition":"regionName IS 'EU' AND countryName IS 'GB'"},{"targetBanner":1192903,"condition":"regionName IS 'EU' AND countryName IS 'AD'"},{"targetBanner":1192903,"condition":"regionName IS 'NA' A
2024-03-29 13:44:58 UTC	1369	IN	Data Raw: 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 41 46 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 45 47 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 45 55 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 46 4f 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 4f 43 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 50 46 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 Data Ascii: ,"condition":"regionName IS 'AF' AND countryName IS 'EG'"},{"targetBanner":1192903,"condition":"regionName IS 'EU' AND countryName IS 'FO'"},{"targetBanner":1192903,"condition":"regionName IS 'OC' AND countryName IS 'PF'"},{"targetBanner":1192903,"conditi
2024-03-29 13:44:58 UTC	1369	IN	Data Raw: 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 41 53 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 4b 5a 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 41 46 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 4b 45 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 45 55 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 52 53 27 22 7d 2c 7b 22 74 61 72 67 65 Data Ascii: },{"targetBanner":1192903,"condition":"regionName IS 'AS' AND countryName IS 'KZ'"},{"targetBanner":1192903,"condition":"regionName IS 'AF' AND countryName IS 'KE'"},{"targetBanner":1192903,"condition":"regionName IS 'EU' AND countryName IS 'RS'"},{"targe
2024-03-29 13:44:58 UTC	1369	IN	Data Raw: 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 4d 45 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 4e 41 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 4d 53 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 41 46 27 20 41 4e 44 20 63 6f 75 6e 74 72 79 4e 61 6d 65 20 49 53 20 27 4d 41 27 22 7d 2c 7b 22 74 61 72 67 65 74 42 61 6e 6e 65 72 22 3a 31 31 39 32 39 30 33 2c 22 63 6f 6e 64 69 74 69 6f 6e 22 3a 22 72 65 67 69 6f 6e 4e 61 6d 65 20 49 53 20 27 41 53 27 20 41 4e 44 20 63 6f 75 6e Data Ascii: AND countryName IS 'ME'"},{"targetBanner":1192903,"condition":"regionName IS 'NA' AND countryName IS 'MS'"},{"targetBanner":1192903,"condition":"regionName IS 'AF' AND countryName IS 'MA'"},{"targetBanner":1192903,"condition":"regionName IS 'AS' AND coun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.16	49761	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:57 UTC	561	OUT	GET /static/resources/media/user-circle.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:58 UTC	460	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:58 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-472" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: HIT Age: 1709 X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c330efa389a-IAD
2024-03-29 13:44:58 UTC	909	IN	Data Raw: 34 37 32 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 32 20 32 43 36 2e 35 37 39 20 32 20 32 20 36 2e 35 37 39 20 32 20 31 32 43 32 20 31 35 2e 31 38 39 20 33 2e 35 39 32 20 31 38 2e 30 37 38 20 36 20 31 39 2e 39 32 34 56 32 30 48 36 2e 31 30 32 43 37 2e 37 37 20 32 31 2e 32 34 35 20 39 2e 38 31 33 20 32 32 20 31 32 20 32 32 43 31 34 2e 31 38 37 20 32 32 20 31 36 2e 32 33 20 32 31 2e 32 34 35 20 31 37 2e 38 39 38 20 32 30 48 31 38 56 31 39 2e 39 32 34 43 32 30 2e 34 Data Ascii: 472<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M12 2C6.579 2 2 6.579 2 12C2 15.189 3.592 18.078 6 19.924V20H6.102C7.77 21.245 9.813 22 12 22C14.187 22 16.23 21.245 17.898 20H18V19.924C20.4
2024-03-29 13:44:58 UTC	236	IN	Data Raw: 3d 22 4d 31 32 20 36 43 39 2e 37 32 20 36 20 38 20 37 2e 37 32 20 38 20 31 30 43 38 20 31 32 2e 32 38 20 39 2e 37 32 20 31 34 20 31 32 20 31 34 43 31 34 2e 32 38 20 31 34 20 31 36 20 31 32 2e 32 38 20 31 36 20 31 30 43 31 36 20 37 2e 37 32 20 31 34 2e 32 38 20 36 20 31 32 20 36 5a 4d 31 32 20 31 32 43 31 30 2e 38 32 32 20 31 32 20 31 30 20 31 31 2e 31 37 38 20 31 30 20 31 30 43 31 30 20 38 2e 38 32 32 20 31 30 2e 38 32 32 20 38 20 31 32 20 38 43 31 33 2e 31 37 38 20 38 20 31 34 20 38 2e 38 32 32 20 31 34 20 31 30 43 31 34 20 31 31 2e 31 37 38 20 31 33 2e 31 37 38 20 31 32 20 31 32 20 31 32 5a 22 0a 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 62 6c 61 63 6b 22 2f 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: ="M12 6C9.72 6 8 7.72 8 10C8 12.28 9.72 14 12 14C14.28 14 16 12.28 16 10C16 7.72 14.28 6 12 6ZM12 12C10.822 12 10 11.178 10 10C10 8.822 10.822 8 12 8C13.178 8 14 8.822 14 10C14 11.178 13.178 12 12 12Z" fill="black"/></svg>
2024-03-29 13:44:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.16	49764	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:58 UTC	771	OUT	GET /static/resources/media/data.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex
2024-03-29 13:44:58 UTC	450	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:58 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-284" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: MISS X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c340c68207c-IAD
2024-03-29 13:44:58 UTC	651	IN	Data Raw: 32 38 34 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 30 20 31 37 56 37 43 32 30 20 34 2e 38 33 32 20 31 36 2e 33 33 37 20 33 20 31 32 20 33 43 37 2e 36 36 33 20 33 20 34 20 34 2e 38 33 32 20 34 20 37 56 31 37 43 34 20 31 39 2e 31 36 38 20 37 2e 36 36 33 20 32 31 20 31 32 20 32 31 43 31 36 2e 33 33 37 20 32 31 20 32 30 20 31 39 2e 31 36 38 20 32 30 20 31 37 5a 4d 31 32 20 35 43 31 35 2e 36 39 31 20 35 20 31 37 2e 39 33 31 20 36 2e 35 30 37 20 31 38 20 36 2e 39 39 34 Data Ascii: 284<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M20 17V7C20 4.832 16.337 3 12 3C7.663 3 4 4.832 4 7V17C4 19.168 7.663 21 12 21C16.337 21 20 19.168 20 17ZM12 5C15.691 5 17.931 6.507 18 6.994
2024-03-29 13:44:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.16	49765	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:58 UTC	778	OUT	GET /static/resources/media/credit-card.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex
2024-03-29 13:44:58 UTC	450	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:58 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-155" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: MISS X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c341e422f18-IAD
2024-03-29 13:44:58 UTC	348	IN	Data Raw: 31 35 35 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 30 20 34 48 34 43 32 2e 38 39 37 20 34 20 32 20 34 2e 38 39 37 20 32 20 36 56 31 38 43 32 20 31 39 2e 31 30 33 20 32 2e 38 39 37 20 32 30 20 34 20 32 30 48 32 30 43 32 31 2e 31 30 33 20 32 30 20 32 32 20 31 39 2e 31 30 33 20 32 32 20 31 38 56 36 43 32 32 20 34 2e 38 39 37 20 32 31 2e 31 30 33 20 34 20 32 30 20 34 5a 4d 32 30 20 36 56 38 48 34 56 36 48 32 30 5a 4d 34 20 31 38 56 31 32 48 32 30 2e 30 30 31 4c 32 30 Data Ascii: 155<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M20 4H4C2.897 4 2 4.897 2 6V18C2 19.103 2.897 20 4 20H20C21.103 20 22 19.103 22 18V6C22 4.897 21.103 4 20 4ZM20 6V8H4V6H20ZM4 18V12H20.001L20
2024-03-29 13:44:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.16	49766	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:58 UTC	775	OUT	GET /static/resources/media/transfer.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex
2024-03-29 13:44:58 UTC	446	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:58 GMT Content-Type: image/svg+xml Content-Length: 200 Connection: close last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: "65fb2453-c8" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c342f48580f-IAD
2024-03-29 13:44:58 UTC	200	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 36 20 31 32 4c 32 30 20 38 4c 31 36 20 34 56 36 2e 39 39 39 48 32 56 38 2e 39 39 39 48 31 36 56 31 32 5a 4d 38 20 31 32 4c 34 20 31 36 4c 38 20 32 30 56 31 37 48 32 32 56 31 35 48 38 56 31 32 5a 22 20 66 69 6c 6c 3d 22 62 6c 61 63 6b 22 2f 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: <svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M16 12L20 8L16 4V6.999H2V8.999H16V12ZM8 12L4 16L8 20V17H22V15H8V12Z" fill="black"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.16	49767	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:58 UTC	770	OUT	GET /static/resources/media/cex.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex
2024-03-29 13:44:58 UTC	457	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:58 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-493" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: REVALIDATED X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c347bf33b24-IAD
2024-03-29 13:44:58 UTC	912	IN	Data Raw: 34 39 33 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 31 22 20 68 65 69 67 68 74 3d 22 32 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 31 20 32 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 0a 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 34 2e 33 36 34 38 33 20 35 2e 30 34 33 33 36 43 32 2e 38 36 36 31 35 20 36 2e 35 33 37 30 37 20 32 2e 30 34 34 36 32 20 38 2e 35 32 33 36 39 20 32 2e 30 34 34 36 32 20 31 30 2e 36 33 39 38 43 32 2e 30 34 34 36 32 20 31 32 2e 37 35 35 38 20 32 2e 38 36 36 31 35 20 31 34 Data Ascii: 493<svg width="21" height="21" viewBox="0 0 21 21" fill="none" xmlns="http://www.w3.org/2000/svg"> <path fill-rule="evenodd" clip-rule="evenodd" d="M4.36483 5.04336C2.86615 6.53707 2.04462 8.52369 2.04462 10.6398C2.04462 12.7558 2.86615 14
2024-03-29 13:44:58 UTC	266	IN	Data Raw: 31 35 2e 39 31 35 38 20 39 2e 36 39 33 37 37 48 39 2e 39 36 30 39 35 43 39 2e 34 33 38 31 36 20 39 2e 36 39 33 37 37 20 39 2e 30 31 34 39 34 20 31 30 2e 31 31 37 20 39 2e 30 31 34 39 34 20 31 30 2e 36 33 39 38 43 39 2e 30 31 34 39 34 20 31 31 2e 31 36 32 36 20 39 2e 34 33 38 31 36 20 31 31 2e 35 38 35 38 20 39 2e 39 36 30 39 35 20 31 31 2e 35 38 35 38 5a 4d 31 37 2e 38 37 37 32 20 31 33 2e 31 37 39 56 31 35 2e 30 37 31 31 48 31 34 2e 35 36 31 32 4c 31 36 2e 34 35 33 32 20 31 33 2e 31 37 39 48 31 37 2e 38 37 37 32 5a 4d 31 37 2e 38 37 37 32 20 38 2e 31 30 30 34 34 48 31 36 2e 34 35 33 32 4c 31 34 2e 35 36 31 32 20 36 2e 32 30 38 34 31 48 31 37 2e 38 37 37 32 56 38 2e 31 30 30 34 34 5a 22 0a 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 43 43 22 2f Data Ascii: 15.9158 9.69377H9.96095C9.43816 9.69377 9.01494 10.117 9.01494 10.6398C9.01494 11.1626 9.43816 11.5858 9.96095 11.5858ZM17.8772 13.179V15.0711H14.5612L16.4532 13.179H17.8772ZM17.8772 8.10044H16.4532L14.5612 6.20841H17.8772V8.10044Z" fill="#0CC"/
2024-03-29 13:44:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.16	49768	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:58 UTC	845	OUT	GET /img/favicon/favicon.ico HTTP/1.1 Host: cex.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex
2024-03-29 13:44:58 UTC	1153	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:58 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 content-security-policy-report-only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://*.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; x-frame-options: SAMEORIGIN etag: W/"15086-1711632670000" Cache-Control: public, max-age=18000 last-modified: Thu, 28 Mar 2024 13:31:10 GMT strict-transport-security: max-age=0; includeSubDomains CF-Cache-Status: EXPIRED X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c348f8e72ec-IAD
2024-03-29 13:44:58 UTC	216	IN	Data Raw: 33 61 65 65 0d 0a 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 01 c1 b6 1b 12 c1 b6 1b 3a c1 b6 1b 6b c1 b6 1b 98 c1 b6 1b b9 c1 b6 1b cf c1 b6 1b da c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd Data Ascii: 3aee00 %6 % h6(0` $:k
2024-03-29 13:44:58 UTC	1369	IN	Data Raw: c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd c1 b6 1b dd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 0a c1 b6 1b 3d c1 b6 1b 88 c1 b6 1b c7 c1 b6 1b ec c1 b6 1b fc c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b Data Ascii: =
2024-03-29 13:44:58 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 20 c1 b6 1b c1 c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b f6 c1 b6 1b a4 c1 b6 1b 32 c1 b6 1b 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 2
2024-03-29 13:44:58 UTC	1369	IN	Data Raw: 1b 45 c1 b6 1b de c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff 00 00 00 00 c1 b6 1b 2c c1 b6 1b e6 c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ee c1 b6 1b 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 36 c1 b6 1b da c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b f4 c1 b6 1b 76 c1 b6 1b 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 45 c1 b6 1b de c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff 00 00 00 00 c1 b6 1b 6f c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b a6 c1 b6 1b 06 00 Data Ascii: E,@6vEo
2024-03-29 13:44:58 UTC	1369	IN	Data Raw: 00 c1 b6 1b a5 c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ef c1 b6 1b 33 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 27 c1 b6 1b e7 c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ac c1 b6 1b 04 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 45 c1 b6 1b eb c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b f5 c1 b6 1b 76 c1 b6 1b 06 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b b0 c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b e9 c1 b6 1b 2a 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 33 c1 b6 1b ef c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 Data Ascii: 3'Ev*3
2024-03-29 13:44:58 UTC	1369	IN	Data Raw: c1 b6 1b d1 c1 b6 1b 17 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 1d c1 b6 1b d5 c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b c1 c1 b6 1b 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 07 c1 b6 1b b0 c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b f7 c1 b6 1b 4e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 74 c1 b6 1b fd c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b d3 c1 b6 1b 5c c1 b6 1b Data Ascii: *Nt\
2024-03-29 13:44:58 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 02 c1 b6 1b 2a c1 b6 1b 7a c1 b6 1b c0 c1 b6 1b e6 c1 b6 1b f7 c1 b6 1b fc c1 b6 1b fe c1 b6 1b fe c1 b6 1b fe c1 b6 1b fe c1 b6 1b fe c1 b6 1b fe c1 b6 1b fe c1 b6 1b f4 c1 b6 1b 76 c1 b6 1b 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 44 c1 b6 1b dd c1 b6 1b ff c1 b6 1b fe c1 b6 1b fe c1 b6 1b fe c1 b6 1b fe c1 b6 1b fe c1 b6 1b fe c1 b6 1b fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 73 c1 b6 1b fb c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b d5 c1 b6 1b 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 0c c1 b6 1b 27 c1 b6 1b 44 c1 b6 1b 55 c1 b6 1b 5a c1 b6 1b 5a c1 b6 1b 5a c1 b6 1b 5a Data Ascii: *zvDsB'DUZZZZ
2024-03-29 13:44:58 UTC	1369	IN	Data Raw: 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 03 c1 b6 1b 3e c1 b6 1b b3 c1 b6 1b f7 c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 Data Ascii: >
2024-03-29 13:44:58 UTC	1369	IN	Data Raw: d7 c1 b6 1b e6 c1 b6 1b e9 c1 b6 1b e9 c1 b6 1b e9 c1 b6 1b e9 c1 b6 1b e9 c1 b6 1b e9 c1 b6 1b e9 c1 b6 1b e9 c1 b6 1b e9 c1 b6 1b e9 c1 b6 1b e9 c1 b6 1b e9 c1 b6 1b e9 c1 b6 1b e9 c1 b6 1b e9 c1 b6 1b e9 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 1b c1 b6 1b 6f c1 b6 1b c4 c1 b6 1b f1 c1 b6 1b fe c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 08 c1 b6 1b 5c c1 b6 1b cf c1 b6 1b fd c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 Data Ascii: o\
2024-03-29 13:44:58 UTC	1369	IN	Data Raw: c1 b6 1b 18 00 00 00 00 c1 b6 1b 01 c1 b6 1b 85 c1 b6 1b ff c1 b6 1b ff c1 b6 1b ff c1 b6 1b f6 c1 b6 1b a0 c1 b6 1b 3f c1 b6 1b 1a c1 b6 1b 13 c1 b6 1b 14 c1 b6 1b 14 c1 b6 1b 14 c1 b6 1b 14 c1 b6 1b 14 c1 b6 1b 14 c1 b6 1b 15 c1 b6 1b 10 c1 b6 1b 01 00 00 00 00 00 00 00 00 c1 b6 1b 02 c1 b6 1b 11 c1 b6 1b 14 c1 b6 1b 14 c1 b6 1b 6f c1 b6 1b fc c1 b6 1b ff c1 b6 1b ff c1 b6 1b 8d 00 00 00 00 00 00 00 00 c1 b6 1b 28 c1 b6 1b e0 c1 b6 1b ff c1 b6 1b ff c1 b6 1b f8 c1 b6 1b 78 c1 b6 1b 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 b6 1b 9e c1 b6 1b ff c1 b6 1b ff c1 b6 1b fc c1 b6 1b Data Ascii: ?o(x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.16	49769	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:58 UTC	772	OUT	GET /static/resources/media/phone.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex
2024-03-29 13:44:58 UTC	457	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:58 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-6d5" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: REVALIDATED X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c34dde89c4f-IAD
2024-03-29 13:44:58 UTC	912	IN	Data Raw: 36 64 35 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 37 2e 37 30 37 33 20 31 32 2e 32 39 33 32 43 31 37 2e 36 31 34 35 20 31 32 2e 32 30 30 33 20 31 37 2e 35 30 34 33 20 31 32 2e 31 32 36 35 20 31 37 2e 33 38 33 20 31 32 2e 30 37 36 32 43 31 37 2e 32 36 31 37 20 31 32 2e 30 32 35 39 20 31 37 2e 31 33 31 37 20 31 32 20 31 37 2e 30 30 30 33 20 31 32 43 31 36 2e 38 36 39 20 31 32 20 31 36 2e 37 33 39 20 31 32 2e 30 32 35 39 20 31 36 2e 36 31 37 36 20 31 32 2e 30 37 36 Data Ascii: 6d5<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M17.7073 12.2932C17.6145 12.2003 17.5043 12.1265 17.383 12.0762C17.2617 12.0259 17.1317 12 17.0003 12C16.869 12 16.739 12.0259 16.6176 12.076
2024-03-29 13:44:58 UTC	844	IN	Data Raw: 2e 31 39 31 33 20 32 30 2e 36 30 36 32 20 31 36 2e 31 33 37 33 20 32 30 2e 39 38 32 32 20 31 37 2e 35 36 32 33 20 32 31 2e 30 30 36 32 48 31 37 2e 35 39 30 33 43 31 38 2e 31 31 38 33 20 32 31 2e 30 30 36 32 20 31 38 2e 36 31 37 33 20 32 30 2e 37 39 38 32 20 31 38 2e 39 39 35 33 20 32 30 2e 34 32 30 32 4c 32 31 2e 37 30 37 33 20 31 37 2e 37 30 38 32 43 32 31 2e 38 30 30 33 20 31 37 2e 36 31 35 34 20 32 31 2e 38 37 34 20 31 37 2e 35 30 35 32 20 32 31 2e 39 32 34 33 20 31 37 2e 33 38 33 39 43 32 31 2e 39 37 34 36 20 31 37 2e 32 36 32 36 20 32 32 2e 30 30 30 35 20 31 37 2e 31 33 32 35 20 32 32 2e 30 30 30 35 20 31 37 2e 30 30 31 32 43 32 32 2e 30 30 30 35 20 31 36 2e 38 36 39 39 20 32 31 2e 39 37 34 36 20 31 36 2e 37 33 39 38 20 32 31 2e 39 32 34 33 20 31 36 Data Ascii: .1913 20.6062 16.1373 20.9822 17.5623 21.0062H17.5903C18.1183 21.0062 18.6173 20.7982 18.9953 20.4202L21.7073 17.7082C21.8003 17.6154 21.874 17.5052 21.9243 17.3839C21.9746 17.2626 22.0005 17.1325 22.0005 17.0012C22.0005 16.8699 21.9746 16.7398 21.9243 16
2024-03-29 13:44:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.16	49770	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:58 UTC	557	OUT	GET /static/resources/media/twitter.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:58 UTC	459	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:58 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-451" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: HIT Age: 589 X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c350b279c6a-IAD
2024-03-29 13:44:58 UTC	910	IN	Data Raw: 34 35 31 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 33 22 20 68 65 69 67 68 74 3d 22 32 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 33 20 32 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 33 33 20 33 2e 30 37 38 43 33 31 2e 37 38 36 32 20 33 2e 35 39 39 38 31 20 33 30 2e 34 38 30 35 20 33 2e 39 35 32 37 34 20 32 39 2e 31 31 31 32 20 34 2e 31 31 30 33 36 43 33 30 2e 35 30 39 33 20 33 2e 32 39 38 32 38 20 33 31 2e 35 38 32 32 20 32 2e 30 31 33 33 33 20 33 32 2e 30 38 38 36 20 30 2e 34 37 39 37 31 34 43 33 30 2e 37 38 30 34 20 31 2e 32 33 32 30 38 20 32 39 2e 33 33 30 38 20 31 2e 37 37 37 38 38 20 32 37 Data Ascii: 451<svg width="33" height="26" viewBox="0 0 33 26" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M33 3.078C31.7862 3.59981 30.4805 3.95274 29.1112 4.11036C30.5093 3.29828 31.5822 2.01333 32.0886 0.479714C30.7804 1.23208 29.3308 1.77788 27
2024-03-29 13:44:58 UTC	202	IN	Data Raw: 39 39 34 36 33 20 32 34 2e 39 31 33 38 20 36 2e 35 35 34 32 35 20 32 36 20 31 30 2e 33 37 37 34 20 32 36 43 32 32 2e 38 33 30 36 20 32 36 20 32 39 2e 36 34 30 38 20 31 35 2e 39 39 38 35 20 32 39 2e 36 34 30 38 20 37 2e 33 32 33 39 36 43 32 39 2e 36 34 30 38 20 37 2e 30 33 39 35 36 20 32 39 2e 36 33 34 33 20 36 2e 37 35 36 31 33 20 32 39 2e 36 32 31 31 20 36 2e 34 37 35 31 36 43 33 30 2e 39 34 35 20 35 2e 35 35 20 33 32 2e 30 39 32 37 20 34 2e 33 39 34 32 38 20 33 33 20 33 2e 30 37 38 5a 22 0a 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 43 38 37 46 32 22 2f 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: 99463 24.9138 6.55425 26 10.3774 26C22.8306 26 29.6408 15.9985 29.6408 7.32396C29.6408 7.03956 29.6343 6.75613 29.6211 6.47516C30.945 5.55 32.0927 4.39428 33 3.078Z" fill="#0C87F2"/></svg>
2024-03-29 13:44:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.16	49771	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:58 UTC	558	OUT	GET /static/resources/media/telegram.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:58 UTC	460	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:58 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-306" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: HIT Age: 5099 X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c35191e81eb-IAD
2024-03-29 13:44:58 UTC	781	IN	Data Raw: 33 30 36 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 34 22 20 68 65 69 67 68 74 3d 22 33 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 34 20 33 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 2e 36 30 30 35 34 31 20 31 34 2e 33 38 34 39 4c 38 2e 34 33 34 38 33 20 31 37 2e 33 34 38 31 4c 31 31 2e 34 36 37 32 20 32 37 2e 32 33 31 43 31 31 2e 36 36 31 32 20 32 37 2e 38 36 34 20 31 32 2e 34 32 35 20 32 38 2e 30 39 37 39 20 31 32 2e 39 33 31 39 20 32 37 2e 36 37 37 39 4c 31 37 2e 32 39 38 39 20 32 34 2e 30 37 30 31 43 31 37 2e 37 35 36 36 20 32 33 2e 36 39 32 31 20 31 38 2e 34 30 38 36 20 32 33 2e 36 37 33 Data Ascii: 306<svg width="34" height="30" viewBox="0 0 34 30" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M0.600541 14.3849L8.43483 17.3481L11.4672 27.231C11.6612 27.864 12.425 28.0979 12.9319 27.6779L17.2989 24.0701C17.7566 23.6921 18.4086 23.673
2024-03-29 13:44:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.16	49772	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:58 UTC	558	OUT	GET /static/resources/media/facebook.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:58 UTC	460	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:58 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-306" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: HIT Age: 2173 X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c352fc5393d-IAD
2024-03-29 13:44:58 UTC	781	IN	Data Raw: 33 30 36 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 32 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 32 39 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 33 39 37 35 20 30 2e 30 30 36 30 33 33 39 34 4c 31 31 2e 35 35 39 38 20 30 43 37 2e 32 34 38 33 32 20 30 20 34 2e 34 36 32 30 35 20 32 2e 38 30 31 32 35 20 34 2e 34 36 32 30 35 20 37 2e 31 33 36 39 34 56 31 30 2e 34 32 37 35 48 30 2e 36 30 33 34 33 37 43 30 2e 32 37 30 30 30 37 20 31 30 2e 34 32 37 35 20 30 20 31 30 2e 36 39 32 34 20 30 20 31 31 2e 30 31 39 32 56 31 35 2e 37 38 36 39 43 30 20 31 36 2e 31 31 Data Ascii: 306<svg width="16" height="29" viewBox="0 0 16 29" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M15.3975 0.00603394L11.5598 0C7.24832 0 4.46205 2.80125 4.46205 7.13694V10.4275H0.603437C0.270007 10.4275 0 10.6924 0 11.0192V15.7869C0 16.11
2024-03-29 13:44:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.16	49773	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:58 UTC	558	OUT	GET /static/resources/media/linkedIn.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:58 UTC	460	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:58 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-54c" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: HIT Age: 5099 X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c35889082a8-IAD
2024-03-29 13:44:58 UTC	909	IN	Data Raw: 35 34 63 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 37 22 20 68 65 69 67 68 74 3d 22 32 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 37 20 32 37 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 0a 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 2e 32 39 32 33 39 20 31 2e 37 32 34 39 31 43 31 2e 38 38 36 35 37 20 31 2e 31 36 35 36 35 20 32 2e 36 36 32 32 20 30 2e 38 38 35 37 34 32 20 33 2e 36 31 39 34 35 20 30 2e 38 38 35 37 34 32 43 34 2e 35 37 36 37 35 20 30 2e 38 38 35 37 34 32 20 35 2e 33 34 34 30 36 20 Data Ascii: 54c<svg width="27" height="27" viewBox="0 0 27 27" fill="none" xmlns="http://www.w3.org/2000/svg"> <path fill-rule="evenodd" clip-rule="evenodd" d="M1.29239 1.72491C1.88657 1.16565 2.6622 0.885742 3.61945 0.885742C4.57675 0.885742 5.34406
2024-03-29 13:44:58 UTC	454	IN	Data Raw: 38 20 31 37 2e 39 35 33 36 20 39 2e 36 31 31 32 37 20 32 31 2e 36 38 34 39 20 39 2e 35 38 38 31 33 20 32 36 2e 32 38 37 32 48 31 35 2e 32 38 30 34 56 31 36 2e 37 31 39 31 43 31 35 2e 32 38 30 34 20 31 36 2e 31 33 31 20 31 35 2e 33 34 33 35 20 31 35 2e 36 36 33 39 20 31 35 2e 34 37 30 36 20 31 35 2e 33 31 37 36 43 31 35 2e 37 31 33 20 31 34 2e 37 32 39 31 20 31 36 2e 30 37 38 39 20 31 34 2e 32 33 36 33 20 31 36 2e 35 36 39 34 20 31 33 2e 38 33 38 36 43 31 37 2e 30 35 39 38 20 31 33 2e 34 34 30 32 20 31 37 2e 36 36 38 31 20 31 33 2e 32 34 31 33 20 31 38 2e 33 39 35 20 31 33 2e 32 34 31 33 43 31 39 2e 33 38 36 36 20 31 33 2e 32 34 31 33 20 32 30 2e 31 31 36 35 20 31 33 2e 35 38 34 34 20 32 30 2e 35 38 33 37 20 31 34 2e 32 37 30 38 43 32 31 2e 30 35 30 37 20 Data Ascii: 8 17.9536 9.61127 21.6849 9.58813 26.2872H15.2804V16.7191C15.2804 16.131 15.3435 15.6639 15.4706 15.3176C15.713 14.7291 16.0789 14.2363 16.5694 13.8386C17.0598 13.4402 17.6681 13.2413 18.395 13.2413C19.3866 13.2413 20.1165 13.5844 20.5837 14.2708C21.0507
2024-03-29 13:44:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.16	49763	54.229.44.173	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:58 UTC	542	OUT	GET /api/v1/ip HTTP/1.1 Host: directory.cookieyes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:58 UTC	233	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:58 GMT Content-Type: text/html; charset=utf-8 Content-Length: 118 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * ETag: W/"76-sj/ttPj2gPNTa+x+nnpe8eNUiN4"
2024-03-29 13:44:58 UTC	118	IN	Data Raw: 7b 22 69 70 22 3a 22 31 30 32 2e 31 36 35 2e 34 38 2e 34 33 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 72 65 67 69 6f 6e 5f 63 6f 64 65 22 3a 22 44 43 22 2c 22 69 6e 5f 65 75 22 3a 66 61 6c 73 65 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"ip":"102.165.48.43","country":"US","country_name":"United States","region_code":"DC","in_eu":false,"continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.16	49774	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:58 UTC	552	OUT	GET /static/resources/media/ua.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:58 UTC	460	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:58 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-298" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: HIT Age: 2880 X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c35ee162027-IAD
2024-03-29 13:44:58 UTC	671	IN	Data Raw: 32 39 38 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 2e 30 36 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 29 22 3e 0a 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 32 2e 30 36 36 34 20 32 34 43 31 38 2e 36 39 33 38 20 32 34 20 32 34 2e 30 36 36 34 20 31 38 2e 36 32 37 34 20 32 34 2e 30 36 36 34 20 31 32 43 32 34 2e 30 36 36 34 20 35 2e 33 37 32 35 38 20 31 38 2e 36 39 33 38 20 30 20 31 32 2e 30 36 36 34 20 30 43 35 2e 34 33 38 39 39 20 30 20 30 2e 30 36 36 34 Data Ascii: 298<svg width="48" height="48" viewBox="0.06 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <g clip-path="url(#clip0)"> <path d="M12.0664 24C18.6938 24 24.0664 18.6274 24.0664 12C24.0664 5.37258 18.6938 0 12.0664 0C5.43899 0 0.0664
2024-03-29 13:44:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.16	49775	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:58 UTC	773	OUT	GET /static/resources/media/groups.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex
2024-03-29 13:44:59 UTC	450	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:58 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-644" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: MISS X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c36c83120a0-IAD
2024-03-29 13:44:59 UTC	919	IN	Data Raw: 36 34 34 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 36 2e 36 30 30 32 20 31 32 2e 30 31 35 37 43 31 36 2e 34 30 33 38 20 31 32 2e 33 31 34 38 20 31 36 2e 31 37 39 20 31 32 2e 35 39 33 35 20 31 35 2e 39 32 39 37 20 31 32 2e 38 34 38 43 31 36 2e 36 32 31 37 20 31 33 2e 31 30 37 34 20 31 37 2e 32 34 37 35 20 31 33 2e 35 30 32 31 20 31 37 2e 37 37 34 39 20 31 34 Data Ascii: 644<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M16.6002 12.0157C16.4038 12.3148 16.179 12.5935 15.9297 12.848C16.6217 13.1074 17.2475 13.5021 17.7749 14
2024-03-29 13:44:59 UTC	692	IN	Data Raw: 36 43 36 2e 37 37 37 37 33 20 36 20 37 2e 30 33 37 38 33 20 36 2e 30 37 35 34 38 20 37 2e 32 36 30 39 31 20 36 2e 32 30 37 30 35 43 37 2e 36 30 35 39 34 20 35 2e 36 32 32 38 36 20 38 2e 30 35 35 39 31 20 35 2e 31 30 38 30 31 20 38 2e 35 38 34 38 39 20 34 2e 36 38 38 34 36 5a 4d 37 2e 33 39 39 37 37 20 31 32 2e 30 31 35 37 43 37 2e 32 36 37 38 39 20 31 32 2e 30 30 35 33 20 37 2e 31 33 34 35 37 20 31 32 20 37 20 31 32 48 36 43 33 2e 32 33 38 35 38 20 31 32 20 31 20 31 34 2e 32 33 38 36 20 31 20 31 37 56 31 38 48 33 56 31 37 43 33 20 31 35 2e 33 34 33 31 20 34 2e 33 34 33 31 35 20 31 34 20 36 20 31 34 48 36 2e 32 32 35 30 36 43 36 2e 37 35 32 34 36 20 31 33 2e 35 30 32 31 20 37 2e 33 37 38 32 39 20 31 33 2e 31 30 37 34 20 38 2e 30 37 30 33 20 31 32 2e 38 34 Data Ascii: 6C6.77773 6 7.03783 6.07548 7.26091 6.20705C7.60594 5.62286 8.05591 5.10801 8.58489 4.68846ZM7.39977 12.0157C7.26789 12.0053 7.13457 12 7 12H6C3.23858 12 1 14.2386 1 17V18H3V17C3 15.3431 4.34315 14 6 14H6.22506C6.75246 13.5021 7.37829 13.1074 8.0703 12.84
2024-03-29 13:44:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.16	49777	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:58 UTC	554	OUT	GET /static/resources/media/visa.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:58 UTC	459	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:58 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-4cd" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: HIT Age: 589 X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c374e5381c3-IAD
2024-03-29 13:44:58 UTC	910	IN	Data Raw: 34 63 64 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 37 33 22 20 68 65 69 67 68 74 3d 22 34 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 33 20 34 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 37 32 2e 36 20 34 33 2e 31 43 37 32 2e 36 20 34 34 2e 36 20 37 31 2e 34 20 34 35 2e 38 20 36 39 2e 39 20 34 35 2e 38 48 32 2e 37 43 31 2e 32 20 34 35 2e 38 20 30 20 34 34 2e 36 20 30 20 34 33 2e 31 56 32 2e 37 43 30 20 31 2e 32 20 31 2e 32 20 30 20 32 2e 37 20 30 48 36 39 2e 39 43 37 31 2e 34 20 30 20 37 32 2e 36 20 31 2e 32 20 37 32 2e 36 20 32 2e 37 56 34 33 2e 31 5a 22 0a 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c Data Ascii: 4cd<svg width="73" height="46" viewBox="0 0 73 46" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M72.6 43.1C72.6 44.6 71.4 45.8 69.9 45.8H2.7C1.2 45.8 0 44.6 0 43.1V2.7C0 1.2 1.2 0 2.7 0H69.9C71.4 0 72.6 1.2 72.6 2.7V43.1Z" fill
2024-03-29 13:44:58 UTC	326	IN	Data Raw: 35 39 39 36 20 33 32 2e 39 43 34 34 2e 37 39 39 36 20 33 32 2e 39 20 34 38 2e 31 39 39 36 20 33 30 2e 33 20 34 38 2e 32 39 39 36 20 32 36 2e 33 5a 4d 36 31 2e 32 39 39 36 20 33 32 2e 36 48 36 35 2e 38 39 39 36 4c 36 31 2e 38 39 39 36 20 31 33 2e 33 48 35 37 2e 35 39 39 36 43 35 36 2e 35 39 39 36 20 31 33 2e 33 20 35 35 2e 37 39 39 36 20 31 33 2e 39 20 35 35 2e 34 39 39 36 20 31 34 2e 37 4c 34 37 2e 39 39 39 36 20 33 32 2e 36 48 35 33 2e 31 39 39 36 4c 35 34 2e 31 39 39 36 20 32 39 2e 37 48 36 30 2e 35 39 39 36 4c 36 31 2e 32 39 39 36 20 33 32 2e 36 5a 4d 35 35 2e 36 39 39 36 20 32 35 2e 38 4c 35 38 2e 32 39 39 36 20 31 38 2e 36 4c 35 39 2e 37 39 39 36 20 32 35 2e 38 48 35 35 2e 36 39 39 36 5a 4d 33 34 2e 36 39 39 36 20 31 33 2e 33 4c 33 30 2e 35 39 39 36 Data Ascii: 5996 32.9C44.7996 32.9 48.1996 30.3 48.2996 26.3ZM61.2996 32.6H65.8996L61.8996 13.3H57.5996C56.5996 13.3 55.7996 13.9 55.4996 14.7L47.9996 32.6H53.1996L54.1996 29.7H60.5996L61.2996 32.6ZM55.6996 25.8L58.2996 18.6L59.7996 25.8H55.6996ZM34.6996 13.3L30.5996
2024-03-29 13:44:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.16	49752	108.138.64.17	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:58 UTC	523	OUT	GET /widget/q22gd2x3 HTTP/1.1 Host: widget.intercom.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:58 UTC	728	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 2705 Connection: close Date: Fri, 29 Mar 2024 13:44:59 GMT Last-Modified: Thu, 28 Mar 2024 12:04:09 GMT ETag: "752a99d045d738f9d27c3373d4d0e125" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300, s-maxage=300, public Content-Encoding: gzip x-amz-version-id: A2IrNjn1rOnDCm4_F1OhjCERhm2EQpAO Accept-Ranges: bytes Server: AmazonS3 X-Cache: Error from cloudfront Via: 1.1 3f95374273631adbfd8e0d0a9f6d7b64.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: uTSVi7QHMjWMcQt9G7HC47e5_8wsXX4w_6vP27VzhZsnE_GCdK90NA== Cross-Origin-Resource-Policy: cross-origin Vary: Origin
2024-03-29 13:44:58 UTC	2705	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 59 0b 73 d3 3a 16 fe 2b 8e 77 27 b5 07 c7 49 4a 4b a9 8b cb 96 52 2e 9d a5 c0 10 e6 ee dd 69 b3 19 c5 56 12 81 63 f9 ca 4a d3 dc 24 ff 7d 3f c9 8f d8 49 5a 2e 33 30 d0 da 47 e7 a5 a3 f3 f8 64 1a a3 59 1c 48 c6 63 cb 5e de 13 61 50 7f 79 f2 a2 7b d4 f5 4a 3a b5 97 d4 a5 0f 09 17 32 f5 97 29 9f 89 80 0e a6 24 f1 cc 09 0b 43 1a b7 32 52 0b 24 d3 21 09 1b 0c 49 4a b1 28 65 92 7a ed 36 28 2d 46 a6 2e 8b 25 15 01 c7 03 37 9d 64 36 8c 58 30 48 88 9c 6c 38 bf a5 25 53 10 c6 2e 7e b5 4d 27 9d 50 2a d3 41 22 f8 c3 62 8b bf 60 6e 65 3c 5a a0 ca 0e 61 1a 4b b1 d8 2b 3c 9f cf 4b 6b 2d 41 d5 ee 58 3c ce 74 68 29 a8 0f e9 83 3b 91 d3 c8 74 58 9c 4a 12 45 83 29 0f e9 ce fe 92 cd de f0 af b4 1a a6 f1 86 6b f4 bc 73 1c d2 17 a7 01 09 5e 1c Data Ascii: Ys:+w'IJKR.iVcJ$}?IZ.30GdYHc^aPy{J:2)$C2R$!IJ(ez6(-F.%7d6X0Hl8%S.~M'P*A"b`ne<ZaK+<Kk-AX<th);tXJE)ks^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.16	49778	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:58 UTC	560	OUT	GET /static/resources/media/mastercard.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:58 UTC	460	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:58 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-6b8" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: HIT Age: 2173 X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c37fc283950-IAD
2024-03-29 13:44:58 UTC	909	IN	Data Raw: 36 62 38 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 36 22 20 68 65 69 67 68 74 3d 22 32 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 36 20 32 39 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 39 2e 35 39 36 20 33 2e 37 34 39 35 31 48 31 36 2e 34 30 36 32 56 32 35 2e 32 34 37 48 32 39 2e 35 39 36 56 33 2e 37 34 39 35 31 5a 22 20 66 69 6c 6c 3d 22 23 46 46 35 46 30 30 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 37 2e 37 36 36 33 20 31 34 2e 34 39 39 38 43 31 37 2e 37 36 34 37 20 31 32 2e 34 32 39 38 20 31 38 2e 32 33 34 39 20 31 30 2e 33 38 36 35 20 31 39 2e 31 34 31 34 20 38 2e 35 32 34 36 Data Ascii: 6b8<svg width="46" height="29" viewBox="0 0 46 29" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M29.596 3.74951H16.4062V25.247H29.596V3.74951Z" fill="#FF5F00"/> <path d="M17.7663 14.4998C17.7647 12.4298 18.2349 10.3865 19.1414 8.5246
2024-03-29 13:44:58 UTC	818	IN	Data Raw: 31 20 32 35 2e 36 37 35 35 20 33 37 2e 34 35 31 39 20 32 36 2e 37 39 36 35 43 33 35 2e 31 33 39 36 20 32 37 2e 39 31 37 35 20 33 32 2e 35 35 38 20 32 38 2e 33 36 36 36 20 33 30 2e 30 30 32 20 32 38 2e 30 39 32 37 43 32 37 2e 34 34 36 31 20 32 37 2e 38 31 38 37 20 32 35 2e 30 31 38 39 20 32 36 2e 38 33 32 36 20 32 32 2e 39 39 38 20 32 35 2e 32 34 37 31 43 32 34 2e 36 32 39 32 20 32 33 2e 39 36 37 39 20 32 35 2e 39 34 37 39 20 32 32 2e 33 33 35 38 20 32 36 2e 38 35 34 36 20 32 30 2e 34 37 33 38 43 32 37 2e 37 36 31 34 20 31 38 2e 36 31 31 38 20 32 38 2e 32 33 32 36 20 31 36 2e 35 36 38 36 20 32 38 2e 32 33 32 36 20 31 34 2e 34 39 38 34 43 32 38 2e 32 33 32 36 20 31 32 2e 34 32 38 32 20 32 37 2e 37 36 31 34 20 31 30 2e 33 38 35 20 32 36 2e 38 35 34 36 20 38 Data Ascii: 1 25.6755 37.4519 26.7965C35.1396 27.9175 32.558 28.3666 30.002 28.0927C27.4461 27.8187 25.0189 26.8326 22.998 25.2471C24.6292 23.9679 25.9479 22.3358 26.8546 20.4738C27.7614 18.6118 28.2326 16.5686 28.2326 14.4984C28.2326 12.4282 27.7614 10.385 26.8546 8
2024-03-29 13:44:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.16	49779	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:58 UTC	553	OUT	GET /static/resources/media/pci.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:58 UTC	461	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:58 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-203a" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: HIT Age: 2173 X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c381ef13991-IAD
2024-03-29 13:44:58 UTC	908	IN	Data Raw: 32 30 33 61 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 38 32 22 20 68 65 69 67 68 74 3d 22 32 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 32 20 32 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 35 2e 38 37 39 38 38 20 31 37 2e 37 35 33 37 56 32 36 2e 37 37 31 32 48 30 2e 36 30 36 34 34 35 56 31 2e 31 37 37 34 39 48 31 30 2e 35 39 30 38 43 31 32 2e 35 31 32 37 20 31 2e 31 37 37 34 39 20 31 34 2e 32 30 30 32 20 31 2e 35 32 39 30 35 20 31 35 2e 36 35 33 33 20 32 2e 32 33 32 31 38 43 31 37 2e 31 31 38 32 20 32 2e 39 33 35 33 20 31 38 2e 32 34 33 32 20 33 2e 39 33 37 32 36 20 31 39 2e 30 32 38 33 20 35 2e 32 Data Ascii: 203a<svg width="82" height="28" viewBox="0 0 82 28" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M5.87988 17.7537V26.7712H0.606445V1.17749H10.5908C12.5127 1.17749 14.2002 1.52905 15.6533 2.23218C17.1182 2.9353 18.2432 3.93726 19.0283 5.2
2024-03-29 13:44:58 UTC	1369	IN	Data Raw: 2e 36 38 37 33 20 32 33 2e 35 30 34 39 20 38 2e 35 31 39 32 39 20 32 34 2e 33 37 32 31 20 36 2e 36 34 34 32 39 43 32 35 2e 32 33 39 33 20 34 2e 37 36 39 32 39 20 32 36 2e 34 37 35 36 20 33 2e 33 33 33 37 34 20 32 38 2e 30 38 31 31 20 32 2e 33 33 37 36 35 43 32 39 2e 36 39 38 32 20 31 2e 33 32 39 38 33 20 33 31 2e 35 37 33 32 20 30 2e 38 32 35 39 32 38 20 33 33 2e 37 30 36 31 20 30 2e 38 32 35 39 32 38 43 33 36 2e 36 35 39 32 20 30 2e 38 32 35 39 32 38 20 33 39 2e 30 33 38 31 20 31 2e 36 31 36 39 34 20 34 30 2e 38 34 32 38 20 33 2e 31 39 38 39 37 43 34 32 2e 36 34 37 35 20 34 2e 37 38 31 30 31 20 34 33 2e 36 39 30 34 20 37 2e 30 30 31 37 31 20 34 33 2e 39 37 31 37 20 39 2e 38 36 31 30 38 48 33 38 2e 36 39 38 32 43 33 38 2e 35 36 39 33 20 38 2e 32 30 38 37 Data Ascii: .6873 23.5049 8.51929 24.3721 6.64429C25.2393 4.76929 26.4756 3.33374 28.0811 2.33765C29.6982 1.32983 31.5732 0.825928 33.7061 0.825928C36.6592 0.825928 39.0381 1.61694 40.8428 3.19897C42.6475 4.78101 43.6904 7.00171 43.9717 9.86108H38.6982C38.5693 8.2087
2024-03-29 13:44:58 UTC	1369	IN	Data Raw: 22 4d 37 31 2e 38 32 31 20 31 33 2e 32 38 39 33 43 37 31 2e 38 32 31 20 31 32 2e 39 32 39 36 20 37 31 2e 36 39 34 31 20 31 32 2e 36 35 34 35 20 37 31 2e 34 34 30 32 20 31 32 2e 34 36 34 31 43 37 31 2e 31 38 36 33 20 31 32 2e 32 36 39 35 20 37 30 2e 37 32 39 32 20 31 32 2e 30 36 36 33 20 37 30 2e 30 36 39 31 20 31 31 2e 38 35 34 37 43 36 39 2e 34 30 38 39 20 31 31 2e 36 33 38 39 20 36 38 2e 38 38 36 33 20 31 31 2e 34 32 37 33 20 36 38 2e 35 30 31 32 20 31 31 2e 32 32 43 36 37 2e 34 35 31 37 20 31 30 2e 36 35 32 39 20 36 36 2e 39 32 37 20 39 2e 38 38 39 30 38 20 36 36 2e 39 32 37 20 38 2e 39 32 38 34 37 43 36 36 2e 39 32 37 20 38 2e 34 32 39 31 32 20 36 37 2e 30 36 36 36 20 37 2e 39 38 34 37 38 20 36 37 2e 33 34 35 39 20 37 2e 35 39 35 34 36 43 36 37 2e 36 Data Ascii: "M71.821 13.2893C71.821 12.9296 71.6941 12.6545 71.4402 12.4641C71.1863 12.2695 70.7292 12.0663 70.0691 11.8547C69.4089 11.6389 68.8863 11.4273 68.5012 11.22C67.4517 10.6529 66.927 9.88908 66.927 8.92847C66.927 8.42912 67.0666 7.98478 67.3459 7.59546C67.6
2024-03-29 13:44:58 UTC	1369	IN	Data Raw: 38 34 33 20 31 32 2e 32 36 39 35 20 37 38 2e 37 32 37 33 20 31 32 2e 30 36 36 33 20 37 38 2e 30 36 37 31 20 31 31 2e 38 35 34 37 43 37 37 2e 34 30 37 20 31 31 2e 36 33 38 39 20 37 36 2e 38 38 34 33 20 31 31 2e 34 32 37 33 20 37 36 2e 34 39 39 33 20 31 31 2e 32 32 43 37 35 2e 34 34 39 38 20 31 30 2e 36 35 32 39 20 37 34 2e 39 32 35 20 39 2e 38 38 39 30 38 20 37 34 2e 39 32 35 20 38 2e 39 32 38 34 37 43 37 34 2e 39 32 35 20 38 2e 34 32 39 31 32 20 37 35 2e 30 36 34 37 20 37 2e 39 38 34 37 38 20 37 35 2e 33 34 34 20 37 2e 35 39 35 34 36 43 37 35 2e 36 32 37 35 20 37 2e 32 30 31 39 20 37 36 2e 30 33 31 36 20 36 2e 38 39 35 31 20 37 36 2e 35 35 36 34 20 36 2e 36 37 35 30 35 43 37 37 2e 30 38 35 34 20 36 2e 34 35 35 20 37 37 2e 36 37 37 38 20 36 2e 33 34 34 39 Data Ascii: 843 12.2695 78.7273 12.0663 78.0671 11.8547C77.407 11.6389 76.8843 11.4273 76.4993 11.22C75.4498 10.6529 74.925 9.88908 74.925 8.92847C74.925 8.42912 75.0647 7.98478 75.344 7.59546C75.6275 7.2019 76.0316 6.8951 76.5564 6.67505C77.0854 6.455 77.6778 6.3449
2024-03-29 13:44:58 UTC	1369	IN	Data Raw: 36 36 20 35 38 2e 38 31 30 38 20 32 31 2e 33 31 31 38 43 35 38 2e 36 30 32 34 20 32 31 2e 30 36 35 37 20 35 38 2e 34 39 38 33 20 32 30 2e 37 32 38 34 20 35 38 2e 34 39 38 33 20 32 30 2e 33 56 32 30 2e 31 32 36 32 43 35 38 2e 34 39 38 33 20 31 39 2e 38 35 32 38 20 35 38 2e 35 34 36 35 20 31 39 2e 36 31 31 39 20 35 38 2e 36 34 32 38 20 31 39 2e 34 30 33 36 43 35 38 2e 37 33 39 32 20 31 39 2e 31 39 35 32 20 35 38 2e 38 37 36 35 20 31 39 2e 30 33 35 37 20 35 39 2e 30 35 34 39 20 31 38 2e 39 32 35 43 35 39 2e 32 33 34 36 20 31 38 2e 38 31 33 31 20 35 39 2e 34 34 32 39 20 31 38 2e 37 35 37 31 20 35 39 2e 36 37 39 39 20 31 38 2e 37 35 37 31 43 36 30 2e 30 30 38 20 31 38 2e 37 35 37 31 20 36 30 2e 32 37 32 34 20 31 38 2e 38 34 35 20 36 30 2e 34 37 32 39 20 31 39 Data Ascii: 66 58.8108 21.3118C58.6024 21.0657 58.4983 20.7284 58.4983 20.3V20.1262C58.4983 19.8528 58.5465 19.6119 58.6428 19.4036C58.7392 19.1952 58.8765 19.0357 59.0549 18.925C59.2346 18.8131 59.4429 18.7571 59.6799 18.7571C60.008 18.7571 60.2724 18.845 60.4729 19
2024-03-29 13:44:58 UTC	1369	IN	Data Raw: 36 43 36 32 2e 39 38 33 36 20 31 39 2e 38 35 35 34 20 36 32 2e 39 33 30 32 20 31 39 2e 36 32 38 38 20 36 32 2e 38 32 33 34 20 31 39 2e 34 37 33 39 43 36 32 2e 37 31 36 37 20 31 39 2e 33 31 38 39 20 36 32 2e 35 36 34 33 20 31 39 2e 32 34 31 35 20 36 32 2e 33 36 36 34 20 31 39 2e 32 34 31 35 43 36 32 2e 31 36 39 38 20 31 39 2e 32 34 31 35 20 36 32 2e 30 31 38 31 20 31 39 2e 33 31 38 33 20 36 31 2e 39 31 31 33 20 31 39 2e 34 37 31 39 43 36 31 2e 38 30 34 36 20 31 39 2e 36 32 34 33 20 36 31 2e 37 35 30 35 20 31 39 2e 38 34 38 32 20 36 31 2e 37 34 39 32 20 32 30 2e 31 34 33 38 56 32 30 2e 32 38 32 35 43 36 31 2e 37 34 39 32 20 32 30 2e 35 37 32 38 20 36 31 2e 38 30 32 36 20 32 30 2e 37 39 38 31 20 36 31 2e 39 30 39 34 20 32 30 2e 39 35 38 33 43 36 32 2e 30 31 Data Ascii: 6C62.9836 19.8554 62.9302 19.6288 62.8234 19.4739C62.7167 19.3189 62.5643 19.2415 62.3664 19.2415C62.1698 19.2415 62.0181 19.3183 61.9113 19.4719C61.8046 19.6243 61.7505 19.8482 61.7492 20.1438V20.2825C61.7492 20.5728 61.8026 20.7981 61.9094 20.9583C62.01
2024-03-29 13:44:58 UTC	505	IN	Data Raw: 39 5a 22 20 66 69 6c 6c 3d 22 23 36 36 37 43 39 39 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 37 35 2e 32 36 35 36 20 32 31 2e 30 35 34 48 37 34 2e 32 33 38 33 4c 37 34 2e 30 34 33 20 32 31 2e 36 33 39 39 48 37 33 2e 34 31 39 39 4c 37 34 2e 34 37 38 35 20 31 38 2e 37 39 36 31 48 37 35 2e 30 32 31 35 4c 37 36 2e 30 38 35 39 20 32 31 2e 36 33 39 39 48 37 35 2e 34 36 32 39 4c 37 35 2e 32 36 35 36 20 32 31 2e 30 35 34 5a 4d 37 34 2e 33 39 36 35 20 32 30 2e 35 37 39 33 48 37 35 2e 31 30 37 34 4c 37 34 2e 37 35 20 31 39 2e 35 31 34 39 4c 37 34 2e 33 39 36 35 20 32 30 2e 35 37 39 33 5a 22 0a 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 36 36 37 43 39 39 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 37 38 2e 37 30 34 31 20 32 31 2e 36 33 Data Ascii: 9Z" fill="#667C99"/> <path d="M75.2656 21.054H74.2383L74.043 21.6399H73.4199L74.4785 18.7961H75.0215L76.0859 21.6399H75.4629L75.2656 21.054ZM74.3965 20.5793H75.1074L74.75 19.5149L74.3965 20.5793Z" fill="#667C99"/> <path d="M78.7041 21.63
2024-03-29 13:44:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.16	49782	172.67.20.8	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:58 UTC	589	OUT	GET /client_data/9022a6a83360995949fccfed/audit-table/rCg5unVB.json HTTP/1.1 Host: cdn-cookieyes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:59 UTC	473	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:58 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 27 Mar 2024 14:20:02 GMT etag: W/"43ef-614a51a401e33" access-control-allow-origin: * access-control-allow-methods: GET, OPTIONS Cache-Control: max-age=0, must-revalidate, s-maxage=604800, proxy-revalidate CF-Cache-Status: HIT Age: 149535 Server: cloudflare CF-RAY: 86c04c389ed1874c-IAD
2024-03-29 13:44:59 UTC	896	IN	Data Raw: 34 33 65 66 0d 0a 7b 22 63 6f 6f 6b 69 65 73 22 3a 7b 22 6c 73 2e 73 65 73 73 69 6f 6e 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 6c 73 2e 73 65 73 73 69 6f 6e 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 37 20 64 61 79 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 3c 70 3e 54 68 69 73 20 63 6f 6f 6b 69 65 20 69 73 20 6e 65 65 64 65 64 20 74 6f 20 61 75 74 68 6f 72 69 7a 65 20 75 73 65 72 73 2e 3c 2f 70 3e 22 7d 2c 22 67 74 6d 5f 69 64 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 67 74 6d 5f 69 64 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 31 20 79 65 61 72 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 3c 74 61 62 6c 65 3e 5c 6e 3c 74 62 6f 64 79 3e 5c 6e 3c 74 72 3e 5c 6e 3c 74 64 3e 5c 6e 3c 70 3e 54 72 61 63 6b 73 20 68 6f 77 20 74 6f Data Ascii: 43ef{"cookies":{"ls.session":{"cookie_id":"ls.session","duration":"7 days","description":"<p>This cookie is needed to authorize users.</p>"},"gtm_id":{"cookie_id":"gtm_id","duration":"1 year","description":"<table>\n<tbody>\n<tr>\n<td>\n<p>Tracks how to
2024-03-29 13:44:59 UTC	1369	IN	Data Raw: 22 69 6e 74 65 72 63 6f 6d 2d 64 65 76 69 63 65 2d 69 64 2d 2a 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 38 20 6d 6f 6e 74 68 73 20 32 36 20 64 61 79 73 20 31 20 68 6f 75 72 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 49 6e 74 65 72 63 6f 6d 20 73 65 74 73 20 74 68 69 73 20 63 6f 6f 6b 69 65 20 74 68 61 74 20 61 6c 6c 6f 77 73 20 76 69 73 69 74 6f 72 73 20 74 6f 20 73 65 65 20 61 6e 79 20 63 6f 6e 76 65 72 73 61 74 69 6f 6e 73 20 74 68 65 79 27 76 65 20 68 61 64 20 6f 6e 20 49 6e 74 65 72 63 6f 6d 20 77 65 62 73 69 74 65 73 2e 22 7d 2c 22 63 65 78 2d 73 65 73 73 69 6f 6e 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 63 65 78 2d 73 65 73 73 69 6f 6e 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 73 65 73 73 69 6f 6e 22 2c 22 64 65 73 63 72 69 70 74 69 Data Ascii: "intercom-device-id-*","duration":"8 months 26 days 1 hour","description":"Intercom sets this cookie that allows visitors to see any conversations they've had on Intercom websites."},"cex-session":{"cookie_id":"cex-session","duration":"session","descripti
2024-03-29 13:44:59 UTC	1369	IN	Data Raw: 74 66 6f 72 6d 20 61 66 74 65 72 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 69 73 20 63 6f 6d 70 6c 65 74 65 64 2e 3c 2f 70 3e 22 7d 2c 22 6c 6f 67 69 6e 5f 69 6e 74 65 72 61 63 74 69 6f 6e 5f 75 72 6c 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 6c 6f 67 69 6e 5f 69 6e 74 65 72 61 63 74 69 6f 6e 5f 75 72 6c 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 37 20 64 61 79 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 3c 70 3e 54 68 69 73 20 63 6f 6f 6b 69 65 20 69 73 20 6e 65 65 64 65 64 20 74 6f 20 61 75 74 68 6f 72 69 7a 65 20 75 73 65 72 73 2e 3c 2f 70 3e 22 7d 2c 22 70 6f 73 74 5f 6c 6f 67 6f 75 74 5f 72 65 64 69 72 65 63 74 5f 75 72 69 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 70 6f 73 74 5f 6c 6f 67 6f 75 74 5f 72 65 64 69 72 65 63 74 5f Data Ascii: tform after authorization is completed.</p>"},"login_interaction_url":{"cookie_id":"login_interaction_url","duration":"7 days","description":"<p>This cookie is needed to authorize users.</p>"},"post_logout_redirect_uri":{"cookie_id":"post_logout_redirect_
2024-03-29 13:44:59 UTC	1369	IN	Data Raw: 6f 6e 22 3a 22 47 6f 6f 67 6c 65 20 52 65 63 61 70 74 63 68 61 20 73 65 72 76 69 63 65 20 73 65 74 73 20 74 68 69 73 20 63 6f 6f 6b 69 65 20 74 6f 20 69 64 65 6e 74 69 66 79 20 62 6f 74 73 20 74 6f 20 70 72 6f 74 65 63 74 20 74 68 65 20 77 65 62 73 69 74 65 20 61 67 61 69 6e 73 74 20 6d 61 6c 69 63 69 6f 75 73 20 73 70 61 6d 20 61 74 74 61 63 6b 73 2e 22 7d 2c 22 70 72 6f 66 69 6c 65 2e 73 65 73 73 69 6f 6e 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 70 72 6f 66 69 6c 65 2e 73 65 73 73 69 6f 6e 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 73 65 73 73 69 6f 6e 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 3c 70 3e 54 68 69 73 20 63 6f 6f 6b 69 65 20 69 73 20 6e 65 65 64 65 64 20 74 6f 20 61 75 74 68 6f 72 69 7a 65 20 75 73 65 72 73 2e 3c 2f 70 3e 22 Data Ascii: on":"Google Recaptcha service sets this cookie to identify bots to protect the website against malicious spam attacks."},"profile.session":{"cookie_id":"profile.session","duration":"session","description":"<p>This cookie is needed to authorize users.</p>"
2024-03-29 13:44:59 UTC	1369	IN	Data Raw: 69 6f 6e 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 37 20 64 61 79 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 3c 70 3e 54 68 69 73 20 63 6f 6f 6b 69 65 20 69 73 20 6e 65 65 64 65 64 20 74 6f 20 61 75 74 68 6f 72 69 7a 65 20 75 73 65 72 73 2e 3c 2f 70 3e 22 7d 2c 22 70 72 6f 76 65 5f 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 70 72 6f 76 65 5f 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 37 20 64 61 79 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 3c 70 3e 54 68 69 73 20 63 6f 6f 6b 69 65 20 69 73 20 6e 65 65 64 65 64 20 74 6f 20 61 75 74 68 6f 72 69 7a 65 20 75 73 65 72 73 2e 3c 2f 70 3e 22 7d 2c 22 75 73 65 72 5f 69 64 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 Data Ascii: ion","duration":"7 days","description":"<p>This cookie is needed to authorize users.</p>"},"prove_authorization":{"cookie_id":"prove_authorization","duration":"7 days","description":"<p>This cookie is needed to authorize users.</p>"},"user_id":{"cookie_id
2024-03-29 13:44:59 UTC	1369	IN	Data Raw: 65 2e 20 49 74 20 64 6f 65 73 20 6e 6f 74 20 63 6f 6c 6c 65 63 74 20 6f 72 20 73 74 6f 72 65 20 61 6e 79 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 73 69 74 65 20 76 69 73 69 74 6f 72 73 2e 22 7d 2c 22 41 57 53 41 4c 42 43 4f 52 53 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 41 57 53 41 4c 42 43 4f 52 53 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 37 20 64 61 79 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 41 6d 61 7a 6f 6e 20 57 65 62 20 53 65 72 76 69 63 65 73 20 73 65 74 20 74 68 69 73 20 63 6f 6f 6b 69 65 20 66 6f 72 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 2e 22 7d 2c 22 63 65 78 2d 66 78 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 63 65 78 2d 66 78 22 2c 22 64 75 72 61 74 69 6f Data Ascii: e. It does not collect or store any personal information about the site visitors."},"AWSALBCORS":{"cookie_id":"AWSALBCORS","duration":"7 days","description":"Amazon Web Services set this cookie for load balancing."},"cex-fx":{"cookie_id":"cex-fx","duratio
2024-03-29 13:44:59 UTC	1369	IN	Data Raw: 73 20 63 6f 6f 6b 69 65 20 74 6f 20 73 74 6f 72 65 20 73 74 61 74 69 73 74 69 63 61 6c 20 64 61 74 61 20 6f 66 20 75 73 65 72 73 27 20 62 65 68 61 76 69 6f 75 72 20 6f 6e 20 74 68 65 20 77 65 62 73 69 74 65 2c 20 77 68 69 63 68 20 63 61 6e 20 62 65 20 75 73 65 64 20 66 6f 72 20 69 6e 74 65 72 6e 61 6c 20 61 6e 61 6c 79 74 69 63 73 20 62 79 20 74 68 65 20 77 65 62 73 69 74 65 20 6f 70 65 72 61 74 6f 72 2e 22 7d 2c 22 72 6c 5f 70 61 67 65 5f 69 6e 69 74 5f 72 65 66 65 72 72 65 72 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 72 6c 5f 70 61 67 65 5f 69 6e 69 74 5f 72 65 66 65 72 72 65 72 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 31 20 79 65 61 72 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 52 75 64 64 65 72 73 74 61 63 6b 20 73 65 74 73 20 74 68 69 Data Ascii: s cookie to store statistical data of users' behaviour on the website, which can be used for internal analytics by the website operator."},"rl_page_init_referrer":{"cookie_id":"rl_page_init_referrer","duration":"1 year","description":"Rudderstack sets thi
2024-03-29 13:44:59 UTC	1369	IN	Data Raw: 65 6c 20 75 6e 69 71 75 65 20 49 44 20 6f 66 20 74 68 65 20 55 73 65 72 2e 22 7d 2c 22 69 6e 69 74 69 61 6c 54 72 61 66 66 69 63 53 6f 75 72 63 65 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 69 6e 69 74 69 61 6c 54 72 61 66 66 69 63 53 6f 75 72 63 65 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 31 20 79 65 61 72 20 31 20 6d 6f 6e 74 68 20 34 20 64 61 79 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 3c 70 3e 55 73 69 6e 67 20 66 6f 72 20 64 65 74 65 72 6d 69 6e 69 6e 67 20 74 72 61 66 66 69 63 20 73 6f 75 72 63 65 3c 2f 70 3e 22 7d 2c 22 5f 68 6a 48 61 73 43 61 63 68 65 64 55 73 65 72 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 5f 68 6a 48 61 73 43 61 63 68 65 64 55 73 65 72 41 74 74 72 69 62 75 74 65 73 22 2c 22 Data Ascii: el unique ID of the User."},"initialTrafficSource":{"cookie_id":"initialTrafficSource","duration":"1 year 1 month 4 days","description":"<p>Using for determining traffic source</p>"},"_hjHasCachedUserAttributes":{"cookie_id":"_hjHasCachedUserAttributes","
2024-03-29 13:44:59 UTC	1369	IN	Data Raw: 72 69 62 75 74 65 64 20 74 6f 20 74 68 65 20 73 61 6d 65 20 75 73 65 72 20 49 44 2c 20 77 68 69 63 68 20 70 65 72 73 69 73 74 73 20 69 6e 20 74 68 65 20 48 6f 74 6a 61 72 20 55 73 65 72 20 49 44 2c 20 77 68 69 63 68 20 69 73 20 75 6e 69 71 75 65 20 74 6f 20 74 68 61 74 20 73 69 74 65 2e 22 7d 2c 22 5f 67 61 5f 2a 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 5f 67 61 5f 2a 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 31 20 79 65 61 72 20 31 20 6d 6f 6e 74 68 20 34 20 64 61 79 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 47 6f 6f 67 6c 65 20 41 6e 61 6c 79 74 69 63 73 20 73 65 74 73 20 74 68 69 73 20 63 6f 6f 6b 69 65 20 74 6f 20 73 74 6f 72 65 20 61 6e 64 20 63 6f 75 6e 74 20 70 61 67 65 20 76 69 65 77 73 2e 22 7d 2c 22 5f 67 61 22 3a 7b 22 63 6f Data Ascii: ributed to the same user ID, which persists in the Hotjar User ID, which is unique to that site."},"_ga_":{"cookie_id":"_ga_","duration":"1 year 1 month 4 days","description":"Google Analytics sets this cookie to store and count page views."},"_ga":{"co
2024-03-29 13:44:59 UTC	1369	IN	Data Raw: 61 74 61 2e 22 7d 2c 22 5f 68 6a 54 4c 44 54 65 73 74 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 5f 68 6a 54 4c 44 54 65 73 74 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 73 65 73 73 69 6f 6e 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 6f 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 6d 6f 73 74 20 67 65 6e 65 72 69 63 20 63 6f 6f 6b 69 65 20 70 61 74 68 20 74 68 61 74 20 68 61 73 20 74 6f 20 62 65 20 75 73 65 64 20 69 6e 73 74 65 61 64 20 6f 66 20 74 68 65 20 70 61 67 65 20 68 6f 73 74 6e 61 6d 65 2c 20 48 6f 74 6a 61 72 20 73 65 74 73 20 74 68 65 20 5f 68 6a 54 4c 44 54 65 73 74 20 63 6f 6f 6b 69 65 20 74 6f 20 73 74 6f 72 65 20 64 69 66 66 65 72 65 6e 74 20 55 52 4c 20 73 75 62 73 74 72 69 6e 67 20 61 6c 74 65 72 6e 61 74 69 76 65 73 20 75 Data Ascii: ata."},"_hjTLDTest":{"cookie_id":"_hjTLDTest","duration":"session","description":"To determine the most generic cookie path that has to be used instead of the page hostname, Hotjar sets the _hjTLDTest cookie to store different URL substring alternatives u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.16	49784	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:58 UTC	1069	OUT	GET /ws/ HTTP/1.1 Host: cex.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes Sec-WebSocket-Key: qu32MW7dY5pNcyxaIqQv5Q== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-29 13:44:59 UTC	1221	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 29 Mar 2024 13:44:59 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 Content-Security-Policy-Report-Only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Set-Cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fws%2F; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS Location: /ws Strict-Transport-Security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c38ba9b5a21-IAD
2024-03-29 13:44:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.16	49785	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:58 UTC	773	OUT	GET /static/resources/media/shield.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex
2024-03-29 13:44:59 UTC	450	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:59 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-2ed" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: MISS X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c38b9511ff8-IAD
2024-03-29 13:44:59 UTC	756	IN	Data Raw: 32 65 64 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 30 2e 39 39 34 37 20 36 2e 39 30 33 31 43 32 30 2e 39 37 38 36 20 36 2e 37 33 34 37 37 20 32 30 2e 39 31 39 39 20 36 2e 35 37 33 32 39 20 32 30 2e 38 32 34 32 20 36 2e 34 33 33 38 37 43 32 30 2e 37 32 38 35 20 36 2e 32 39 34 34 35 20 32 30 2e 35 39 39 20 36 2e 31 38 31 36 35 20 32 30 2e 34 34 37 37 20 36 2e 31 30 36 31 4c 31 32 2e 34 37 34 37 20 32 2e 31 30 36 31 43 31 32 2e 33 33 36 20 32 2e 30 33 36 30 34 20 31 Data Ascii: 2ed<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M20.9947 6.9031C20.9786 6.73477 20.9199 6.57329 20.8242 6.43387C20.7285 6.29445 20.599 6.18165 20.4477 6.1061L12.4747 2.1061C12.336 2.03604 1
2024-03-29 13:44:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.16	49786	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:58 UTC	774	OUT	GET /static/resources/media/message.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex
2024-03-29 13:44:59 UTC	457	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:59 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-2ae" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: REVALIDATED X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c38ccb57fe1-IAD
2024-03-29 13:44:59 UTC	693	IN	Data Raw: 32 61 65 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 38 20 32 32 43 37 2e 38 36 38 36 34 20 32 32 2e 30 30 30 31 20 37 2e 37 33 38 35 35 20 32 31 2e 39 37 34 34 20 37 2e 36 31 37 31 36 20 32 31 2e 39 32 34 31 43 37 2e 34 39 35 37 38 20 32 31 2e 38 37 33 39 20 37 2e 33 38 35 34 38 20 32 31 2e 38 30 30 33 20 37 2e 32 39 32 36 20 32 31 2e 37 30 37 34 43 37 2e 31 39 39 37 31 20 32 31 2e 36 31 34 35 20 37 2e 31 32 36 30 36 20 32 31 2e 35 30 34 32 20 37 2e 30 37 35 38 35 20 Data Ascii: 2ae<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M8 22C7.86864 22.0001 7.73855 21.9744 7.61716 21.9241C7.49578 21.8739 7.38548 21.8003 7.2926 21.7074C7.19971 21.6145 7.12606 21.5042 7.07585
2024-03-29 13:44:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.16	49788	18.160.41.53	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:58 UTC	531	OUT	GET /c/hotjar-1666385.js?sv=6 HTTP/1.1 Host: static.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:59 UTC	633	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Fri, 29 Mar 2024 13:44:59 GMT Access-Control-Allow-Origin: * Cache-Control: max-age=60 Cross-Origin-Resource-Policy: cross-origin ETag: W/88871e1d10ae94386be43101b9e37ade Strict-Transport-Security: max-age=2592000; includeSubDomains X-Cache-Hit: 1 X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 e37edb91bbf6b4d78a917647aaf7d0d0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P1 X-Amz-Cf-Id: 3nvEE_xHZXDxTWTB6dby-zZRf2DH5xjwi0LWc6_vIJOe4X0ompT9Dg==
2024-03-29 13:44:59 UTC	4097	IN	Data Raw: 66 66 61 0d 0a 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 3d 20 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 7c 7c 20 7b 22 73 69 74 65 5f 69 64 22 3a 31 36 36 36 33 38 35 2c 22 72 22 3a 30 2e 34 35 37 31 35 39 36 37 38 30 39 30 38 36 30 36 2c 22 72 65 63 5f 76 61 6c 75 65 22 3a 30 2e 31 39 36 36 33 33 31 31 38 36 34 31 38 35 35 37 36 2c 22 73 74 61 74 65 5f 63 68 61 6e 67 65 5f 6c 69 73 74 65 6e 5f 6d 6f 64 65 22 3a 22 61 75 74 6f 6d 61 74 69 63 5f 77 69 74 68 5f 66 72 61 67 6d 65 6e 74 73 22 2c 22 72 65 63 6f 72 64 22 3a 74 72 75 65 2c 22 63 6f 6e 74 69 6e 75 6f 75 73 5f 63 61 70 74 75 72 65 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 72 65 63 6f 72 64 69 6e 67 5f 63 61 70 74 75 72 65 5f 6b 65 79 73 74 72 Data Ascii: ffawindow.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":1666385,"r":0.4571596780908606,"rec_value":0.19663311864185576,"state_change_listen_mode":"automatic_with_fragments","record":true,"continuous_capture_enabled":true,"recording_capture_keystr
2024-03-29 13:44:59 UTC	12979	IN	Data Raw: 33 32 61 62 0d 0a 72 75 6c 65 5f 74 79 70 65 22 3a 6e 75 6c 6c 7d 2c 7b 22 63 6f 6d 70 6f 6e 65 6e 74 22 3a 22 64 65 76 69 63 65 22 2c 22 6d 61 74 63 68 5f 6f 70 65 72 61 74 69 6f 6e 22 3a 22 65 78 61 63 74 22 2c 22 6e 65 67 61 74 65 22 3a 66 61 6c 73 65 2c 22 70 61 74 74 65 72 6e 22 3a 22 74 61 62 6c 65 74 22 2c 22 6e 61 6d 65 22 3a 6e 75 6c 6c 2c 22 72 75 6c 65 5f 74 79 70 65 22 3a 6e 75 6c 6c 7d 2c 7b 22 63 6f 6d 70 6f 6e 65 6e 74 22 3a 22 64 65 76 69 63 65 22 2c 22 6d 61 74 63 68 5f 6f 70 65 72 61 74 69 6f 6e 22 3a 22 65 78 61 63 74 22 2c 22 6e 65 67 61 74 65 22 3a 66 61 6c 73 65 2c 22 70 61 74 74 65 72 6e 22 3a 22 70 68 6f 6e 65 22 2c 22 6e 61 6d 65 22 3a 6e 75 6c 6c 2c 22 72 75 6c 65 5f 74 79 70 65 22 3a 6e 75 6c 6c 7d 5d 2c 22 61 73 6b 5f 66 6f 72 Data Ascii: 32abrule_type":null},{"component":"device","match_operation":"exact","negate":false,"pattern":"tablet","name":null,"rule_type":null},{"component":"device","match_operation":"exact","negate":false,"pattern":"phone","name":null,"rule_type":null}],"ask_for
2024-03-29 13:44:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.16	49791	3.162.103.76	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:58 UTC	536	OUT	GET /v1.1/rudder-analytics.min.js HTTP/1.1 Host: cdn.rudderlabs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:59 UTC	582	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 124591 Connection: close Date: Fri, 29 Mar 2024 13:45:00 GMT Last-Modified: Tue, 26 Mar 2024 07:56:27 GMT ETag: "ab8a3f86a1092c63760ba3761ebe6a53" x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 b0785dd15b9c7ed21cde8fa5e473d0a2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD61-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 1hTxrRv3w_sXmCkQalGEESHfqYGokthZ3B_0pHUCwhJ06UauRMLsPQ==
2024-03-29 13:44:59 UTC	1480	IN	Data Raw: 76 61 72 20 72 75 64 64 65 72 61 6e 61 6c 79 74 69 63 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 72 3d 72 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 74 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c Data Ascii: var rudderanalytics=function(e){"use strict";function t(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,
2024-03-29 13:44:59 UTC	16384	IN	Data Raw: 70 65 2c 74 29 2c 6e 26 26 73 28 65 2c 6e 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 28 74 3d 72 28 74 29 29 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6e 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6e 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 72 65 74 75 72 6e 20 63 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e 63 Data Ascii: pe,t),n&&s(e,n),Object.defineProperty(e,"prototype",{writable:!1}),e}function u(e,t,n){return(t=r(t))in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function c(){return c=Object.assign?Object.assign.bind():func
2024-03-29 13:44:59 UTC	16384	IN	Data Raw: 73 20 33 36 30 22 2c 22 47 41 33 36 30 22 29 3b 76 61 72 20 49 74 3d 75 28 75 28 75 28 75 28 75 28 75 28 75 28 75 28 75 28 7b 7d 2c 6d 74 2c 6d 74 29 2c 22 47 6f 6f 67 6c 65 20 41 6e 61 6c 79 74 69 63 73 20 33 36 30 22 2c 6d 74 29 2c 22 47 6f 6f 67 6c 65 20 61 6e 61 6c 79 74 69 63 73 20 33 36 30 22 2c 6d 74 29 2c 22 67 6f 6f 67 6c 65 20 61 6e 61 6c 79 74 69 63 73 20 33 36 30 22 2c 6d 74 29 2c 22 47 6f 6f 67 6c 65 20 41 6e 61 6c 79 74 69 63 73 33 36 30 22 2c 6d 74 29 2c 22 47 6f 6f 67 6c 65 20 61 6e 61 6c 79 74 69 63 73 33 36 30 22 2c 6d 74 29 2c 22 67 6f 6f 67 6c 65 20 61 6e 61 6c 79 74 69 63 73 33 36 30 22 2c 6d 74 29 2c 22 47 6f 6f 67 6c 65 41 6e 61 6c 79 74 69 63 73 33 36 30 22 2c 6d 74 29 2c 22 47 41 20 33 36 30 22 2c 6d 74 29 2c 62 74 3d 22 41 44 52 Data Ascii: s 360","GA360");var It=u(u(u(u(u(u(u(u(u({},mt,mt),"Google Analytics 360",mt),"Google analytics 360",mt),"google analytics 360",mt),"Google Analytics360",mt),"Google analytics360",mt),"google analytics360",mt),"GoogleAnalytics360",mt),"GA 360",mt),bt="ADR
2024-03-29 13:44:59 UTC	2048	IN	Data Raw: 29 2c 74 68 69 73 2e 5f 68 61 73 68 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 72 2e 63 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 65 2e 5f 68 61 73 68 3d 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 2c 65 7d 7d 29 2c 65 2e 53 48 41 31 3d 72 2e 5f 63 72 65 61 74 65 48 65 6c 70 65 72 28 73 29 2c 65 2e 48 6d 61 63 53 48 41 31 3d 72 2e 5f 63 72 65 61 74 65 48 6d 61 63 48 65 6c 70 65 72 28 73 29 2c 61 2e 53 48 41 31 29 29 2c 72 72 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 73 2c 61 7d 76 61 72 20 6f 72 2c 73 72 2c 61 72 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 72 28 29 7b 72 65 74 75 72 6e 20 73 72 7c 7c 28 73 72 3d 31 2c 6e 72 2e Data Ascii: ),this._hash},clone:function(){var e=r.clone.call(this);return e._hash=this._hash.clone(),e}}),e.SHA1=r._createHelper(s),e.HmacSHA1=r._createHmacHelper(s),a.SHA1)),rr.exports;var e,t,n,r,i,o,s,a}var or,sr,ar={exports:{}};function ur(){return sr\|\|(sr=1,nr.
2024-03-29 13:44:59 UTC	16384	IN	Data Raw: 30 2c 31 2c 32 2c 34 2c 38 2c 31 36 2c 33 32 2c 36 34 2c 31 32 38 2c 32 37 2c 35 34 5d 2c 67 3d 72 2e 41 45 53 3d 6e 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 74 68 69 73 2e 5f 6e 52 6f 75 6e 64 73 7c 7c 74 68 69 73 2e 5f 6b 65 79 50 72 69 6f 72 52 65 73 65 74 21 3d 3d 74 68 69 73 2e 5f 6b 65 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 68 69 73 2e 5f 6b 65 79 50 72 69 6f 72 52 65 73 65 74 3d 74 68 69 73 2e 5f 6b 65 79 2c 74 3d 65 2e 77 6f 72 64 73 2c 6e 3d 65 2e 73 69 67 42 79 74 65 73 2f 34 2c 72 3d 34 2a 28 28 74 68 69 73 2e 5f 6e 52 6f 75 6e 64 73 3d 6e 2b 36 29 2b 31 29 2c 6f 3d 74 68 69 73 2e 5f 6b 65 79 53 63 68 65 64 75 6c 65 3d 5b 5d 2c 73 3d 30 3b 73 3c 72 3b 73 2b 2b 29 73 3c 6e 3f 6f 5b 73 Data Ascii: 0,1,2,4,8,16,32,64,128,27,54],g=r.AES=n.extend({_doReset:function(){if(!this._nRounds\|\|this._keyPriorReset!==this._key){for(var e=this._keyPriorReset=this._key,t=e.words,n=e.sigBytes/4,r=4*((this._nRounds=n+6)+1),o=this._keySchedule=[],s=0;s<r;s++)s<n?o[s
2024-03-29 13:44:59 UTC	16384	IN	Data Raw: 4c 28 65 29 2e 68 6f 73 74 6e 61 6d 65 29 2e 73 70 6c 69 74 28 22 2e 22 29 2c 69 3d 72 5b 72 2e 6c 65 6e 67 74 68 2d 31 5d 2c 6f 3d 5b 5d 3b 69 66 28 34 3d 3d 3d 72 2e 6c 65 6e 67 74 68 26 26 69 3d 3d 3d 70 61 72 73 65 49 6e 74 28 69 2c 31 30 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 72 2e 6c 65 6e 67 74 68 3c 3d 31 29 72 65 74 75 72 6e 20 6f 3b 66 6f 72 28 76 61 72 20 73 3d 72 2e 6c 65 6e 67 74 68 2d 32 3b 73 3e 3d 30 3b 2d 2d 73 29 6f 2e 70 75 73 68 28 72 2e 73 6c 69 63 65 28 73 29 2e 6a 6f 69 6e 28 22 2e 22 29 29 3b 72 65 74 75 72 6e 20 6f 7d 2c 72 2e 63 6f 6f 6b 69 65 3d 6e 2c 74 3d 65 2e 65 78 70 6f 72 74 73 3d 72 7d 28 57 72 2c 57 72 2e 65 78 70 6f 72 74 73 29 3b 76 61 72 20 65 69 3d 79 28 57 72 2e 65 78 70 6f 72 74 73 29 2c 74 69 3d 66 75 6e 63 74 Data Ascii: L(e).hostname).split("."),i=r[r.length-1],o=[];if(4===r.length&&i===parseInt(i,10))return o;if(r.length<=1)return o;for(var s=r.length-2;s>=0;--s)o.push(r.slice(s).join("."));return o},r.cookie=n,t=e.exports=r}(Wr,Wr.exports);var ei=y(Wr.exports),ti=funct
2024-03-29 13:44:59 UTC	1776	IN	Data Raw: 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 77 6f 3d 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 63 68 61 72 41 74 2c 54 6f 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2c 5f 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 77 6f 2e 63 61 6c 6c 28 65 2c 74 29 7d 2c 52 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 6f 2e 63 61 6c 6c 28 65 2c 74 29 7d 2c 50 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 3d 74 7c 7c 52 6f 3b 66 6f 72 28 76 61 72 20 6e 3d 5b 5d 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 3d 31 29 74 28 65 2c 72 29 26 26 6e 2e 70 75 73 68 28 53 74 72 69 6e 67 28 72 29 29 3b 72 65 74 75 72 6e 20 6e 7d 2c 44 6f 3d 66 75 6e 63 Data Ascii: pe.hasOwnProperty,wo=String.prototype.charAt,To=Object.prototype.toString,_o=function(e,t){return wo.call(e,t)},Ro=function(e,t){return Oo.call(e,t)},Po=function(e,t){t=t\|\|Ro;for(var n=[],r=0,i=e.length;r<i;r+=1)t(e,r)&&n.push(String(r));return n},Do=func
2024-03-29 13:44:59 UTC	16384	IN	Data Raw: 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 69 28 6e 29 7c 7c 6e 75 6c 6c 3d 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 3b 66 6f 72 28 3b 74 2e 6c 65 6e 67 74 68 3e 30 26 26 74 5b 74 2e 6c 65 6e 67 74 68 2d 31 5d 21 3d 3d 74 68 69 73 3b 29 74 2e 70 6f 70 28 29 3b 72 65 74 75 72 6e 20 74 2e 69 6e 63 6c 75 64 65 73 28 6e 29 3f 22 5b 43 69 72 63 75 6c 61 72 20 52 65 66 65 72 65 6e 63 65 5d 22 3a 28 74 2e 70 75 73 68 28 6e 29 2c 6e 29 7d 29 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 76 61 72 20 74 7d 66 75 6e 63 74 69 6f 6e 20 59 6f 28 65 2c 74 2c 6e 2c 72 29 7b 74 68 69 73 2e 69 64 3d 74 2c 74 68 69 73 2e 6e 61 6d 65 3d 65 2c 74 68 69 73 2e 6b 65 79 73 3d 6e 7c 7c 7b 7d 2c 74 68 69 73 2e 65 6e 67 69 6e 65 3d 72 7c Data Ascii: ion(e,n){if("object"!==i(n)\|\|null===n)return n;for(;t.length>0&&t[t.length-1]!==this;)t.pop();return t.includes(n)?"[Circular Reference]":(t.push(n),n)}))}catch(e){return null}var t}function Yo(e,t,n,r){this.id=t,this.name=e,this.keys=n\|\|{},this.engine=r\|
2024-03-29 13:44:59 UTC	16384	IN	Data Raw: 6f 6e 63 61 74 28 65 29 29 2c 21 30 7d 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 44 65 6e 69 65 64 4c 69 73 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 3f 74 68 69 73 2e 75 73 65 72 44 65 6e 69 65 64 43 6f 6e 73 65 6e 74 47 72 6f 75 70 49 64 73 3a 5b 5d 7d 7d 5d 29 2c 65 7d 28 29 2c 44 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 69 66 28 6f 28 74 68 69 73 2c 65 29 2c 75 28 74 68 69 73 2c 22 75 70 64 61 74 65 50 75 72 70 6f 73 65 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 65 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 Data Ascii: oncat(e)),!0}}},{key:"getDeniedList",value:function(){return this.isInitialized?this.userDeniedConsentGroupIds:[]}}]),e}(),Ds=function(){function e(){var t=this;if(o(this,e),u(this,"updatePurposes",(function(e){e&&Object.entries(e).forEach((function(e){va
2024-03-29 13:44:59 UTC	11208	IN	Data Raw: 61 64 79 3d 21 30 2c 6e 2e 65 78 65 63 75 74 65 52 65 61 64 79 43 61 6c 6c 62 61 63 6b 28 29 2c 76 6f 69 64 28 6e 2e 74 6f 42 65 50 72 6f 63 65 73 73 65 64 42 79 49 6e 74 65 67 72 61 74 69 6f 6e 41 72 72 61 79 3d 5b 5d 29 3b 73 2e 72 65 70 6c 61 79 45 76 65 6e 74 73 28 73 29 7d 29 29 7d 63 61 74 63 68 28 65 29 7b 51 6e 28 65 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 73 65 6e 64 44 61 74 61 54 6f 44 65 73 74 69 6e 61 74 69 6f 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 74 72 79 7b 69 66 28 65 5b 6e 5d 29 7b 76 61 72 20 72 3d 5f 28 74 29 3b 65 5b 6e 5d 28 72 29 7d 7d 63 61 74 63 68 28 74 29 7b 76 61 72 20 69 3d 22 5b 73 65 6e 64 54 6f 4e 61 74 69 76 65 5d 3a 3a 20 5b 44 65 73 74 69 6e 61 74 69 6f 6e 3a 20 22 2e 63 6f 6e 63 61 74 28 65 Data Ascii: ady=!0,n.executeReadyCallback(),void(n.toBeProcessedByIntegrationArray=[]);s.replayEvents(s)}))}catch(e){Qn(e)}}},{key:"sendDataToDestination",value:function(e,t,n){try{if(e[n]){var r=_(t);e[n](r)}}catch(t){var i="[sendToNative]:: [Destination: ".concat(e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.16	49792	3.162.103.56	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:58 UTC	539	OUT	GET /j/7UKK4UJQK5H4LI4OCBFPWX/roundtrip.js HTTP/1.1 Host: s.adroll.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:59 UTC	798	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 96157 Connection: close Date: Fri, 29 Mar 2024 13:45:00 GMT Last-Modified: Fri, 29 Mar 2024 13:17:35 GMT Etag: "1b038565c6cfa89879562836da66149d" X-Amz-Server-Side-Encryption: AES256 Cache-Control: max-age=3600, must-revalidate X-Amz-Version-Id: OsDr7laU.eUxTdkGFDXE9T_4i26rRO13 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding Via: 1.1 e4938fc434947f57a79af6b9b403df6e.cloudfront.net (CloudFront) Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Access-Control-Max-Age: 600 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: IAD61-P1 X-Amz-Cf-Id: c4ol4oMataToYnSaL9c3XaJFhmlYBzi1FTYmZMToznEhsJwJ-GV6VQ==
2024-03-29 13:44:59 UTC	15586	IN	Data Raw: 74 72 79 20 7b 0a 20 20 20 20 0a 20 20 20 20 5f 5f 61 64 72 6f 6c 6c 2e 6c 6f 61 64 5f 61 64 72 6f 6c 6c 5f 74 70 63 28 5f 5f 61 64 72 6f 6c 6c 2e 72 65 6e 64 65 72 5f 61 64 76 65 72 74 69 73 61 62 6c 65 5f 63 65 6c 6c 29 3b 0a 7d 0a 63 61 74 63 68 28 65 29 20 7b 7d 0a 0a 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 5f 5f 61 64 72 6f 6c 6c 5f 5f 28 29 7b 74 68 69 73 2e 70 78 6c 73 74 61 72 74 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 3b 74 68 69 73 2e 76 65 72 73 69 6f 6e 3d 22 32 2e 30 22 3b 74 68 69 73 2e 65 78 70 3d 38 37 36 30 3b 74 68 69 73 2e 65 65 78 70 3d 37 32 30 3b 74 68 69 73 2e 70 76 3d 31 45 31 31 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 74 68 69 73 2e 5f 5f 61 64 63 3d 22 5f 5f 61 72 5f 76 34 Data Ascii: try { __adroll.load_adroll_tpc(__adroll.render_advertisable_cell);}catch(e) {}try { function __adroll__(){this.pxlstart=(new Date).getTime();this.version="2.0";this.exp=8760;this.eexp=720;this.pv=1E11*Math.random();this.__adc="__ar_v4
2024-03-29 13:44:59 UTC	173	IN	Data Raw: 5d 5d 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 31 3c 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 62 29 2e 6c 65 6e 67 74 68 3f 62 3a 6e 75 6c 6c 7d 3b 0a 5f 5f 61 64 72 6f 6c 6c 5f 5f 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 76 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 5f 65 6e 73 75 72 65 5f 67 6c 6f 62 61 6c 28 22 61 64 72 6f 6c 6c 5f 63 75 72 72 65 6e 63 79 22 2c 6e 75 6c 6c 29 2c 63 3d 74 68 69 73 2e 5f 65 6e 73 75 72 65 5f 67 6c 6f 62 Data Ascii: ]];break}return 1<=Object.keys(b).length?b:null};__adroll__.prototype.get_conversion_value=function(a){var b=this._ensure_global("adroll_currency",null),c=this._ensure_glob
2024-03-29 13:44:59 UTC	16384	IN	Data Raw: 61 6c 28 22 61 64 72 6f 6c 6c 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 76 61 6c 75 65 22 2c 6e 75 6c 6c 29 2c 64 3d 74 68 69 73 2e 5f 65 6e 73 75 72 65 5f 67 6c 6f 62 61 6c 28 22 61 64 72 6f 6c 6c 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 76 61 6c 75 65 5f 69 6e 5f 64 6f 6c 6c 61 72 73 22 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 28 61 3d 74 68 69 73 2e 70 61 72 73 65 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 61 74 74 72 73 28 61 29 29 3f 61 3a 63 3f 7b 63 6f 6e 76 5f 76 61 6c 75 65 3a 22 22 2b 63 2c 63 75 72 72 65 6e 63 79 3a 62 7d 3a 64 3f 7b 63 6f 6e 76 5f 76 61 6c 75 65 3a 22 22 2b 70 61 72 73 65 49 6e 74 28 31 30 30 2a 64 29 2c 63 75 72 72 65 6e 63 79 3a 22 55 53 43 22 7d 3a 6e 75 6c 6c 7d 3b 5f 5f 61 64 72 6f 6c 6c 5f 5f 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 62 6f 6e Data Ascii: al("adroll_conversion_value",null),d=this._ensure_global("adroll_conversion_value_in_dollars",null);return(a=this.parse_conversion_attrs(a))?a:c?{conv_value:""+c,currency:b}:d?{conv_value:""+parseInt(100*d),currency:"USC"}:null};__adroll__.prototype.fibon
2024-03-29 13:44:59 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 64 28 61 29 7b 74 68 69 73 2e 73 69 7a 65 3d 33 36 3b 74 68 69 73 2e 64 61 74 61 3d 6e 65 77 20 44 61 74 65 28 61 7c 7c 30 29 7d 66 75 6e 63 74 69 6f 6e 20 65 28 61 29 7b 74 68 69 73 2e 64 61 74 61 3d 21 30 3d 3d 3d 61 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 62 29 7b 74 68 69 73 2e 73 69 7a 65 3d 61 3b 74 68 69 73 2e 64 61 74 61 3d 62 7c 7c 22 22 7d 66 75 6e 63 74 69 6f 6e 20 66 28 61 2c 62 29 7b 74 68 69 73 2e 73 69 7a 65 3d 61 3b 74 68 69 73 2e 64 61 74 61 3d 62 7c 7c 5b 5d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 61 2c 62 29 7b 74 68 69 73 2e 73 69 7a 65 3d 61 3b 74 68 69 73 2e 64 61 74 61 3d 62 7c 7c 41 72 72 61 79 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 61 29 7b 74 68 69 73 2e 64 61 74 61 3d 61 7c 7c 5b 5d 7d 66 75 6e 63 Data Ascii: function d(a){this.size=36;this.data=new Date(a\|\|0)}function e(a){this.data=!0===a}function g(a,b){this.size=a;this.data=b\|\|""}function f(a,b){this.size=a;this.data=b\|\|[]}function k(a,b){this.size=a;this.data=b\|\|Array(a)}function h(a){this.data=a\|\|[]}func
2024-03-29 13:44:59 UTC	2048	IN	Data Raw: 73 69 74 69 6f 6e 3d 62 2e 72 65 73 65 74 56 61 6c 75 65 2c 62 2e 76 61 6c 3d 62 2e 67 65 74 4e 65 78 74 56 61 6c 75 65 28 62 2e 69 6e 64 65 78 2b 2b 29 29 2c 64 7c 3d 28 30 3c 68 3f 31 3a 30 29 2a 63 2c 63 3c 3c 3d 31 3b 72 65 74 75 72 6e 20 64 7d 2c 5f 64 65 63 6f 6d 70 72 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 66 29 7b 76 61 72 20 6b 3d 5b 30 2c 31 2c 32 5d 2c 68 3d 22 22 2c 70 3d 5b 5d 3b 66 3d 7b 76 61 6c 3a 66 28 30 29 2c 70 6f 73 69 74 69 6f 6e 3a 63 2c 69 6e 64 65 78 3a 31 2c 72 65 73 65 74 56 61 6c 75 65 3a 63 2c 67 65 74 4e 65 78 74 56 61 6c 75 65 3a 66 2c 64 69 63 74 53 69 7a 65 3a 34 2c 6e 75 6d 42 69 74 73 3a 33 2c 65 6e 6c 61 72 67 65 49 6e 3a 34 7d 3b 68 3d 64 2e 5f 64 65 63 6f 6d 70 72 65 73 73 42 69 74 73 28 4d 61 74 68 2e 70 Data Ascii: sition=b.resetValue,b.val=b.getNextValue(b.index++)),d\|=(0<h?1:0)*c,c<<=1;return d},_decompress:function(a,c,f){var k=[0,1,2],h="",p=[];f={val:f(0),position:c,index:1,resetValue:c,getNextValue:f,dictSize:4,numBits:3,enlargeIn:4};h=d._decompressBits(Math.p
2024-03-29 13:44:59 UTC	16384	IN	Data Raw: 21 6c 2e 74 65 73 74 28 61 29 26 26 28 6d 2e 61 64 72 6f 6c 6c 5f 63 70 6d 5f 6d 61 63 72 6f 3d 61 29 3b 6b 26 26 21 6c 2e 74 65 73 74 28 6b 29 26 26 28 6d 2e 61 64 72 6f 6c 6c 5f 64 65 62 75 67 5f 73 74 72 69 6e 67 3d 6b 29 3b 68 26 26 21 6c 2e 74 65 73 74 28 68 29 26 26 28 6d 2e 61 64 72 6f 6c 6c 5f 61 64 5f 63 6f 6e 74 61 69 6e 65 72 5f 76 65 72 73 69 6f 6e 3d 68 29 3b 62 26 26 21 6c 2e 74 65 73 74 28 62 29 26 26 28 6d 2e 61 64 72 6f 6c 6c 5f 75 72 6c 5f 6d 61 63 72 6f 3d 62 29 3b 63 26 26 21 6c 2e 74 65 73 74 28 63 29 26 26 28 6d 2e 61 64 72 6f 6c 6c 5f 63 5f 6d 61 63 72 6f 3d 63 29 3b 64 26 26 21 6c 2e 74 65 73 74 28 64 29 26 26 28 6d 2e 61 64 72 6f 6c 6c 5f 73 75 62 6e 65 74 77 6f 72 6b 3d 64 29 3b 65 26 26 21 6c 2e 74 65 73 74 28 65 29 26 26 28 6d Data Ascii: !l.test(a)&&(m.adroll_cpm_macro=a);k&&!l.test(k)&&(m.adroll_debug_string=k);h&&!l.test(h)&&(m.adroll_ad_container_version=h);b&&!l.test(b)&&(m.adroll_url_macro=b);c&&!l.test(c)&&(m.adroll_c_macro=c);d&&!l.test(d)&&(m.adroll_subnetwork=d);e&&!l.test(e)&&(m
2024-03-29 13:44:59 UTC	1024	IN	Data Raw: 64 2c 65 3d 30 3b 65 3c 61 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 63 3d 61 5b 65 5d 5b 30 5d 2c 64 3d 61 5b 65 5d 5b 31 5d 2c 22 73 65 74 50 72 6f 70 65 72 74 69 65 73 22 3d 3d 3d 63 3f 74 68 69 73 2e 73 65 74 50 72 6f 70 65 72 74 69 65 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 64 29 3a 22 69 64 65 6e 74 69 66 79 22 3d 3d 3d 63 3f 74 68 69 73 2e 69 64 65 6e 74 69 66 79 2e 61 70 70 6c 79 28 74 68 69 73 2c 64 29 3a 22 74 72 61 63 6b 22 3d 3d 3d 63 26 26 74 68 69 73 2e 74 72 61 63 6b 2e 61 70 70 6c 79 28 74 68 69 73 2c 64 29 7d 7d 3b 0a 5f 5f 61 64 72 6f 6c 6c 5f 5f 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 5f 62 61 73 65 5f 75 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 67 29 7b 76 61 72 20 66 3d 61 2e 73 70 6c 69 74 28 22 3f 22 29 3b 61 3d Data Ascii: d,e=0;e<a.length;e++)c=a[e][0],d=a[e][1],"setProperties"===c?this.setProperties.apply(this,d):"identify"===c?this.identify.apply(this,d):"track"===c&&this.track.apply(this,d)}};__adroll__.prototype.get_base_url=function(a,b,c,d,e,g){var f=a.split("?");a=
2024-03-29 13:44:59 UTC	16384	IN	Data Raw: 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 5f 75 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 67 3d 63 3f 74 68 69 73 2e 5f 73 72 76 28 22 2f 63 22 29 3a 74 68 69 73 2e 5f 73 72 76 28 22 2f 72 22 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 5f 62 61 73 65 5f 75 72 6c 28 67 2c 61 2c 62 2c 63 2c 64 2c 65 29 7d 3b 0a 5f 5f 61 64 72 6f 6c 6c 5f 5f 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 5f 65 69 64 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 66 6f 72 28 76 61 72 20 61 3d 74 68 69 73 2e 67 65 74 28 74 68 69 73 2e 5f 5f 61 64 63 29 2c 62 3d 61 3f 61 2e 73 70 6c 69 74 28 22 7c 22 29 3a 22 22 2c 61 3d 5b 5d 2c 63 3d 62 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 3d 63 3b 63 2d 2d 29 69 66 28 62 5b 63 5d 26 26 22 22 21 3d Data Ascii: .prototype.get_url=function(a,b,c,d,e){var g=c?this._srv("/c"):this._srv("/r");return this.get_base_url(g,a,b,c,d,e)};__adroll__.prototype.get_eids=function(){try{for(var a=this.get(this.__adc),b=a?a.split("\|"):"",a=[],c=b.length-1;0<=c;c--)if(b[c]&&""!=
2024-03-29 13:44:59 UTC	11790	IN	Data Raw: 6c 5f 5f 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 6f 61 64 5f 61 64 72 6f 6c 6c 5f 74 70 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 74 70 63 5f 63 61 6c 6c 62 61 63 6b 28 61 29 3b 69 66 28 74 68 69 73 2e 5f 63 6f 6e 73 65 6e 74 5f 63 68 65 63 6b 65 64 29 72 65 74 75 72 6e 20 74 68 69 73 2e 73 65 74 5f 63 6f 6e 73 65 6e 74 28 29 3b 74 68 69 73 2e 5f 63 6f 6e 73 65 6e 74 5f 63 68 65 63 6b 65 64 3d 21 30 3b 74 68 69 73 2e 63 61 6c 6c 5f 63 6f 6e 73 65 6e 74 5f 63 68 65 63 6b 28 29 7d 3b 0a 5f 5f 61 64 72 6f 6c 6c 5f 5f 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 5f 74 70 63 5f 64 65 63 6f 64 65 5f 74 69 6d 65 6f 75 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 35 30 30 7d 3b 5f 5f 61 64 72 6f 6c 6c 5f 5f 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: l__.prototype.load_adroll_tpc=function(a){this.tpc_callback(a);if(this._consent_checked)return this.set_consent();this._consent_checked=!0;this.call_consent_check()};__adroll__.prototype.get_tpc_decode_timeout=function(){return 1500};__adroll__.prototype

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.16	49790	3.162.129.245	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:58 UTC	517	OUT	GET /scevent.min.js HTTP/1.1 Host: sc-static.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:59 UTC	662	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 44888 Connection: close Server: CloudFront Date: Fri, 29 Mar 2024 13:44:59 GMT Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Content-Encoding: utf-8 Cache-Control: private, s-maxage=0, max-age=600 Set-Cookie: X-AB=b9bd00ec73544025b937f4253ff9de4c;max-age=86400;expires=Sat, 30 Mar 2024 13:44:59 GMT;Path=/scevent.min.js;Secure;SameSite=None X-Cache: Miss from cloudfront Via: 1.1 216cc93d387142758c190b0491dc538c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD61-P3 X-Amz-Cf-Id: uuXvbL80hjKCHCGet-C4QpQfEirVsJVWihg8Kw-_PnNo3V3HDyzDiQ==
2024-03-29 13:44:59 UTC	16384	IN	Data Raw: 2f 2a 2a 20 53 6e 61 70 63 68 61 74 20 50 69 78 65 6c 20 53 44 4b 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 2c 72 3d 31 2c 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 3c 65 3b 72 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 69 29 26 26 28 74 5b 69 5d 3d 6e 5b 69 5d 29 3b 72 65 74 75 72 6e 20 74 7d 2c 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 Data Ascii: /** Snapchat Pixel SDK */!function(){"use strict";var t=function(){return t=Object.assign\|\|function(t){for(var n,r=1,e=arguments.length;r<e;r++)for(var i in n=arguments[r])Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i]);return t},t.apply(this,argu
2024-03-29 13:44:59 UTC	16384	IN	Data Raw: 74 29 3a 63 28 74 29 3f 44 72 28 74 29 3a 22 22 2b 74 7d 66 75 6e 63 74 69 6f 6e 20 52 72 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 5b 5d 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 7b 7d 3b 69 66 28 63 28 74 29 29 66 6f 72 28 76 61 72 20 72 3d 6e 74 28 74 29 2c 65 3d 44 28 72 29 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 7b 76 61 72 20 6f 3d 72 5b 69 5d 2c 61 3d 74 5b 6f 5d 3b 69 66 28 21 78 28 61 29 26 26 21 62 28 61 29 29 74 72 79 7b 6e 5b 6f 5d 3d 78 72 28 74 5b 6f 5d 29 7d 63 61 74 63 68 28 74 29 7b 77 74 28 22 50 54 46 4b 56 22 2c 74 29 7d 7d 72 65 74 75 72 6e 20 6e 7d 28 74 29 2c 65 3d 6e 74 28 72 29 2c 69 3d 44 28 65 29 2c 6f 3d 30 3b 6f 3c 69 3b 6f 2b 2b 29 52 28 6e 2c 7a 74 28 65 5b 6f 5d 29 2b 22 3d 22 2b 7a 74 28 78 72 28 72 5b Data Ascii: t):c(t)?Dr(t):""+t}function Rr(t){for(var n=[],r=function(t){var n={};if(c(t))for(var r=nt(t),e=D(r),i=0;i<e;i++){var o=r[i],a=t[o];if(!x(a)&&!b(a))try{n[o]=xr(t[o])}catch(t){wt("PTFKV",t)}}return n}(t),e=nt(r),i=D(e),o=0;o<i;o++)R(n,zt(e[o])+"="+zt(xr(r[
2024-03-29 13:44:59 UTC	12120	IN	Data Raw: 20 49 69 28 74 29 7b 74 72 79 7b 69 66 28 74 29 7b 76 61 72 20 6e 3d 71 28 74 2e 6e 6f 64 65 4e 61 6d 65 29 2c 72 3d 71 28 74 2e 74 79 70 65 29 3b 69 66 28 22 61 22 3d 3d 3d 6e 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 6e 7c 7c 22 69 6e 70 75 74 22 3d 3d 3d 6e 26 26 28 22 62 75 74 74 6f 6e 22 3d 3d 3d 72 7c 7c 22 73 75 62 6d 69 74 22 3d 3d 3d 72 29 29 72 65 74 75 72 6e 20 74 2e 69 6e 6e 65 72 54 65 78 74 7c 7c 74 2e 76 61 6c 75 65 7c 7c 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 65 78 74 22 29 7c 7c 74 2e 74 65 78 74 3b 76 61 72 20 65 3d 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 3b 69 66 28 65 29 72 65 74 75 72 6e 20 49 69 28 65 29 7d 7d 63 61 74 63 68 28 74 29 7b 7d 7d 64 69 28 22 50 49 49 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 74 28 28 66 Data Ascii: Ii(t){try{if(t){var n=q(t.nodeName),r=q(t.type);if("a"===n\|\|"button"===n\|\|"input"===n&&("button"===r\|\|"submit"===r))return t.innerText\|\|t.value\|\|t.getAttribute("text")\|\|t.text;var e=t.parentElement;if(e)return Ii(e)}}catch(t){}}di("PII",(function(){tt((f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.16	49794	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:58 UTC	782	OUT	GET /static/resources/media/logo-guidelines.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex
2024-03-29 13:44:59 UTC	457	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:59 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-370" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: REVALIDATED X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c394a7287af-IAD
2024-03-29 13:44:59 UTC	887	IN	Data Raw: 33 37 30 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 30 22 20 68 65 69 67 68 74 3d 22 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 30 20 32 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 2e 35 34 34 36 32 20 31 35 2e 36 33 39 38 43 32 2e 35 34 34 36 32 20 31 36 2e 35 35 39 20 33 2e 32 39 32 31 32 20 31 37 2e 33 30 36 35 20 34 2e 32 31 31 32 38 20 31 37 2e 33 30 36 35 48 35 2e 38 37 37 39 35 56 31 35 2e 36 33 39 38 48 34 2e 32 31 31 32 38 56 31 33 2e 39 37 33 31 48 32 2e 35 34 34 36 32 56 31 35 2e 36 33 39 38 5a 4d 31 35 2e 38 37 37 39 20 35 2e 36 33 39 38 31 43 31 35 2e 38 37 37 39 20 34 2e 37 32 Data Ascii: 370<svg width="20" height="20" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M2.54462 15.6398C2.54462 16.559 3.29212 17.3065 4.21128 17.3065H5.87795V15.6398H4.21128V13.9731H2.54462V15.6398ZM15.8779 5.63981C15.8779 4.72
2024-03-29 13:44:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.16	49796	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:58 UTC	778	OUT	GET /static/resources/media/user-circle.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex
2024-03-29 13:44:59 UTC	450	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:59 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-472" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: MISS X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c397ef820b2-IAD
2024-03-29 13:44:59 UTC	919	IN	Data Raw: 34 37 32 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 32 20 32 43 36 2e 35 37 39 20 32 20 32 20 36 2e 35 37 39 20 32 20 31 32 43 32 20 31 35 2e 31 38 39 20 33 2e 35 39 32 20 31 38 2e 30 37 38 20 36 20 31 39 2e 39 32 34 56 32 30 48 36 2e 31 30 32 43 37 2e 37 37 20 32 31 2e 32 34 35 20 39 2e 38 31 33 20 32 32 20 31 32 20 32 32 43 31 34 2e 31 38 37 20 32 32 20 31 36 2e 32 33 20 32 31 2e 32 34 35 20 31 37 2e 38 39 38 20 32 30 48 31 38 56 31 39 2e 39 32 34 43 32 30 2e 34 Data Ascii: 472<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M12 2C6.579 2 2 6.579 2 12C2 15.189 3.592 18.078 6 19.924V20H6.102C7.77 21.245 9.813 22 12 22C14.187 22 16.23 21.245 17.898 20H18V19.924C20.4
2024-03-29 13:44:59 UTC	226	IN	Data Raw: 37 32 20 36 20 38 20 37 2e 37 32 20 38 20 31 30 43 38 20 31 32 2e 32 38 20 39 2e 37 32 20 31 34 20 31 32 20 31 34 43 31 34 2e 32 38 20 31 34 20 31 36 20 31 32 2e 32 38 20 31 36 20 31 30 43 31 36 20 37 2e 37 32 20 31 34 2e 32 38 20 36 20 31 32 20 36 5a 4d 31 32 20 31 32 43 31 30 2e 38 32 32 20 31 32 20 31 30 20 31 31 2e 31 37 38 20 31 30 20 31 30 43 31 30 20 38 2e 38 32 32 20 31 30 2e 38 32 32 20 38 20 31 32 20 38 43 31 33 2e 31 37 38 20 38 20 31 34 20 38 2e 38 32 32 20 31 34 20 31 30 43 31 34 20 31 31 2e 31 37 38 20 31 33 2e 31 37 38 20 31 32 20 31 32 20 31 32 5a 22 0a 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 62 6c 61 63 6b 22 2f 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: 72 6 8 7.72 8 10C8 12.28 9.72 14 12 14C14.28 14 16 12.28 16 10C16 7.72 14.28 6 12 6ZM12 12C10.822 12 10 11.178 10 10C10 8.822 10.822 8 12 8C13.178 8 14 8.822 14 10C14 11.178 13.178 12 12 12Z" fill="black"/></svg>
2024-03-29 13:44:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.16	49787	146.75.28.157	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:58 UTC	518	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:59 UTC	511	IN	HTTP/1.1 200 OK Connection: close Content-Length: 57596 Last-Modified: Thu, 27 Oct 2022 18:55:37 GMT ETag: "32ad004436155ec972bc50e6238b5b67" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Content-Type: application/javascript; charset=utf-8 Accept-Ranges: bytes Date: Fri, 29 Mar 2024 13:44:58 GMT X-Served-By: cache-iad-kiad7000166-IAD X-Cache: HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT
2024-03-29 13:44:59 UTC	1379	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 36 31 37 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3b 74 2e 65 78 70 6f 72 74 73 3d 28 72 3d 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 26 26 28 72 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2e 63 72 79 70 74 6f 26 26 28 72 3d 73 65 6c 66 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 26 26 28 72 3d Data Ascii: !function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=
2024-03-29 13:44:59 UTC	1379	IN	Data Raw: 68 69 73 2e 77 6f 72 64 73 3d 74 7c 7c 5b 5d 2c 74 68 69 73 2e 73 69 67 42 79 74 65 73 3d 6e 75 6c 6c 21 3d 65 3f 65 3a 34 2a 74 2e 6c 65 6e 67 74 68 7d 2c 74 6f 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 66 29 2e 73 74 72 69 6e 67 69 66 79 28 74 68 69 73 29 7d 2c 63 6f 6e 63 61 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 77 6f 72 64 73 2c 6e 3d 74 2e 77 6f 72 64 73 2c 72 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 2c 69 3d 74 2e 73 69 67 42 79 74 65 73 3b 69 66 28 74 68 69 73 2e 63 6c 61 6d 70 28 29 2c 72 25 34 29 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 69 3b 6f 2b 2b 29 7b 76 61 72 20 61 3d 6e 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 72 2b 6f 3e Data Ascii: his.words=t\|\|[],this.sigBytes=null!=e?e:4t.length},toString:function(t){return(t\|\|f).stringify(this)},concat:function(t){var e=this.words,n=t.words,r=this.sigBytes,i=t.sigBytes;if(this.clamp(),r%4)for(var o=0;o<i;o++){var a=n[o>>>2]>>>24-o%48&255;e[r+o>
2024-03-29 13:44:59 UTC	1379	IN	Data Raw: 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 2e 70 61 72 73 65 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 29 29 7d 7d 2c 70 3d 63 2e 42 75 66 66 65 72 65 64 42 6c 6f 63 6b 41 6c 67 6f 72 69 74 68 6d 3d 75 2e 65 78 74 65 6e 64 28 7b 72 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 64 61 74 61 3d 6e 65 77 20 73 2e 69 6e 69 74 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 3d 30 7d 2c 5f 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 68 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 Data Ascii: n(t){return d.parse(unescape(encodeURIComponent(t)))}},p=c.BufferedBlockAlgorithm=u.extend({reset:function(){this._data=new s.init,this._nDataBytes=0},_append:function(t){"string"==typeof t&&(t=h.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes
2024-03-29 13:44:59 UTC	1379	IN	Data Raw: 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 65 28 72 29 26 26 28 69 3c 38 26 26 28 63 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 2e 35 29 29 29 2c 75 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 31 2f 33 29 29 2c 69 2b 2b 29 2c 72 2b 2b 7d 28 29 3b 76 61 72 20 73 3d 5b 5d 2c 6c 3d 61 2e 53 48 41 32 35 36 3d 6f 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 69 2e 69 6e 69 74 28 63 2e 73 6c 69 63 65 28 30 29 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 68 69 73 2e 5f 68 61 73 68 2e 77 6f 72 64 73 2c 72 3d 6e 5b 30 5d 2c 69 3d 6e 5b 31 5d 2c 6f 3d 6e 5b 32 5d 2c 61 3d 6e 5b 33 5d 2c 63 Data Ascii: ar r=2,i=0;i<64;)e(r)&&(i<8&&(c[i]=n(t.pow(r,.5))),u[i]=n(t.pow(r,1/3)),i++),r++}();var s=[],l=a.SHA256=o.extend({_doReset:function(){this._hash=new i.init(c.slice(0))},_doProcessBlock:function(t,e){for(var n=this._hash.words,r=n[0],i=n[1],o=n[2],a=n[3],c
2024-03-29 13:44:59 UTC	1379	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 68 69 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 79 70 65 6f 66 20 74 2b 22 20 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 69 74 65 72 61 62 6c 65 28 63 61 6e 6e 6f 74 20 72 65 61 64 20 70 72 6f 70 65 72 74 79 20 53 79 6d 62 6f 6c 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 29 29 22 29 29 3b 76 61 72 20 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 3b 69 66 28 30 3d 3d 3d 72 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 28 5b 5d 29 3b 76 61 72 20 69 3d 72 2e 6c 65 6e 67 74 68 3b 66 75 Data Ascii: function(t){return new this((function(e,n){if(!t\|\|void 0===t.length)return n(new TypeError(typeof t+" "+t+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var r=Array.prototype.slice.call(t);if(0===r.length)return e([]);var i=r.length;fu
2024-03-29 13:44:59 UTC	1379	IN	Data Raw: 64 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 70 28 28 72 3d 6e 2c 69 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 61 70 70 6c 79 28 69 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 63 61 74 63 68 28 65 29 7b 66 28 74 2c 65 29 7d 76 61 72 20 72 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 2c 65 29 7b 74 2e 5f 73 74 61 74 65 3d 32 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 32 3d 3d 3d 74 2e 5f 73 74 61 74 65 26 26 30 3d 3d 3d 74 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 26 26 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 28 28 66 75 6e Data Ascii: d(t);if("function"==typeof n)return void p((r=n,i=e,function(){r.apply(i,arguments)}),t)}t._state=1,t._value=e,d(t)}catch(e){f(t,e)}var r,i}function f(t,e){t._state=2,t._value=e,d(t)}function d(t){2===t._state&&0===t._deferreds.length&&u._immediateFn((fun
2024-03-29 13:44:59 UTC	1379	IN	Data Raw: 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 28 74 29 7d 29 29 7d 2c 75 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 61 28 74 29 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 72 61 63 65 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 75 2e 72 65 73 6f 6c 76 65 28 74 5b 72 5d 29 2e 74 68 65 6e 28 65 2c 6e 29 7d 29 29 7d 2c 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 26 26 66 75 6e 63 Data Ascii: ew u((function(e,n){n(t)}))},u.race=function(t){return new u((function(e,n){if(!a(t))return n(new TypeError("Promise.race accepts an array"));for(var r=0,i=t.length;r<i;r++)u.resolve(t[r]).then(e,n)}))},u._immediateFn="function"==typeof setImmediate&&func
2024-03-29 13:44:59 UTC	1379	IN	Data Raw: 3d 69 29 74 68 72 6f 77 20 6f 3b 72 65 74 75 72 6e 20 43 28 29 7d 66 6f 72 28 6e 2e 6d 65 74 68 6f 64 3d 69 2c 6e 2e 61 72 67 3d 6f 3b 3b 29 7b 76 61 72 20 61 3d 6e 2e 64 65 6c 65 67 61 74 65 3b 69 66 28 61 29 7b 76 61 72 20 63 3d 67 28 61 2c 6e 29 3b 69 66 28 63 29 7b 69 66 28 63 3d 3d 3d 6c 29 63 6f 6e 74 69 6e 75 65 3b 72 65 74 75 72 6e 20 63 7d 7d 69 66 28 22 6e 65 78 74 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 6e 2e 73 65 6e 74 3d 6e 2e 5f 73 65 6e 74 3d 6e 2e 61 72 67 3b 65 6c 73 65 20 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 7b 69 66 28 22 73 75 73 70 65 6e 64 65 64 53 74 61 72 74 22 3d 3d 3d 72 29 74 68 72 6f 77 20 72 3d 22 63 6f 6d 70 6c 65 74 65 64 22 2c 6e 2e 61 72 67 3b 6e 2e 64 69 73 70 61 74 63 68 45 78 63 65 70 74 69 Data Ascii: =i)throw o;return C()}for(n.method=i,n.arg=o;;){var a=n.delegate;if(a){var c=g(a,n);if(c){if(c===l)continue;return c}}if("next"===n.method)n.sent=n._sent=n.arg;else if("throw"===n.method){if("suspendedStart"===r)throw r="completed",n.arg;n.dispatchExcepti
2024-03-29 13:44:59 UTC	1379	IN	Data Raw: 2c 61 29 7d 29 29 7d 72 65 74 75 72 6e 20 72 3d 72 3f 72 2e 74 68 65 6e 28 61 2c 61 29 3a 61 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 2e 69 74 65 72 61 74 6f 72 5b 65 2e 6d 65 74 68 6f 64 5d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 7b 69 66 28 65 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 7b 69 66 28 74 2e 69 74 65 72 61 74 6f 72 2e 72 65 74 75 72 6e 26 26 28 65 2e 6d 65 74 68 6f 64 3d 22 72 65 74 75 72 6e 22 2c 65 2e 61 72 67 3d 76 6f 69 64 20 30 2c 67 28 74 2c 65 29 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 29 72 65 74 75 72 6e 20 6c 3b 65 2e 6d 65 74 68 6f 64 3d 22 74 68 72 6f 77 22 2c 65 2e 61 72 67 3d 6e 65 77 20 54 79 70 65 45 72 Data Ascii: ,a)}))}return r=r?r.then(a,a):a()}}function g(t,e){var n=t.iterator[e.method];if(void 0===n){if(e.delegate=null,"throw"===e.method){if(t.iterator.return&&(e.method="return",e.arg=void 0,g(t,e),"throw"===e.method))return l;e.method="throw",e.arg=new TypeEr
2024-03-29 13:44:59 UTC	1379	IN	Data Raw: 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 21 21 65 26 26 28 65 3d 3d 3d 64 7c 7c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 3d 3d 3d 28 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 65 2e 6e 61 6d 65 29 29 7d 2c 74 2e 6d 61 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 68 29 3a 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 68 2c 63 28 74 2c 61 2c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 29 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 3d Data Ascii: ion=function(t){var e="function"==typeof t&&t.constructor;return!!e&&(e===d\|\|"GeneratorFunction"===(e.displayName\|\|e.name))},t.mark=function(t){return Object.setPrototypeOf?Object.setPrototypeOf(t,h):(t.__proto__=h,c(t,a,"GeneratorFunction")),t.prototype=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.16	49793	54.229.44.173	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:59 UTC	356	OUT	GET /api/v1/ip HTTP/1.1 Host: directory.cookieyes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:59 UTC	233	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:59 GMT Content-Type: text/html; charset=utf-8 Content-Length: 118 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * ETag: W/"76-sj/ttPj2gPNTa+x+nnpe8eNUiN4"
2024-03-29 13:44:59 UTC	118	IN	Data Raw: 7b 22 69 70 22 3a 22 31 30 32 2e 31 36 35 2e 34 38 2e 34 33 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 72 65 67 69 6f 6e 5f 63 6f 64 65 22 3a 22 44 43 22 2c 22 69 6e 5f 65 75 22 3a 66 61 6c 73 65 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"ip":"102.165.48.43","country":"US","country_name":"United States","region_code":"DC","in_eu":false,"continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.16	49797	18.154.227.129	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:59 UTC	506	OUT	GET /frame-modern.0c18727c.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:59 UTC	794	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 145093 Connection: close Date: Fri, 29 Mar 2024 13:45:00 GMT Last-Modified: Thu, 28 Mar 2024 12:00:20 GMT ETag: "479b48cd31017f146c1838ff8ea841f8" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: X72Xofd2nZVES0UmV4cy4xgh.EQ6D8ax Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 19818f9265689e7f5cbb430f8edbe402.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: iZWXhHCZwjjvZ5ID6INcE6qKrEeK9gaHZkFcCeS6cO8_ny7TuZD11A== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-03-29 13:44:59 UTC	358	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 07 7b db 48 b6 20 fa 57 28 5e 3f 5d 60 ba 04 31 29 90 1a b6 56 c9 96 6c 2b 58 c1 96 ed f5 d2 20 59 14 61 81 00 0d 80 a4 68 89 ff 7d cf 39 55 05 14 02 25 77 cf dc bb fb de f7 be 99 96 41 84 8a a7 4e 0e 86 61 b6 ff 7c 9c da 41 89 b3 88 05 cc 63 0e f3 db 8f 5b f5 5a bd d2 32 e8 9e 7a c1 6b 3f 96 ad f5 81 ed b8 bc 6f 8d c6 f5 72 ab 5e db de ac 33 b8 e9 f9 91 33 70 7a 76 e4 f8 9e 78 d4 6c d6 1b 55 7c e4 8f 79 60 47 7e 20 bf d8 ae 35 1a 78 3b 9c 74 47 4e 24 6e 36 1a d5 8d cd c5 ce 60 e2 f5 b0 81 92 63 70 93 7a 8c da 3e 5c ee 04 3c 9a 04 5e 29 30 22 73 11 bf 84 4f 1e 9d 81 b1 12 58 be e1 31 6e aa 4f 3c 3e 2b 1d 05 81 1f 18 e5 03 db 83 91 95 06 8e d7 2f 8d fc fe c4 e5 a5 ff 2c ff c1 ff 28 ff 67 d9 dc 89 86 81 3f 2b 45 56 cf ef Data Ascii: {H W(^?]`1)Vl+X Yah}9U%wANa\|Ac[Z2zk?or^33pzvxlU\|y`G~ 5x;tGN$n6`cpz>\<^)0"sOX1nO<>+/,(g?+EV
2024-03-29 13:44:59 UTC	16384	IN	Data Raw: dd 3b f5 a0 b6 51 d9 6e b2 6a bd b9 21 1e 78 ea 41 7d bb b1 b5 cd 9a 95 ea a6 78 10 aa 07 8d 8d cd 3a 34 b5 b5 5d a7 07 3d 5b 3d d8 a8 36 b6 6b ac 0e 5b 22 1e c4 5f 6c 6c 36 2a db 6c 6b ab be 4d 0f fa f1 17 db d5 c6 66 93 d5 1a 72 54 7d be 36 f0 83 91 7a ba 55 6b 6e 34 d8 56 b3 22 1f c6 f7 b7 eb 8d 0d b6 55 ab 57 e9 01 77 e3 91 55 eb 00 40 1b f5 8a 98 0b 8f e7 52 db dc da 94 f7 e2 41 d5 6b 95 ad 0a db dc aa 88 e6 79 14 2f d5 f6 46 95 6d 55 65 23 03 7b ed e4 32 6e 67 bb b9 c5 ea f1 23 27 1e d1 56 ad 06 1d 6f 6d 6d 89 07 f1 b2 57 1b f5 7a 83 6d 02 64 d3 83 61 3c 87 5a b5 06 33 6f 6c 36 c4 22 0e e3 a6 36 b7 6b 9b 1b 30 2c f5 20 48 56 63 bb 02 ab 51 dd 92 4d 4d e2 d5 dd a8 56 9a 6c b3 56 13 9d 3b fd b8 a9 5a a5 de 64 4d e8 48 3c 88 67 08 e0 52 df c0 79 88 07 Data Ascii: ;Qnj!xA}x:4]=[=6k["_ll6*lkMfrT}6zUkn4V"UWwU@RAky/FmUe#{2ng#'VommWzmda<Z3ol6"6k0, HVcQMMVlV;ZdMH<gRy
2024-03-29 13:44:59 UTC	16384	IN	Data Raw: e1 2c 58 7c 83 0d 00 74 27 b7 9e 8b ad a7 6f 5b 5f 2d cb 92 ed 3c 3d 7d fd 96 30 6b 13 f3 1b d3 71 60 0b 19 79 8d b7 8b 23 85 69 71 ae 0a c1 b0 34 84 73 4b 95 cd 65 72 71 f1 82 be 4d 1e 9c 3b f2 c7 35 c6 22 d7 51 ec 6d b1 1c 52 30 2a a7 10 4e 30 9b 74 49 e5 5a d3 61 84 e0 61 0e 4c 7b 26 8f 72 2a d2 2e ae d0 ac 80 5b af d0 2c f7 b9 a8 36 f3 f4 bf b8 36 73 4c b2 85 2a 23 46 46 48 4e c4 23 c9 0c f1 7e 07 75 d5 58 6c 59 54 f9 f5 74 77 88 be 15 a2 86 87 d2 8b 78 6d 0f 77 7b c7 4b 2a 7e 99 7f ae 55 77 73 1b 9a ad f8 8c 1b 6a cb 2a ec b4 b1 71 d7 aa 6a b3 2a bd 1e d9 dd ef a2 ea fd f3 2d 2e ab 21 7d 01 bc c1 38 5f 43 9a 79 a2 28 37 70 fb 38 21 ac 71 1f b1 4c 71 66 ca 3e 87 15 2d 93 bd d4 cb 4d cb ad 2c a8 35 ad 27 cc ce 83 06 fa a6 2e 03 0f ca 81 b5 04 48 9c ff Data Ascii: ,X\|t'o[_-<=}0kq`y#iq4sKerqM;5"QmR0N0tIZaaL{&r.[,66sL#FFHN#~uXlYTtwxmw{K~Uwsjqj-.!}8_Cy(7p8!qLqf>-M,5'.H
2024-03-29 13:44:59 UTC	1024	IN	Data Raw: fa 80 ce 75 a1 4a cb c6 27 06 0a 8b 35 b2 41 f1 5a fb 65 b4 d4 db 66 8e 78 48 a2 9d 24 28 6e 58 a5 c0 d3 ee 6e b9 77 e8 dd 66 b7 30 2a 8c 12 96 5a 83 1c 92 7e d6 db 9e 51 3f 80 d4 8f 39 82 96 04 e7 6d 4f 09 d1 98 9d 32 d8 e5 29 ba 1b 7c ea 5b 93 3f d6 27 d4 80 a6 6c 49 06 7b d9 97 04 61 ce b4 61 30 00 40 64 e0 16 1d dd ed db eb 35 50 cb f2 c4 cc f7 e3 cb f5 3d 7f 5f 84 ce aa 83 73 3e 49 45 8b 90 79 e4 92 65 12 21 5c f5 0e 3c ee 5a f4 1b 2e f5 ba fb e6 a6 71 0f 8b a0 9e 0d 64 ec f5 17 7e d5 ab c5 5a 22 65 90 53 13 30 64 18 bf b6 56 b4 94 9b 26 46 cb 38 a0 70 10 b2 17 df f6 e4 46 62 9a 19 05 0b a9 43 74 92 9f 5c 81 93 30 35 42 7f 74 b6 f7 84 8e 30 53 ef 9c d8 f3 17 c2 c7 11 6c f7 87 02 93 c4 67 8f 45 e1 53 1a 93 da c6 67 8d 9d 61 c3 6a 5a 29 3e f7 1b 3b 93 Data Ascii: uJ'5AZefxH$(nXnwf0*Z~Q?9mO2)\|[?'lI{aa0@d5P=_s>IEye!\<Z.qd~Z"eS0dV&F8pFbCt\05Bt0SlgESgajZ)>;
2024-03-29 13:44:59 UTC	16384	IN	Data Raw: 27 55 89 c6 99 f2 42 d8 87 67 fa b4 e5 c8 18 9b 68 67 f8 de e0 20 6c ca f0 88 03 59 ee 2e f4 61 7e 57 49 0f b4 d3 36 1d e6 15 c2 9a 71 f5 71 3d fb 84 e3 fa ba 8a 99 62 0f c6 55 26 10 8d 8d d6 db f7 3f 3c 56 57 2a 5f 5f a9 2f 61 6e de ed f5 68 fa 5e 4e 5e e6 dd 8b 0b f0 42 46 69 55 de d0 49 df 59 a8 77 46 95 4e 88 00 10 fa 0c b5 dd ef 2d ca 00 f1 28 55 81 7d 09 d8 53 0a 1f db b3 02 05 6d c1 4d 17 ee fc 55 63 0b cf ba 31 7c 1a cf 9f 73 67 ab 78 51 77 fd b1 7c 16 b5 73 ad d1 0a a4 54 de 40 96 0a 97 56 bb 7b 2b c8 a7 54 4e 6a ae d8 a9 4f f9 d6 82 ab af da a0 40 d9 8c ad 04 a9 8a c8 74 02 c9 d9 ab a9 15 3b 8e 41 41 a9 16 89 ae df 19 17 ea 10 be 28 56 c9 dc ae ab 9e 2a 24 73 f9 96 97 cb bc d5 ca 81 20 71 aa 2c 04 8a af c7 ab 46 95 85 b1 80 a9 c4 b9 56 ed 6b 05 Data Ascii: 'UBghg lY.a~WI6qq=bU&?<VW__/anh^N^BFiUIYwFN-(U}SmMUc1\|sgxQw\|sT@V{+TNjO@t;AA(V$s q,FVk
2024-03-29 13:44:59 UTC	16384	IN	Data Raw: 93 91 80 10 9c 83 46 6b 0b 11 2b b9 03 fc 32 c3 fa 4c ff d5 6f a3 d8 67 d8 b2 21 55 f6 1d 43 70 b2 0a f4 b5 02 e8 fd d2 37 66 a3 f0 27 b1 fc 51 e7 55 96 85 02 fd 3d f0 94 38 6e 43 4e 84 4c 3e b5 9a d4 a3 34 f9 f8 8c 41 98 1d 41 45 23 ca 0a 30 89 f4 77 d0 e4 1f d6 87 0a 6b b4 3e a9 47 f5 20 b6 2b 7c 9f 66 f0 42 ea 73 60 d6 30 e6 d4 89 47 28 53 ef 24 03 d6 d6 fc cb df 13 c1 a9 28 e8 5d d2 a6 f2 c3 6c e0 c1 35 42 17 ce e8 e0 e0 21 f6 f5 3c 11 bc 65 80 b7 d4 cb 2e 71 4f 13 c2 fe 52 62 6f d0 10 e2 a6 ec 87 2c 89 64 98 dd 62 62 3c 6b 62 7a 74 e4 07 60 0b d8 3b 10 f6 74 92 32 c3 01 c6 21 c2 67 a5 b9 c6 5d 64 c4 ba 82 59 b0 c9 4b 29 1d ef 84 18 27 f7 39 74 2e 30 56 a2 af c1 42 e3 8a 20 44 eb 71 c8 37 0a c4 0e f0 df 84 a9 be c8 3c c0 00 8a e0 6e c4 05 e5 23 04 11 Data Ascii: Fk+2Log!UCp7f'QU=8nCNL>4AAE#0wk>G +\|fBs`0G(S$(]l5B!<e.qORbo,dbb<kbzt`;t2!g]dYK)'9t.0VB Dq7<n#
2024-03-29 13:44:59 UTC	2048	IN	Data Raw: 4e 79 bc e2 11 32 84 61 c9 14 67 8f 4a 54 02 67 1f d6 ec 21 98 5c 9c 78 2e df 7b c4 70 ed 70 24 dc 88 01 94 58 32 dd 05 3f 19 43 a0 07 75 5c e2 b3 4e 51 13 f5 cd 78 14 18 3d 9e 8a 19 a2 22 2f c2 b4 47 09 9e 43 2d 14 33 b2 27 9e c7 f6 3a 2a e6 73 d5 8d 22 cf ba 25 1a dd cf 6b 03 dd bc 30 29 5a 83 3d 16 d4 6d 45 6f 30 f1 8a a5 37 1e 8d c7 9e 10 3a 1f 2d d0 8d 38 90 24 ff 1a bc ef c6 38 ba cd d7 e2 b9 07 08 34 b3 81 5d 5c 0b c4 62 b6 60 88 46 db 7b 31 9b 5d 3a da 21 2a ca e7 9a 3e de 77 bd 62 2d 60 e5 e6 bb 49 be 56 3b 30 d0 ca d7 b1 0b 6b bc 20 2c d7 98 ce 0a f8 35 16 20 00 93 90 20 2a 41 88 4d b9 71 70 11 a2 06 ac c3 8c d8 a7 cb d5 71 cc 02 7f 0f 92 19 b9 67 d1 2e 61 5c 6c aa ab 45 88 7b 51 92 e0 fb a3 b4 f7 2e bf fd e9 28 ed 0d e7 a7 b4 e9 b7 bd dc c0 44 Data Ascii: Ny2agJTg!\x.{pp$X2?Cu\NQx="/GC-3':s"%k0)Z=mEo07:-8$84]\b`F{1]:!>wb-`IV;0k ,5 *AMqpqg.a\lE{Q.(D
2024-03-29 13:44:59 UTC	16384	IN	Data Raw: b4 a2 f3 2c bf 77 e6 66 f5 07 1d de 5a 3a df 35 da ed f6 b4 54 9a 4f 40 a2 8f a1 34 cf 9c 11 ba 2c 49 f4 f1 f8 28 89 3c f0 4e 34 34 79 ed ee a4 6d 28 5d 9c 16 9d fa d6 e1 84 2d 0a 0c bd 4f 24 73 af 02 16 66 f0 f3 a2 bb 69 87 d6 17 7b 8e 41 75 7b 7b ab b7 14 6f 0e 6d c2 d3 87 e3 7e f6 91 76 bc 79 db 70 d1 f9 96 34 35 5d 8d 3b f5 14 b5 a1 e3 6f 0f a6 d9 01 9d 39 2d 45 1b de 71 7b 88 77 7f 3a a0 fe e9 f0 e1 b2 be 55 66 26 f4 96 e2 ae 60 1d f1 e9 d3 f8 d3 a7 e1 a7 4f 93 4f 9f 1a 53 2e 29 1e e4 08 d3 74 a4 0a 3d 9f 8c 1f 65 a7 0f 26 1f c6 9d 79 79 4d 4f 5c 67 d6 1e 1c 34 1b e5 88 9b ce bc f4 a7 23 9c 9d 96 77 1d eb 09 ce 92 fc 8b 2b 1f 5f 27 56 76 7a 71 81 ef e0 70 15 04 71 1f d2 69 ff 49 76 d0 68 34 cc 61 9f 4f c6 11 41 5f 0e 2a 8b 2e f6 66 61 c7 4e 8f 76 53 Data Ascii: ,wfZ:5TO@4,I(<N44ym(]-O$sfi{Au{{om~vyp45];o9-Eq{w:Uf&`OOS.)t=e&yyMO\g4#w+_'VvzqpqiIvh4aOA_*.faNvS
2024-03-29 13:44:59 UTC	1024	IN	Data Raw: e4 98 9f da bd e6 1d f3 1a e1 98 76 a5 61 b3 87 c1 cf f1 b8 47 6a 91 52 c6 c4 43 06 65 70 bb 2b 9f 7c 0c 3f b6 4e 1f ae 5b e3 47 97 36 9d 2c 43 25 4a 87 82 71 d0 1d 24 ba 19 21 91 cc 63 0c 69 47 f3 2b b0 b4 b3 b0 dd 96 55 fe 74 ec 85 dc 21 8a 75 66 c8 e7 8a 35 44 ca 04 92 e5 7a b8 d7 29 71 c8 41 59 98 f4 89 0d f2 ed a1 9c a5 0d 9e 43 14 5d 72 d7 00 60 85 ac ed 95 cf a1 ef 7d b2 2a 51 97 79 d2 b3 99 9b f1 31 25 d1 63 04 db 8c c6 94 87 e1 5a e4 61 b8 50 87 e9 52 d6 19 9e 74 4e 0d 4f 68 4e df 3e a1 4d 09 a8 04 ca 33 ff 7a 70 d7 19 ff eb 93 65 97 e2 04 a1 c1 09 4f d3 36 eb 0a 2e 62 7c 08 ec 0f bf 62 e3 7f 61 b6 9a 04 18 25 6d 0d 2b cc bb bf bf 1b 4b 16 3d 28 23 54 c0 12 65 e0 b1 e6 1c 37 a0 3c c2 b1 57 78 12 df 3d e4 82 03 bf c7 73 52 70 0f 83 19 20 ee 7c 3c Data Ascii: vaGjRCep+\|?N[G6,C%Jq$!ciG+Ut!uf5Dz)qAYC]r`}*Qy1%cZaPRtNOhN>M3zpeO6.b\|ba%m+K=(#Te7<Wx=sRp \|<
2024-03-29 13:44:59 UTC	16384	IN	Data Raw: 4a fe 47 2f f7 84 69 60 df f5 ae b4 17 17 a0 3b 0f 03 8c b7 e0 78 be 37 ea fb 43 a8 79 8e 4e 28 82 45 87 58 eb d2 f7 2f 7b 6c c3 73 7a a3 c8 6d 53 91 9b ae e5 0f a3 a2 2f 17 11 8d 4b 9e 2d 0e 5e 8f 09 31 b4 47 44 38 98 0a 2f 9c 2b ff ca 65 db 7e df 71 3d 71 17 8b ee 56 ea 69 ee 9e b8 17 a1 f6 49 9c 7b b1 c5 22 1c 1d e8 94 ee 0f f4 82 75 5c c7 68 22 7e 87 76 f1 70 c2 bb 44 33 fa ab e3 01 e6 08 dd b9 85 c9 c2 bb 2d 21 08 10 d8 a5 6d 76 cd 7a 48 8f 6f fd e0 8a f2 18 e3 50 0c 07 17 01 cc eb 0e fa 5d 6f 71 df 2b 1c 85 bb ec f2 96 72 23 9c f8 a9 e8 66 a3 e4 41 7b a0 f0 66 d4 f2 83 56 d7 bf e1 14 8b d7 6c 7a 17 2d 3c c2 69 0d 2f 61 7e e8 3c fd 05 4a 19 d8 06 37 09 1e f9 47 cc e9 f7 f1 c2 97 36 b2 3c 63 64 a7 ef 42 17 c5 64 c8 7d 73 df bf f4 8f 83 9e 2c 6e c3 d2 Data Ascii: JG/i`;x7CyN(EX/{lszmS/K-^1GD8/+e~q=qViI{"u\h"~vpD3-!mvzHoP]oq+r#fA{fVlz-<i/a~<J7G6<cdBd}s,n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.16	49799	104.22.58.91	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:59 UTC	403	OUT	GET /client_data/9022a6a83360995949fccfed/audit-table/rCg5unVB.json HTTP/1.1 Host: cdn-cookieyes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:59 UTC	460	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:44:59 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 27 Mar 2024 14:20:02 GMT etag: W/"43ef-614a51a401e33" access-control-allow-origin: * access-control-allow-methods: GET, OPTIONS Cache-Control: max-age=0, must-revalidate, s-maxage=604800, proxy-revalidate CF-Cache-Status: HIT Server: cloudflare CF-RAY: 86c04c3b5bdd59f1-IAD
2024-03-29 13:44:59 UTC	909	IN	Data Raw: 34 33 65 66 0d 0a 7b 22 63 6f 6f 6b 69 65 73 22 3a 7b 22 6c 73 2e 73 65 73 73 69 6f 6e 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 6c 73 2e 73 65 73 73 69 6f 6e 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 37 20 64 61 79 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 3c 70 3e 54 68 69 73 20 63 6f 6f 6b 69 65 20 69 73 20 6e 65 65 64 65 64 20 74 6f 20 61 75 74 68 6f 72 69 7a 65 20 75 73 65 72 73 2e 3c 2f 70 3e 22 7d 2c 22 67 74 6d 5f 69 64 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 67 74 6d 5f 69 64 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 31 20 79 65 61 72 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 3c 74 61 62 6c 65 3e 5c 6e 3c 74 62 6f 64 79 3e 5c 6e 3c 74 72 3e 5c 6e 3c 74 64 3e 5c 6e 3c 70 3e 54 72 61 63 6b 73 20 68 6f 77 20 74 6f Data Ascii: 43ef{"cookies":{"ls.session":{"cookie_id":"ls.session","duration":"7 days","description":"<p>This cookie is needed to authorize users.</p>"},"gtm_id":{"cookie_id":"gtm_id","duration":"1 year","description":"<table>\n<tbody>\n<tr>\n<td>\n<p>Tracks how to
2024-03-29 13:44:59 UTC	1369	IN	Data Raw: 69 63 65 2d 69 64 2d 2a 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 38 20 6d 6f 6e 74 68 73 20 32 36 20 64 61 79 73 20 31 20 68 6f 75 72 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 49 6e 74 65 72 63 6f 6d 20 73 65 74 73 20 74 68 69 73 20 63 6f 6f 6b 69 65 20 74 68 61 74 20 61 6c 6c 6f 77 73 20 76 69 73 69 74 6f 72 73 20 74 6f 20 73 65 65 20 61 6e 79 20 63 6f 6e 76 65 72 73 61 74 69 6f 6e 73 20 74 68 65 79 27 76 65 20 68 61 64 20 6f 6e 20 49 6e 74 65 72 63 6f 6d 20 77 65 62 73 69 74 65 73 2e 22 7d 2c 22 63 65 78 2d 73 65 73 73 69 6f 6e 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 63 65 78 2d 73 65 73 73 69 6f 6e 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 73 65 73 73 69 6f 6e 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 44 65 73 63 72 69 70 74 Data Ascii: ice-id-*","duration":"8 months 26 days 1 hour","description":"Intercom sets this cookie that allows visitors to see any conversations they've had on Intercom websites."},"cex-session":{"cookie_id":"cex-session","duration":"session","description":"Descript
2024-03-29 13:44:59 UTC	1369	IN	Data Raw: 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 69 73 20 63 6f 6d 70 6c 65 74 65 64 2e 3c 2f 70 3e 22 7d 2c 22 6c 6f 67 69 6e 5f 69 6e 74 65 72 61 63 74 69 6f 6e 5f 75 72 6c 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 6c 6f 67 69 6e 5f 69 6e 74 65 72 61 63 74 69 6f 6e 5f 75 72 6c 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 37 20 64 61 79 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 3c 70 3e 54 68 69 73 20 63 6f 6f 6b 69 65 20 69 73 20 6e 65 65 64 65 64 20 74 6f 20 61 75 74 68 6f 72 69 7a 65 20 75 73 65 72 73 2e 3c 2f 70 3e 22 7d 2c 22 70 6f 73 74 5f 6c 6f 67 6f 75 74 5f 72 65 64 69 72 65 63 74 5f 75 72 69 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 70 6f 73 74 5f 6c 6f 67 6f 75 74 5f 72 65 64 69 72 65 63 74 5f 75 72 69 22 2c 22 64 75 72 61 74 69 6f Data Ascii: uthorization is completed.</p>"},"login_interaction_url":{"cookie_id":"login_interaction_url","duration":"7 days","description":"<p>This cookie is needed to authorize users.</p>"},"post_logout_redirect_uri":{"cookie_id":"post_logout_redirect_uri","duratio
2024-03-29 13:44:59 UTC	1369	IN	Data Raw: 65 63 61 70 74 63 68 61 20 73 65 72 76 69 63 65 20 73 65 74 73 20 74 68 69 73 20 63 6f 6f 6b 69 65 20 74 6f 20 69 64 65 6e 74 69 66 79 20 62 6f 74 73 20 74 6f 20 70 72 6f 74 65 63 74 20 74 68 65 20 77 65 62 73 69 74 65 20 61 67 61 69 6e 73 74 20 6d 61 6c 69 63 69 6f 75 73 20 73 70 61 6d 20 61 74 74 61 63 6b 73 2e 22 7d 2c 22 70 72 6f 66 69 6c 65 2e 73 65 73 73 69 6f 6e 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 70 72 6f 66 69 6c 65 2e 73 65 73 73 69 6f 6e 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 73 65 73 73 69 6f 6e 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 3c 70 3e 54 68 69 73 20 63 6f 6f 6b 69 65 20 69 73 20 6e 65 65 64 65 64 20 74 6f 20 61 75 74 68 6f 72 69 7a 65 20 75 73 65 72 73 2e 3c 2f 70 3e 22 7d 2c 22 62 75 6e 64 6c 65 22 3a 7b 22 Data Ascii: ecaptcha service sets this cookie to identify bots to protect the website against malicious spam attacks."},"profile.session":{"cookie_id":"profile.session","duration":"session","description":"<p>This cookie is needed to authorize users.</p>"},"bundle":{"
2024-03-29 13:44:59 UTC	1369	IN	Data Raw: 6e 22 3a 22 37 20 64 61 79 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 3c 70 3e 54 68 69 73 20 63 6f 6f 6b 69 65 20 69 73 20 6e 65 65 64 65 64 20 74 6f 20 61 75 74 68 6f 72 69 7a 65 20 75 73 65 72 73 2e 3c 2f 70 3e 22 7d 2c 22 70 72 6f 76 65 5f 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 70 72 6f 76 65 5f 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 37 20 64 61 79 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 3c 70 3e 54 68 69 73 20 63 6f 6f 6b 69 65 20 69 73 20 6e 65 65 64 65 64 20 74 6f 20 61 75 74 68 6f 72 69 7a 65 20 75 73 65 72 73 2e 3c 2f 70 3e 22 7d 2c 22 75 73 65 72 5f 69 64 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 75 73 65 72 5f 69 64 22 2c 22 Data Ascii: n":"7 days","description":"<p>This cookie is needed to authorize users.</p>"},"prove_authorization":{"cookie_id":"prove_authorization","duration":"7 days","description":"<p>This cookie is needed to authorize users.</p>"},"user_id":{"cookie_id":"user_id","
2024-03-29 13:44:59 UTC	1369	IN	Data Raw: 74 20 63 6f 6c 6c 65 63 74 20 6f 72 20 73 74 6f 72 65 20 61 6e 79 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 73 69 74 65 20 76 69 73 69 74 6f 72 73 2e 22 7d 2c 22 41 57 53 41 4c 42 43 4f 52 53 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 41 57 53 41 4c 42 43 4f 52 53 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 37 20 64 61 79 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 41 6d 61 7a 6f 6e 20 57 65 62 20 53 65 72 76 69 63 65 73 20 73 65 74 20 74 68 69 73 20 63 6f 6f 6b 69 65 20 66 6f 72 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 2e 22 7d 2c 22 63 65 78 2d 66 78 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 63 65 78 2d 66 78 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 31 20 6d 6f 6e 74 68 22 2c Data Ascii: t collect or store any personal information about the site visitors."},"AWSALBCORS":{"cookie_id":"AWSALBCORS","duration":"7 days","description":"Amazon Web Services set this cookie for load balancing."},"cex-fx":{"cookie_id":"cex-fx","duration":"1 month",
2024-03-29 13:44:59 UTC	1369	IN	Data Raw: 74 6f 72 65 20 73 74 61 74 69 73 74 69 63 61 6c 20 64 61 74 61 20 6f 66 20 75 73 65 72 73 27 20 62 65 68 61 76 69 6f 75 72 20 6f 6e 20 74 68 65 20 77 65 62 73 69 74 65 2c 20 77 68 69 63 68 20 63 61 6e 20 62 65 20 75 73 65 64 20 66 6f 72 20 69 6e 74 65 72 6e 61 6c 20 61 6e 61 6c 79 74 69 63 73 20 62 79 20 74 68 65 20 77 65 62 73 69 74 65 20 6f 70 65 72 61 74 6f 72 2e 22 7d 2c 22 72 6c 5f 70 61 67 65 5f 69 6e 69 74 5f 72 65 66 65 72 72 65 72 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 72 6c 5f 70 61 67 65 5f 69 6e 69 74 5f 72 65 66 65 72 72 65 72 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 31 20 79 65 61 72 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 52 75 64 64 65 72 73 74 61 63 6b 20 73 65 74 73 20 74 68 69 73 20 63 6f 6f 6b 69 65 2c 20 77 68 69 Data Ascii: tore statistical data of users' behaviour on the website, which can be used for internal analytics by the website operator."},"rl_page_init_referrer":{"cookie_id":"rl_page_init_referrer","duration":"1 year","description":"Rudderstack sets this cookie, whi
2024-03-29 13:44:59 UTC	1369	IN	Data Raw: 6f 66 20 74 68 65 20 55 73 65 72 2e 22 7d 2c 22 69 6e 69 74 69 61 6c 54 72 61 66 66 69 63 53 6f 75 72 63 65 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 69 6e 69 74 69 61 6c 54 72 61 66 66 69 63 53 6f 75 72 63 65 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 31 20 79 65 61 72 20 31 20 6d 6f 6e 74 68 20 34 20 64 61 79 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 3c 70 3e 55 73 69 6e 67 20 66 6f 72 20 64 65 74 65 72 6d 69 6e 69 6e 67 20 74 72 61 66 66 69 63 20 73 6f 75 72 63 65 3c 2f 70 3e 22 7d 2c 22 5f 68 6a 48 61 73 43 61 63 68 65 64 55 73 65 72 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 5f 68 6a 48 61 73 43 61 63 68 65 64 55 73 65 72 41 74 74 72 69 62 75 74 65 73 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 73 65 Data Ascii: of the User."},"initialTrafficSource":{"cookie_id":"initialTrafficSource","duration":"1 year 1 month 4 days","description":"<p>Using for determining traffic source</p>"},"_hjHasCachedUserAttributes":{"cookie_id":"_hjHasCachedUserAttributes","duration":"se
2024-03-29 13:44:59 UTC	1369	IN	Data Raw: 65 20 73 61 6d 65 20 75 73 65 72 20 49 44 2c 20 77 68 69 63 68 20 70 65 72 73 69 73 74 73 20 69 6e 20 74 68 65 20 48 6f 74 6a 61 72 20 55 73 65 72 20 49 44 2c 20 77 68 69 63 68 20 69 73 20 75 6e 69 71 75 65 20 74 6f 20 74 68 61 74 20 73 69 74 65 2e 22 7d 2c 22 5f 67 61 5f 2a 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 5f 67 61 5f 2a 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 31 20 79 65 61 72 20 31 20 6d 6f 6e 74 68 20 34 20 64 61 79 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 47 6f 6f 67 6c 65 20 41 6e 61 6c 79 74 69 63 73 20 73 65 74 73 20 74 68 69 73 20 63 6f 6f 6b 69 65 20 74 6f 20 73 74 6f 72 65 20 61 6e 64 20 63 6f 75 6e 74 20 70 61 67 65 20 76 69 65 77 73 2e 22 7d 2c 22 5f 67 61 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 5f 67 61 Data Ascii: e same user ID, which persists in the Hotjar User ID, which is unique to that site."},"_ga_":{"cookie_id":"_ga_","duration":"1 year 1 month 4 days","description":"Google Analytics sets this cookie to store and count page views."},"_ga":{"cookie_id":"_ga
2024-03-29 13:44:59 UTC	1369	IN	Data Raw: 44 54 65 73 74 22 3a 7b 22 63 6f 6f 6b 69 65 5f 69 64 22 3a 22 5f 68 6a 54 4c 44 54 65 73 74 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 22 73 65 73 73 69 6f 6e 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 6f 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 6d 6f 73 74 20 67 65 6e 65 72 69 63 20 63 6f 6f 6b 69 65 20 70 61 74 68 20 74 68 61 74 20 68 61 73 20 74 6f 20 62 65 20 75 73 65 64 20 69 6e 73 74 65 61 64 20 6f 66 20 74 68 65 20 70 61 67 65 20 68 6f 73 74 6e 61 6d 65 2c 20 48 6f 74 6a 61 72 20 73 65 74 73 20 74 68 65 20 5f 68 6a 54 4c 44 54 65 73 74 20 63 6f 6f 6b 69 65 20 74 6f 20 73 74 6f 72 65 20 64 69 66 66 65 72 65 6e 74 20 55 52 4c 20 73 75 62 73 74 72 69 6e 67 20 61 6c 74 65 72 6e 61 74 69 76 65 73 20 75 6e 74 69 6c 20 69 74 20 66 61 69 6c 73 Data Ascii: DTest":{"cookie_id":"_hjTLDTest","duration":"session","description":"To determine the most generic cookie path that has to be used instead of the page hostname, Hotjar sets the _hjTLDTest cookie to store different URL substring alternatives until it fails

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.16	49798	18.154.227.129	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:59 UTC	507	OUT	GET /vendor-modern.9921b73c.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:59 UTC	794	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 151135 Connection: close Date: Fri, 29 Mar 2024 13:45:00 GMT Last-Modified: Thu, 28 Mar 2024 12:00:21 GMT ETag: "ae95e8cfe55350008dcd098ebbe4cee3" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: SnUU0Zq1h.U6bgKayiI8ORwV6RdgPhka Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 83e647ac155b0cf3a9869914f5de36a4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: CzYJjkxpPqciF_-10Y2afYdgqaFvmrzDStZg8iFlZ5TlMEhxAnmtLQ== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-03-29 13:44:59 UTC	16384	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 69 7b db 38 96 28 fc fd fd 15 36 27 ed 21 23 5a 96 e4 9d 32 a3 c9 e2 54 f9 76 12 67 62 a7 aa fa 2a 2a 3d 94 08 49 2c 53 a4 42 52 5e ca d2 7f 7f cf 39 58 08 2e 72 92 ea 9e e7 ce 87 ee ea 58 c4 0e 1c 9c 15 38 00 f6 9e 6f 6f bd 8d 93 ad 30 18 b3 28 65 5b 41 34 89 93 b9 97 05 71 b4 b5 08 99 07 51 29 63 5b b7 2c f2 e3 64 77 1e fb 2c 89 9a a7 a7 9d f6 e8 78 7f dc fc 23 6d be bb 78 7d fe e1 ea bc 99 dd 67 5b cf f7 fe 3f 73 1a c6 23 2f bc 9e 05 69 f3 8e 8d 16 de f8 e6 f5 6c 19 dd 04 51 c6 92 71 3c 1f fe 91 ba df ce b2 5a f5 07 56 73 b1 4c 67 66 bf 7f d0 ee b4 07 f6 e3 f1 c1 c1 e1 89 63 32 3b b3 13 cb 7d f1 68 2c b1 6f 59 12 8c 33 a3 7b 39 fa 83 8d b3 a6 cf 26 41 c4 3e 26 f1 82 25 d9 83 99 d9 c6 70 c8 d2 f7 b1 bf 0c 99 61 3f de Data Ascii: i{8(6'!#Z2Tvgb**=I,SBR^9X.rX8oo0(e[A4qQ)c[,dw,x#mx}g[?s#/ilQq<ZVsLgfc2;}h,oY3{9&A>&%pa?
2024-03-29 13:44:59 UTC	16384	IN	Data Raw: 09 6f 97 1e 4c cf d7 7e bd b5 dd 39 39 aa 21 f8 76 eb d4 22 2a c7 57 cc 35 2a c7 47 ce f9 a3 e6 44 fe f8 a6 f9 51 bb cd 5f 34 3f c1 32 63 c1 2d f4 47 cd ad c7 c2 93 e5 45 06 51 b8 50 78 8c cf 7a aa 6b ff f8 23 2e 13 ed 22 40 bc fa 36 2e c4 04 74 73 ad 1e e3 d1 4b d7 7a 0c 3e 06 3c 06 0c 56 e4 10 f9 8b 38 40 58 4b 6e 14 47 1f d8 fd 32 7d 29 ef cd 76 a3 62 c2 87 38 cb d3 62 95 f6 7a e6 45 11 0b cf ef 17 41 c2 7c 37 50 09 6f 21 2f 88 97 eb f8 3c c5 b5 ed 80 26 3a 62 34 68 57 5e 77 b7 4c 59 f2 09 74 12 d7 b7 97 a8 15 5c 2e 30 39 35 41 eb a6 1b 53 af 40 cf c3 2b cb e8 c8 cf bb 78 3a 65 09 e8 53 bc 30 57 fc f2 4a 53 57 5d 92 17 24 20 17 79 c2 1b 50 00 d0 c7 58 1c 22 5a 4e 26 2c 91 a4 43 2f 13 bf a2 28 49 f7 63 ad 3a 3d 97 d6 8c cc 8a 4a 53 06 da f0 15 c0 92 13 Data Ascii: oL~99!v"W5GDQ_4?2c-GEQPxzk#."@6.tsKz><V8@XKnG2})vb8bzEA\|7Po!/<&:b4hW^wLYt\.095AS@+x:eS0WJSW]$ yPX"ZN&,C/(Ic:=JS
2024-03-29 13:44:59 UTC	325	IN	Data Raw: 99 7c af 16 4b fb c6 86 a5 6d cb 7e 52 f5 0b a9 72 64 24 5d 58 e1 9a ab 1b 7d a3 89 b7 94 f2 88 f8 02 20 61 96 16 c6 7d 64 be fb ce e8 41 89 1d ee d5 74 9e c0 63 35 2d 9e 49 3f 8e e8 88 f8 b1 54 da 91 16 32 b6 54 62 d6 85 2b e2 89 f7 f8 87 35 b5 32 d3 17 43 a4 27 e2 e0 81 dd fc 83 bb f9 87 db 0d 02 b3 d5 09 f7 4a 5d f0 cf f6 0e d4 c7 cd eb 4c c8 67 28 02 28 8e 01 ff 9a 91 00 e7 5f 92 7c 65 6e 19 dd df 24 98 c9 68 2e 49 22 0d c6 63 3a be bc 3c 71 50 0a 40 60 a0 24 d7 89 8d 31 50 74 e9 49 ac 80 d9 df 7b 01 08 22 e7 e9 18 1d 41 92 d5 68 a3 67 3e 0f 1f 31 f4 07 64 99 ef a2 f5 3e 66 e8 24 54 80 5d 8f a3 0f 7e 2c 66 81 18 61 1e 45 c9 e2 e3 48 1c ec 2c a6 91 5f c2 74 e9 93 93 00 0b 2d 39 cf 8d 65 4a 6f 8a f3 1c 16 7b 04 74 7b 7a 7b eb 9b 26 2b 84 8b c5 58 d2 fa Data Ascii: \|Km~Rrd$]X} a}dAtc5-I?T2Tb+52C'J]Lg((_\|en$h.I"c:<qP@`$1PtI{"Ahg>1d>f$T]~,faEH,_t-9eJo{t{z{&+X
2024-03-29 13:44:59 UTC	16384	IN	Data Raw: 0a 67 cf 26 be 9b 39 b7 54 4d 50 6b 7e 43 33 2e 66 43 ca e7 a4 8f 77 8f 53 d0 b1 2b e9 0f c9 75 79 98 54 da ff 89 33 69 29 67 a1 a2 74 1f 28 f3 09 be 45 49 ce 7d 9c 47 4b 8e ba a5 7a 32 75 c1 a6 17 3f 70 0d 90 53 ac 15 2d 4b f1 a0 5e 9f be 42 a1 a7 d2 6d ce 0d 0a 91 28 0e a8 5d 20 db 0e b5 8f 7d ab df 3d 4b 1c 68 ad 2c 7c fd bc b6 90 be a7 2e 3b a8 6e ed c8 c8 57 34 c9 d2 27 66 19 db 46 e9 dd 43 4e 32 86 3d d6 be af 72 23 dd 15 fa 9c 35 46 7d 6f 46 25 f5 0a 59 b4 1a 75 f3 ea 1a 8c 1b 2d bb 56 ed be 62 89 b8 01 56 37 a4 2e b1 aa d4 17 b5 b6 48 70 31 03 13 31 b3 fc 45 60 39 97 97 17 2d 81 2f 5b 61 8c 59 54 cd 9d be b4 87 8e 9b 75 48 3e 36 8e c0 bd 06 50 29 ee 42 b4 c0 a8 f4 49 93 8c 9d 9b b3 a9 6a 42 ce b1 0a 13 ae e4 56 61 19 fa aa 9a 24 94 e0 4b e5 66 e3 Data Ascii: g&9TMPk~C3.fCwS+uyT3i)gt(EI}GKz2u?pS-K^Bm(] }=Kh,\|.;nW4'fFCN2=r#5F}oF%Yu-VbV7.Hp11E`9-/[aYTuH>6P)BIjBVa$Kf
2024-03-29 13:44:59 UTC	3824	IN	Data Raw: 5e 3e 5e 7f 7a ef 64 2c 13 a2 36 90 c0 14 5f 3e 7b b1 10 47 68 43 a6 98 d9 a9 7c a9 a8 b8 25 ed 83 8c 11 b3 97 75 ee 63 1d 11 23 25 2d 2f cf f0 81 b9 83 d2 08 62 70 36 fb be 7c f9 ec cf b0 27 96 fb c2 93 97 8f 37 d6 99 d7 d6 f4 5a 7b 54 f4 d0 c8 93 66 25 a6 89 39 cc 67 20 4d a1 30 5b bb d5 6a ec c1 05 b5 15 1f b5 77 50 b8 d9 5c bf 9b b4 70 c9 42 a2 87 08 25 33 43 af 4b b3 f2 13 23 e6 0e 0d c3 39 36 13 c3 0c 9f 9b 4f 5f ae 03 c8 4d f1 35 3c d8 18 6a 2a fd 16 3a f1 04 dd 5f 30 5d b5 4e 3f eb 81 54 3b eb 1a 27 a1 4b b8 fa 39 89 bf bc 8f a7 e4 17 8d 81 95 9c 3f 94 a3 09 a2 b1 ca bc ef cb 5f e4 27 7b 19 f4 ae 91 a3 8b e8 5f 71 8d d8 27 a2 7f e1 77 49 f7 e1 5f 51 f7 ce 85 2f 5c cb ca 18 d2 8c 75 e1 9f db 51 64 f1 30 1e 25 51 c2 9d 70 f6 86 6a 0e db da b2 0d d7 Data Ascii: ^>^zd,6_>{GhC\|%uc#%-/bp6\|'7Z{Tf%9g M0[jwP\pB%3CK#96O_M5<j*:_0]N?T;'K9?_'{_q'wI_Q/\uQd0%Qpj
2024-03-29 13:44:59 UTC	16384	IN	Data Raw: c8 ca cc 31 b8 a1 45 25 38 47 97 af 98 23 9f f3 61 2b 4d 82 29 41 e4 5d c4 6e 55 f3 4f 4d c7 d6 53 bb 6f 45 ee 53 67 bd 6f ab 24 c7 53 72 9e 39 bb 35 7a 7f e4 be 80 44 e2 9c 60 01 77 5d ca da be ce e0 22 e1 87 e3 07 67 c1 74 6c 19 ad ec c1 8b cc 12 cc 64 c6 45 d1 50 f0 19 62 5f 65 6c 02 e8 98 49 df 75 9e 43 a7 9a 35 f5 64 d3 bc 13 87 cf 5e f7 58 18 70 dc 4a 2b 77 0e 1b f5 03 21 c5 4f ce 2a e7 de 15 c1 4b 51 0c c2 5b a8 bf d0 50 66 c4 77 ab 7d 62 43 cb 09 0d aa 8b 28 3b 6c cd 0d 91 d0 ad e6 08 30 63 96 7c 37 88 fb 5b 15 8a 8a d6 e1 91 df 2a 02 81 da 60 53 97 e2 d4 68 e9 ff 4e b2 0b 86 44 38 b2 c1 7d 80 bf 81 b5 9c ef 39 8b 1b a6 2e 75 2b b8 87 d9 42 8d b3 16 41 a5 5b 65 9f c6 f6 ed 61 ae c4 74 e9 18 3f db 5f 29 5e c7 8b 52 85 c3 ff bb f3 81 a6 a9 75 9d 3f Data Ascii: 1E%8G#a+M)A]nUOMSoESgo$Sr95zD`w]"gtldEPb_elIuC5d^XpJ+w!OKQ[Pfw}bC(;l0c\|7[`ShND8}9.u+BA[eat?_)^Ru?
2024-03-29 13:44:59 UTC	1024	IN	Data Raw: 6b 2f 99 19 95 81 9d d5 5e ee de 22 8e 09 06 e5 b2 d0 d1 8a 78 3e 88 28 09 16 0e 9b bb 48 65 06 c2 49 1a 8e 11 9f 28 d1 6e bb 53 db c4 d1 2b cb 9d c8 ca a4 49 4b b4 79 32 02 16 82 e8 09 ac 44 b9 0c e1 17 9b d9 f4 14 50 53 e6 72 3e 04 a4 44 11 7e c8 e0 4d 0e 3b 45 53 28 08 38 b1 39 0e 6a 2d 39 d4 83 6a bb 21 cd 2a eb 07 ad 03 6d 56 d0 41 83 b9 fe 16 66 4e 6e 11 54 18 6e e3 7b 7b 60 0a fa 73 6b 2a 9c fb 32 43 17 64 62 64 99 0a 70 33 56 af e7 0a d6 16 f7 99 f7 f2 9c 86 f8 b2 56 bd 55 c4 0a 9a ba a5 0e 9f 80 20 15 dc 30 ed 53 3f 40 8c c0 45 7a 44 e6 a9 b6 66 ca 42 8f c3 4e e1 9e 92 1c e4 88 a8 b8 b1 08 4d 1a 43 2a 65 fa 3b 04 ce 9c 0f c9 98 a8 f8 b1 a2 e2 17 c8 0a ea f1 b3 73 26 0f f1 7c cf a0 24 27 7d 44 a5 4f 90 af 8f 3a 28 97 4a 4c 44 8f 95 9b 68 ea cb 34 Data Ascii: k/^"x>(HeI(nS+IKy2DPSr>D~M;ES(89j-9j!mVAfNnTn{{`sk2Cdbdp3VVU 0S?@EzDfBNMC*e;s&\|$'}DO:(JLDh4
2024-03-29 13:44:59 UTC	9592	IN	Data Raw: da c0 29 b9 5b 65 7f b5 fd e4 5e d4 af 76 a3 32 bd c9 8a dd 98 ae a2 6e 6c f3 dd b8 0c 9d 5b e4 26 f7 62 6a 12 53 d3 7b f7 aa 0e fe ba 69 94 f1 40 9a 2c 46 b6 b6 62 e5 20 d6 83 b0 9c 06 aa 60 82 b8 7a 58 6b 7f 43 95 e8 56 02 5c 89 65 62 4d 83 33 fc dd dd 8d f9 d4 1c 6e 81 4b 46 b2 1c 53 df e8 57 e6 d4 90 15 e2 10 32 72 e0 44 fc 91 3e 7f a6 85 33 0c 6f df c7 48 51 65 8d 61 d3 44 bf 67 87 c2 be 33 36 92 11 50 af 9d 56 ab 68 aa 0c 05 98 c4 c9 39 33 df 66 b3 71 c8 64 2b b4 61 fa 04 29 82 66 ee 2e fa 0b 2d 83 db ac 21 d3 41 d8 d7 32 c5 26 a9 79 07 44 9a 86 e9 85 00 09 65 91 f2 dd 33 6d 32 90 61 49 18 bd 77 e9 ae 98 8a 04 0d 25 d7 5e 2d 31 89 5c bb 93 b8 ee fe 93 10 4e 72 c9 75 bf b4 5f 2d 75 99 bd 6b 16 f3 77 8d da 41 95 99 93 3b 5f 1c cd cb 77 6e 31 a8 ec fb Data Ascii: )[e^v2nl[&bjS{i@,Fb `zXkCV\ebM3nKFSW2rD>3oHQeaDg36PVh93fqd+a)f.-!A2&yDe3m2aIw%^-1\Nru_-ukwA;_wn1
2024-03-29 13:44:59 UTC	16384	IN	Data Raw: ed ef db d9 42 7f cf c0 9b 7b 8c 26 9f 39 5d b3 96 e7 96 2e 0c c2 81 f7 8e a3 90 44 9c 67 dc f8 d0 d8 79 91 a6 a5 95 e2 f3 5a 5d 1a 26 59 96 57 4b 27 72 89 14 97 a3 a5 cb b4 3a a7 cd bb 94 17 4b c6 e1 cb d2 84 c6 c5 14 4d 90 e0 58 e9 f5 cb 27 46 ea a2 19 e0 12 d6 d9 86 a4 43 fd 88 c9 fa 64 dd 99 ca 23 58 13 96 94 02 81 82 84 e6 ec 70 8c 1e 83 2a 26 1d e0 a9 24 ae 82 d4 b2 d8 43 80 a3 e1 13 93 2b 6a 08 5f c9 74 03 c9 e1 f0 88 db c0 2b 72 3c c4 df d0 04 67 9f a1 0c 7e cb 13 97 36 f6 29 e7 30 43 64 e1 48 b4 c2 6b 6b 31 95 e2 1d 45 45 94 d5 9f 49 91 01 0c b3 40 27 17 ad 5b cf bc 28 35 2b 85 a1 a6 69 91 12 80 ec cc 58 59 c0 1a a9 f5 d9 81 f1 40 b3 a8 25 99 e2 b2 95 4b 40 3b a5 23 d4 b6 94 4b a3 b4 80 49 1c 5f 2d a5 e5 12 ae 5b 39 9b e2 37 61 dd 4e ae 96 aa 73 Data Ascii: B{&9].DgyZ]&YWK'r:KMX'FCd#Xp*&$C+j_t+r<g~6)0CdHkk1EEI@'[(5+iXY@%K@;#KI_-[97aNs
2024-03-29 13:44:59 UTC	1024	IN	Data Raw: 3a 6b 3d c3 ec e9 34 43 66 82 ec c4 ce dc 59 4e b8 e1 32 4e e8 eb 7d fe 89 67 dc 25 fe 89 cb 79 12 cf 44 bd 49 1f 91 95 ee 9c 85 4e be 3c cc 68 ee ce 10 3c 2a 9d 79 99 b9 c1 70 b1 3b a6 2b 9c c0 34 75 00 7b 18 77 75 82 e4 11 ff 4c 8d 09 9f 6a c0 9e a8 e7 71 a9 92 93 07 b3 f8 bc 86 3b c3 27 6a 46 27 0d c8 ae 57 ad 03 fa f9 ba 5f 40 70 7f 8e c6 85 06 f6 cf d7 d5 95 dd 00 e7 eb fa d2 d9 06 1a 6a a7 83 60 14 4f e3 09 0c 6e 1c 46 d3 78 ca d3 3e 11 b3 5f 86 30 5d 43 98 24 42 66 3a cf db 14 0a 4d ad 7a ff 2d 6e fe 2f ec 79 28 f6 ca 60 26 ea 2d c2 79 1a d1 b4 5e c0 31 71 15 9f 6b 49 f9 0c e0 7e 12 17 e2 8a 6c 30 af 55 32 0e 3c 74 1a 96 62 c1 45 7c a5 3b 01 5b 7e 1c 5f b0 7c 6f 22 80 84 09 8d 49 04 94 7b 5e b2 4b 9b d1 85 42 64 ef 93 b3 78 ed 41 77 fb d1 8a 53 72 Data Ascii: :k=4CfYN2N}g%yDIN<h<*yp;+4u{wuLjq;'jF'W_@pj`OnFx>_0]C$Bf:Mz-n/y(`&-y^1qkI~l0U2<tbE\|;[~_\|o"I{^KBdxAwSr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.16	49802	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:59 UTC	852	OUT	GET /static/resources/media/file.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB
2024-03-29 13:45:00 UTC	457	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:45:00 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-475" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: REVALIDATED X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c3d7d374b87-IAD
2024-03-29 13:45:00 UTC	912	IN	Data Raw: 34 37 35 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 31 22 20 68 65 69 67 68 74 3d 22 32 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 31 20 32 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 36 2e 39 36 33 37 20 37 2e 37 39 34 34 39 43 31 36 2e 39 32 34 32 20 37 2e 37 30 34 30 34 20 31 36 2e 38 36 38 39 20 37 2e 36 32 31 33 36 20 31 36 2e 38 30 30 34 20 37 2e 35 35 30 33 32 4c 31 31 2e 38 30 30 34 20 32 2e 35 35 30 33 32 43 31 31 2e 37 32 39 34 20 32 2e 34 38 31 38 20 31 31 2e 36 34 36 37 20 32 2e 34 32 36 35 20 31 31 2e 35 35 36 32 20 32 2e 33 38 36 39 39 43 31 31 2e 35 33 31 32 20 32 2e 33 37 35 33 Data Ascii: 475<svg width="21" height="21" viewBox="0 0 21 21" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M16.9637 7.79449C16.9242 7.70404 16.8689 7.62136 16.8004 7.55032L11.8004 2.55032C11.7294 2.4818 11.6467 2.4265 11.5562 2.38699C11.5312 2.3753
2024-03-29 13:45:00 UTC	236	IN	Data Raw: 48 35 2e 33 37 37 39 31 5a 22 0a 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 32 36 33 37 34 43 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 37 2e 30 34 34 35 36 20 31 30 2e 36 33 39 35 48 31 33 2e 37 31 31 32 56 31 32 2e 33 30 36 32 48 37 2e 30 34 34 35 36 56 31 30 2e 36 33 39 35 5a 4d 37 2e 30 34 34 35 36 20 31 33 2e 39 37 32 38 48 31 33 2e 37 31 31 32 56 31 35 2e 36 33 39 35 48 37 2e 30 34 34 35 36 56 31 33 2e 39 37 32 38 5a 4d 37 2e 30 34 34 35 36 20 37 2e 33 30 36 31 35 48 38 2e 37 31 31 32 32 56 38 2e 39 37 32 38 32 48 37 2e 30 34 34 35 36 56 37 2e 33 30 36 31 35 5a 22 0a 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 32 36 33 37 34 43 22 2f 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: H5.37791Z" fill="#26374C"/> <path d="M7.04456 10.6395H13.7112V12.3062H7.04456V10.6395ZM7.04456 13.9728H13.7112V15.6395H7.04456V13.9728ZM7.04456 7.30615H8.71122V8.97282H7.04456V7.30615Z" fill="#26374C"/></svg>
2024-03-29 13:45:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.16	49803	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:59 UTC	855	OUT	GET /static/resources/media/twitter.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB
2024-03-29 13:45:00 UTC	450	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:45:00 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-451" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: MISS X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c3d7bec241b-IAD
2024-03-29 13:45:00 UTC	919	IN	Data Raw: 34 35 31 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 33 22 20 68 65 69 67 68 74 3d 22 32 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 33 20 32 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 33 33 20 33 2e 30 37 38 43 33 31 2e 37 38 36 32 20 33 2e 35 39 39 38 31 20 33 30 2e 34 38 30 35 20 33 2e 39 35 32 37 34 20 32 39 2e 31 31 31 32 20 34 2e 31 31 30 33 36 43 33 30 2e 35 30 39 33 20 33 2e 32 39 38 32 38 20 33 31 2e 35 38 32 32 20 32 2e 30 31 33 33 33 20 33 32 2e 30 38 38 36 20 30 2e 34 37 39 37 31 34 43 33 30 2e 37 38 30 34 20 31 2e 32 33 32 30 38 20 32 39 2e 33 33 30 38 20 31 2e 37 37 37 38 38 20 32 37 Data Ascii: 451<svg width="33" height="26" viewBox="0 0 33 26" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M33 3.078C31.7862 3.59981 30.4805 3.95274 29.1112 4.11036C30.5093 3.29828 31.5822 2.01333 32.0886 0.479714C30.7804 1.23208 29.3308 1.77788 27
2024-03-29 13:45:00 UTC	193	IN	Data Raw: 39 31 33 38 20 36 2e 35 35 34 32 35 20 32 36 20 31 30 2e 33 37 37 34 20 32 36 43 32 32 2e 38 33 30 36 20 32 36 20 32 39 2e 36 34 30 38 20 31 35 2e 39 39 38 35 20 32 39 2e 36 34 30 38 20 37 2e 33 32 33 39 36 43 32 39 2e 36 34 30 38 20 37 2e 30 33 39 35 36 20 32 39 2e 36 33 34 33 20 36 2e 37 35 36 31 33 20 32 39 2e 36 32 31 31 20 36 2e 34 37 35 31 36 43 33 30 2e 39 34 35 20 35 2e 35 35 20 33 32 2e 30 39 32 37 20 34 2e 33 39 34 32 38 20 33 33 20 33 2e 30 37 38 5a 22 0a 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 43 38 37 46 32 22 2f 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: 9138 6.55425 26 10.3774 26C22.8306 26 29.6408 15.9985 29.6408 7.32396C29.6408 7.03956 29.6343 6.75613 29.6211 6.47516C30.945 5.55 32.0927 4.39428 33 3.078Z" fill="#0C87F2"/></svg>
2024-03-29 13:45:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.16	49804	104.244.42.69	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:59 UTC	906	OUT	GET /i/adsct?bci=3&eci=2&event_id=576ea13c-93d9-4bc1-9cd1-aa5a7db7a594&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f18fa5bd-cf7a-4a85-8819-2f2353b1741d&tw_document_href=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4a8l&type=javascript&version=2.3.29 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:59 UTC	551	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 13:44:58 GMT perf: 7469935968 server: tsa_b set-cookie: muc_ads=2934452f-75be-4322-8587-6e259dd8d5bb; Max-Age=63072000; Expires=Sun, 29 Mar 2026 13:44:59 GMT; Path=/; Domain=t.co; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 9fd807a73d6ad2e0 strict-transport-security: max-age=0 x-response-time: 6 x-connection-hash: 3b063bb3de551aed91d4a2b94569735c79699b8159cf8a5be2f1cb083cbf6d83 connection: close
2024-03-29 13:44:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.16	49805	104.244.42.67	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:59 UTC	923	OUT	GET /i/adsct?bci=3&eci=2&event_id=576ea13c-93d9-4bc1-9cd1-aa5a7db7a594&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f18fa5bd-cf7a-4a85-8819-2f2353b1741d&tw_document_href=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4a8l&type=javascript&version=2.3.29 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:59 UTC	572	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 13:44:59 GMT perf: 7469935968 server: tsa_b set-cookie: personalization_id="v1_mIwiL/VRiw7nRNZdQorkoQ=="; Max-Age=63072000; Expires=Sun, 29 Mar 2026 13:44:59 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 28c0c272850a396c strict-transport-security: max-age=631138519 x-response-time: 87 x-connection-hash: 294153cefcce0764a8e82b156cd9094e4ab90c636cc1fc5baf274983b20829b8 connection: close
2024-03-29 13:44:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.16	49807	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:59 UTC	856	OUT	GET /static/resources/media/telegram.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB
2024-03-29 13:45:00 UTC	450	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:45:00 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-306" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: MISS X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c3ddc70241e-IAD
2024-03-29 13:45:00 UTC	781	IN	Data Raw: 33 30 36 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 34 22 20 68 65 69 67 68 74 3d 22 33 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 34 20 33 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 2e 36 30 30 35 34 31 20 31 34 2e 33 38 34 39 4c 38 2e 34 33 34 38 33 20 31 37 2e 33 34 38 31 4c 31 31 2e 34 36 37 32 20 32 37 2e 32 33 31 43 31 31 2e 36 36 31 32 20 32 37 2e 38 36 34 20 31 32 2e 34 32 35 20 32 38 2e 30 39 37 39 20 31 32 2e 39 33 31 39 20 32 37 2e 36 37 37 39 4c 31 37 2e 32 39 38 39 20 32 34 2e 30 37 30 31 43 31 37 2e 37 35 36 36 20 32 33 2e 36 39 32 31 20 31 38 2e 34 30 38 36 20 32 33 2e 36 37 33 Data Ascii: 306<svg width="34" height="30" viewBox="0 0 34 30" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M0.600541 14.3849L8.43483 17.3481L11.4672 27.231C11.6612 27.864 12.425 28.0979 12.9319 27.6779L17.2989 24.0701C17.7566 23.6921 18.4086 23.673
2024-03-29 13:45:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.16	49800	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:59 UTC	856	OUT	GET /static/resources/media/facebook.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:,action:,necessary:,functional:,analytics:,advertisement:; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB
2024-03-29 13:45:00 UTC	450	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:45:00 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-306" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: MISS X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c3deadc393d-IAD
2024-03-29 13:45:00 UTC	781	IN	Data Raw: 33 30 36 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 32 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 32 39 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 33 39 37 35 20 30 2e 30 30 36 30 33 33 39 34 4c 31 31 2e 35 35 39 38 20 30 43 37 2e 32 34 38 33 32 20 30 20 34 2e 34 36 32 30 35 20 32 2e 38 30 31 32 35 20 34 2e 34 36 32 30 35 20 37 2e 31 33 36 39 34 56 31 30 2e 34 32 37 35 48 30 2e 36 30 33 34 33 37 43 30 2e 32 37 30 30 30 37 20 31 30 2e 34 32 37 35 20 30 20 31 30 2e 36 39 32 34 20 30 20 31 31 2e 30 31 39 32 56 31 35 2e 37 38 36 39 43 30 20 31 36 2e 31 31 Data Ascii: 306<svg width="16" height="29" viewBox="0 0 16 29" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M15.3975 0.00603394L11.5598 0C7.24832 0 4.46205 2.80125 4.46205 7.13694V10.4275H0.603437C0.270007 10.4275 0 10.6924 0 11.0192V15.7869C0 16.11
2024-03-29 13:45:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.16	49806	35.190.43.134	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:59 UTC	803	OUT	GET /cm/i?pid=4d52341b-7196-4dc9-a490-6fe981c45213&u_scsid=a27a48c3-42e1-4aba-be5f-d5e80ef0be4b&u_sclid=3b5c3bf8-9419-47f4-bbf5-efbbc5a641a6 HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:59 UTC	652	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 13:44:59 GMT set-cookie: sc_at=v2\|H4sIAAAAAAAAAA3CgQkAIAgEwIkERUN/HMucwuHruHNKu8KpWkGWmRRXkpbxCrBv5Z4Rlx8BDD+iG1R9MgAAAA==;SameSite=None;Version=1;Comment=;Domain=.snapchat.com;Path=/;Max-Age=33696000;Secure content-type: text/html strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 672 x-envoy-upstream-service-time: 0 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 13:44:59 UTC	600	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 77 69 6e 2c 20 64 6f 63 2c 20 73 64 6b 5f 75 72 6c 29 7b 0a 20 20 20 20 20 20 69 66 28 77 69 6e 2e 73 6e 61 70 74 72 29 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 76 61 72 20 74 72 3d 77 69 6e 2e 73 6e 61 70 74 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 74 72 2e 68 61 6e 64 6c 65 52 65 71 75 65 73 74 3f 20 74 72 2e 68 61 6e 64 6c 65 52 65 71 75 65 73 74 2e 61 70 70 6c 79 28 74 72 2c 20 61 72 67 75 6d 65 6e 74 73 29 3a 74 72 2e 71 75 65 75 65 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 74 72 2e 71 75 65 75 65 Data Ascii: <!DOCTYPE html><html><head> <script> (function(win, doc, sdk_url){ if(win.snaptr) return; var tr=win.snaptr=function(){ tr.handleRequest? tr.handleRequest.apply(tr, arguments):tr.queue.push(arguments); }; tr.queue
2024-03-29 13:44:59 UTC	72	IN	Data Raw: 0a 20 20 20 20 73 6e 61 70 74 72 28 27 63 6d 27 2c 20 7b 20 27 73 79 6e 63 5f 6d 6f 64 65 73 27 3a 20 5b 31 34 30 5d 20 7d 29 3b 0a 20 20 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: snaptr('cm', { 'sync_modes': [140] }); </script></head></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.16	49808	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:59 UTC	873	OUT	GET /static/resources/media/linkedIn.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes
2024-03-29 13:45:00 UTC	450	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:45:00 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-54c" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: MISS X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c3e1cd6200f-IAD
2024-03-29 13:45:00 UTC	919	IN	Data Raw: 35 34 63 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 37 22 20 68 65 69 67 68 74 3d 22 32 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 37 20 32 37 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 0a 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 2e 32 39 32 33 39 20 31 2e 37 32 34 39 31 43 31 2e 38 38 36 35 37 20 31 2e 31 36 35 36 35 20 32 2e 36 36 32 32 20 30 2e 38 38 35 37 34 32 20 33 2e 36 31 39 34 35 20 30 2e 38 38 35 37 34 32 43 34 2e 35 37 36 37 35 20 30 2e 38 38 35 37 34 32 20 35 2e 33 34 34 30 36 20 Data Ascii: 54c<svg width="27" height="27" viewBox="0 0 27 27" fill="none" xmlns="http://www.w3.org/2000/svg"> <path fill-rule="evenodd" clip-rule="evenodd" d="M1.29239 1.72491C1.88657 1.16565 2.6622 0.885742 3.61945 0.885742C4.57675 0.885742 5.34406
2024-03-29 13:45:00 UTC	444	IN	Data Raw: 39 2e 36 31 31 32 37 20 32 31 2e 36 38 34 39 20 39 2e 35 38 38 31 33 20 32 36 2e 32 38 37 32 48 31 35 2e 32 38 30 34 56 31 36 2e 37 31 39 31 43 31 35 2e 32 38 30 34 20 31 36 2e 31 33 31 20 31 35 2e 33 34 33 35 20 31 35 2e 36 36 33 39 20 31 35 2e 34 37 30 36 20 31 35 2e 33 31 37 36 43 31 35 2e 37 31 33 20 31 34 2e 37 32 39 31 20 31 36 2e 30 37 38 39 20 31 34 2e 32 33 36 33 20 31 36 2e 35 36 39 34 20 31 33 2e 38 33 38 36 43 31 37 2e 30 35 39 38 20 31 33 2e 34 34 30 32 20 31 37 2e 36 36 38 31 20 31 33 2e 32 34 31 33 20 31 38 2e 33 39 35 20 31 33 2e 32 34 31 33 43 31 39 2e 33 38 36 36 20 31 33 2e 32 34 31 33 20 32 30 2e 31 31 36 35 20 31 33 2e 35 38 34 34 20 32 30 2e 35 38 33 37 20 31 34 2e 32 37 30 38 43 32 31 2e 30 35 30 37 20 31 34 2e 39 35 37 20 32 31 2e Data Ascii: 9.61127 21.6849 9.58813 26.2872H15.2804V16.7191C15.2804 16.131 15.3435 15.6639 15.4706 15.3176C15.713 14.7291 16.0789 14.2363 16.5694 13.8386C17.0598 13.4402 17.6681 13.2413 18.395 13.2413C19.3866 13.2413 20.1165 13.5844 20.5837 14.2708C21.0507 14.957 21.
2024-03-29 13:45:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.16	49810	52.85.151.23	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:59 UTC	551	OUT	OPTIONS /sourceConfig/?p=cdn&v=2.48.6&writeKey=20k74eNX2JyWtp0UKQ9VlhB2Xgz HTTP/1.1 Host: api.rudderstack.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: authorization Origin: https://cex.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:59 UTC	584	IN	HTTP/1.1 204 No Content Connection: close Date: Fri, 29 Mar 2024 13:44:59 GMT X-Request-ID: 895f8e00-edd2-11ee-83f1-eda73ba94917 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Max-Age: 900 Access-Control-Allow-Methods: GET,HEAD,PUT,POST,DELETE,PATCH Access-Control-Allow-Headers: authorization Vary: Origin X-Cache: Miss from cloudfront Via: 1.1 4db130e87be66fce9731567ae0669c56.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: t_wWKM1ZeItLyJs5Ukl7Y5G9vXEX3T92S9Iv63NXCM62bigoZf3EBA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.16	49783	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:59 UTC	867	OUT	GET /static/resources/media/ua.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes
2024-03-29 13:45:00 UTC	457	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:45:00 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-298" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: REVALIDATED X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c3eefa33b42-IAD
2024-03-29 13:45:00 UTC	671	IN	Data Raw: 32 39 38 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 2e 30 36 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 29 22 3e 0a 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 32 2e 30 36 36 34 20 32 34 43 31 38 2e 36 39 33 38 20 32 34 20 32 34 2e 30 36 36 34 20 31 38 2e 36 32 37 34 20 32 34 2e 30 36 36 34 20 31 32 43 32 34 2e 30 36 36 34 20 35 2e 33 37 32 35 38 20 31 38 2e 36 39 33 38 20 30 20 31 32 2e 30 36 36 34 20 30 43 35 2e 34 33 38 39 39 20 30 20 30 2e 30 36 36 34 Data Ascii: 298<svg width="48" height="48" viewBox="0.06 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <g clip-path="url(#clip0)"> <path d="M12.0664 24C18.6938 24 24.0664 18.6274 24.0664 12C24.0664 5.37258 18.6938 0 12.0664 0C5.43899 0 0.0664
2024-03-29 13:45:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.16	49809	18.160.18.77	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:59 UTC	538	OUT	GET /modules.ad6500eebe72fe1c39dd.js HTTP/1.1 Host: script.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:45:00 UTC	719	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 225445 Connection: close Date: Tue, 26 Mar 2024 14:57:14 GMT Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin ETag: "645fc548e91f44aa4e1226ee86502370" Last-Modified: Tue, 26 Mar 2024 14:56:24 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 eb8674b99d3dfcc6867fb20af353442a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: 3DO56deYP4Opbmq5PUbXBKZaeJEJ5mJe_-BT5nFL881qQzYs0WYkdQ== Age: 254865
2024-03-29 13:45:00 UTC	15665	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 6f 64 75 6c 65 73 2e 61 64 36 35 30 30 65 65 62 65 37 32 66 65 31 63 33 39 64 64 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 37 38 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 63 6f 6e 73 74 20 72 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 49 44 45 4e 54 49 46 59 5f 55 53 45 52 3a 22 69 64 65 6e 74 69 66 79 5f 75 73 65 72 22 2c 41 55 54 4f 54 41 47 5f 52 45 43 4f 52 44 49 4e 47 3a 22 61 75 74 6f 74 61 67 5f 72 65 63 6f Data Ascii: /! For license information please see modules.ad6500eebe72fe1c39dd.js.LICENSE.txt /!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_reco
2024-03-29 13:45:00 UTC	16384	IN	Data Raw: 65 78 4f 66 28 74 29 3e 2d 31 3f 22 72 74 6c 22 3a 22 6c 74 72 22 2c 68 6a 2e 77 69 64 67 65 74 2e 69 73 41 63 74 69 76 65 4c 61 6e 67 75 61 67 65 44 69 72 65 63 74 69 6f 6e 52 74 6c 3d 22 72 74 6c 22 3d 3d 3d 68 6a 2e 77 69 64 67 65 74 2e 61 63 74 69 76 65 4c 61 6e 67 75 61 67 65 44 69 72 65 63 74 69 6f 6e 7d 29 2c 22 63 6f 6d 6d 6f 6e 22 29 2c 74 2e 72 65 67 69 73 74 65 72 4f 62 73 65 72 76 65 72 46 6f 72 49 6e 6c 69 6e 65 57 69 64 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 75 2e 70 75 73 68 28 65 29 7d 2c 74 29 2c 68 6a 2e 77 69 64 67 65 74 44 65 6c 61 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 2c 74 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 65 2e 63 6c 65 61 72 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: exOf(t)>-1?"rtl":"ltr",hj.widget.isActiveLanguageDirectionRtl="rtl"===hj.widget.activeLanguageDirection}),"common"),t.registerObserverForInlineWidget=function(e){u.push(e)},t),hj.widgetDelay=function(){var e={},t=null;return e.clear=hj.tryCatch((function(
2024-03-29 13:45:00 UTC	16384	IN	Data Raw: 73 22 7d 2c 69 3d 28 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 69 64 3a 6e 75 6c 6c 2c 73 65 6c 65 63 74 6f 72 5f 76 65 72 73 69 6f 6e 3a 32 7d 29 2c 36 30 29 2c 61 3d 36 30 2a 69 2c 73 3d 32 34 2a 61 2c 63 3d 33 36 35 2a 73 2c 75 3d 69 2f 32 2c 6c 3d 36 7d 2c 38 31 37 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 65 78 63 65 70 74 69 6f 6e 4c 6f 67 67 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 2c 69 6e 69 74 45 72 72 6f 72 4c 6f 67 67 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 76 61 72 20 72 3d 6e 28 38 34 32 32 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 6f 3d 22 66 75 6e 63 Data Ascii: s"},i=(Object.freeze({id:null,selector_version:2}),60),a=60i,s=24a,c=365*s,u=i/2,l=6},8172:function(e,t,n){"use strict";n.r(t),n.d(t,{exceptionLogger:function(){return s},initErrorLogging:function(){return c}});var r=n(8422);function o(e){return o="func
2024-03-29 13:45:00 UTC	16384	IN	Data Raw: 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 68 6a 2e 68 71 2e 6e 6f 6f 70 3b 6c 2e 51 2e 67 65 74 28 22 73 65 73 73 69 6f 6e 2e 73 65 73 73 69 6f 6e 52 65 73 75 6d 65 64 22 29 26 26 69 2e 6c 2e 74 72 61 63 6b 53 65 73 73 69 6f 6e 52 65 73 75 6d 65 64 28 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 75 2e 79 2e 73 65 74 28 22 61 63 74 69 76 65 22 2c 21 31 29 2c 68 6a 2e 73 65 74 74 69 6e 67 73 2e 72 65 63 6f 72 64 29 7b 76 61 72 20 74 3d 76 6f 69 64 20 30 3d 3d 3d 68 6a 2e 73 65 74 74 69 6e 67 73 2e 72 65 63 6f 72 64 5f 74 61 72 67 65 74 69 6e 67 5f 72 75 6c 65 73 7c 7c 21 68 6a 2e 73 65 74 74 69 6e 67 73 2e 72 65 63 6f 72 64 5f 74 61 72 67 65 74 69 6e 67 5f 72 75 6c 65 73 2e 6c 65 6e 67 74 68 3b 69 2e 6c 2e 73 65 74 52 65 63 6f 72 64 Data Ascii: nts[0]?arguments[0]:hj.hq.noop;l.Q.get("session.sessionResumed")&&i.l.trackSessionResumed(),function(e){if(u.y.set("active",!1),hj.settings.record){var t=void 0===hj.settings.record_targeting_rules\|\|!hj.settings.record_targeting_rules.length;i.l.setRecord
2024-03-29 13:45:00 UTC	16384	IN	Data Raw: 79 7b 65 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 74 29 7d 63 61 74 63 68 28 74 29 7b 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 6f 29 2c 65 3d 5b 5d 7d 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 65 3a 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 6f 29 2c 5b 5d 29 7d 72 65 74 75 72 6e 20 6e 2e 67 65 74 49 64 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 26 26 28 6a 2e 74 2e 63 61 6e 55 73 65 53 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 28 29 3f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6a 2e 74 2e 63 61 6e 55 73 65 4c 6f 63 61 6c 53 74 6f 72 61 67 65 28 29 26 26 Data Ascii: y{e=JSON.parse(t)}catch(t){window.localStorage.removeItem(o),e=[]}return Array.isArray(e)?e:(window.localStorage.removeItem(o),[])}return n.getId=hj.tryCatch((function(){return null==t&&(j.t.canUseSessionStorage()?(function(){if(j.t.canUseLocalStorage()&&
2024-03-29 13:45:00 UTC	16384	IN	Data Raw: 6e 20 65 7d 2c 42 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 74 5b 6e 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 59 28 72 2e 6b 65 79 29 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 26 26 46 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 74 29 2c 6e 26 26 46 28 65 2c 6e 29 2c 4f 62 Data Ascii: n e},B.apply(this,arguments)}function F(e,t){for(var n=0;n<t.length;n++){var r=t[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(e,Y(r.key),r)}}function G(e,t,n){return t&&F(e.prototype,t),n&&F(e,n),Ob
2024-03-29 13:45:00 UTC	16384	IN	Data Raw: 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 74 79 70 65 3f 22 22 3a 22 3c 21 44 4f 43 54 59 50 45 20 22 2b 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 74 79 70 65 2e 6e 61 6d 65 7c 7c 22 68 74 6d 6c 22 29 2b 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 74 79 70 65 2e 70 75 62 6c 69 63 49 64 3f 27 20 50 55 42 4c 49 43 20 22 27 2b 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 74 79 70 65 2e 70 75 62 6c 69 63 49 64 2b 27 22 27 3a 22 22 29 2b 28 21 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 74 79 70 65 2e 70 75 62 6c 69 63 49 64 26 26 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 74 79 70 65 2e 73 79 73 74 65 6d 49 64 3f 22 20 53 59 53 54 45 4d 22 3a 22 22 29 2b 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 74 79 70 Data Ascii: Catch((function(){return null===document.doctype?"":"<!DOCTYPE "+(document.doctype.name\|\|"html")+(document.doctype.publicId?' PUBLIC "'+document.doctype.publicId+'"':"")+(!document.doctype.publicId&&document.doctype.systemId?" SYSTEM":"")+(document.doctyp
2024-03-29 13:45:00 UTC	16384	IN	Data Raw: 61 3d 53 28 6f 29 3b 69 66 28 21 61 26 26 62 29 72 65 74 75 72 6e 20 67 3b 69 66 28 21 61 26 26 43 28 29 29 72 65 74 75 72 6e 20 45 28 29 2c 67 3b 61 26 26 28 6d 3d 69 2e 66 5f 2e 6e 6f 77 28 29 29 2c 61 26 26 62 26 26 49 28 29 3b 76 61 72 20 73 3d 6e 75 6c 6c 21 3d 3d 28 72 3d 67 2e 65 76 65 6e 74 73 2e 70 6f 70 28 29 29 26 26 76 6f 69 64 20 30 21 3d 3d 72 3f 72 3a 77 28 70 29 3b 72 65 74 75 72 6e 20 6e 3f 73 5b 6f 5d 3d 74 3a 28 73 5b 6f 5d 3d 73 5b 6f 5d 7c 7c 5b 5d 2c 73 5b 6f 5d 2e 70 75 73 68 28 74 29 29 2c 67 2e 65 76 65 6e 74 73 2e 70 75 73 68 28 73 29 2c 67 7d 29 2c 22 64 61 74 61 22 29 2c 67 2e 66 6c 75 73 68 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 63 2e 51 2e 67 65 74 28 22 75 73 65 72 2e 69 Data Ascii: a=S(o);if(!a&&b)return g;if(!a&&C())return E(),g;a&&(m=i.f_.now()),a&&b&&I();var s=null!==(r=g.events.pop())&&void 0!==r?r:w(p);return n?s[o]=t:(s[o]=s[o]\|\|[],s[o].push(t)),g.events.push(s),g}),"data"),g.flush=hj.tryCatch((function(){var n=c.Q.get("user.i
2024-03-29 13:45:00 UTC	16384	IN	Data Raw: 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 2c 4f 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 74 5b 6e 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 41 28 72 2e 6b 65 79 29 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 Data Ascii: Symbol.prototype?"symbol":typeof e},O(e)}function R(e,t){for(var n=0;n<t.length;n++){var r=t[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(e,A(r.key),r)}}function A(e){var t=function(e,t){if("object"
2024-03-29 13:45:00 UTC	16384	IN	Data Raw: 28 30 2c 73 2e 44 4f 29 28 29 29 2c 63 72 65 61 74 65 64 3a 6e 75 6c 6c 21 3d 3d 28 72 3d 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 63 72 65 61 74 65 64 29 26 26 76 6f 69 64 20 30 21 3d 3d 72 3f 72 3a 6f 2e 66 5f 2e 6e 6f 77 28 29 2c 65 78 69 73 74 69 6e 67 3a 6e 75 6c 6c 21 3d 3d 28 69 3d 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 65 78 69 73 74 69 6e 67 29 26 26 76 6f 69 64 20 30 21 3d 3d 69 26 26 69 7d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 75 2e 73 65 74 28 65 29 7d 28 68 29 2c 68 7d 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 30 5d Data Ascii: (0,s.DO)()),created:null!==(r=null==t?void 0:t.created)&&void 0!==r?r:o.f_.now(),existing:null!==(i=null==t?void 0:t.existing)&&void 0!==i&&i};return function(e){u.set(e)}(h),h}},d=function(){var e,t=arguments.length>0&&void 0!==arguments[0]&&arguments[0]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.16	49801	54.229.44.173	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:59 UTC	646	OUT	POST /api/v1/log HTTP/1.1 Host: log.cookieyes.com Connection: keep-alive Content-Length: 556 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundarypA2xJp2KYIiuNNwd Accept: / Origin: https://cex.io Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:44:59 UTC	556	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 70 41 32 78 4a 70 32 4b 59 49 69 75 4e 4e 77 64 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6b 65 79 22 0d 0a 0d 0a 39 30 32 32 61 36 61 38 33 33 36 30 39 39 35 39 34 39 66 63 63 66 65 64 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 70 41 32 78 4a 70 32 4b 59 49 69 75 4e 4e 77 64 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 72 65 71 75 65 73 74 5f 74 79 70 65 22 0d 0a 0d 0a 62 61 6e 6e 65 72 5f 68 69 64 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 70 41 32 78 4a 70 32 Data Ascii: ------WebKitFormBoundarypA2xJp2KYIiuNNwdContent-Disposition: form-data; name="key"9022a6a83360995949fccfed------WebKitFormBoundarypA2xJp2KYIiuNNwdContent-Disposition: form-data; name="request_type"banner_hide------WebKitFormBoundarypA2xJp2
2024-03-29 13:45:00 UTC	231	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:45:00 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
2024-03-29 13:45:00 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.16	49789	151.101.129.140	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:44:59 UTC	522	OUT	GET /ads/pixel.js HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:45:00 UTC	1014	IN	HTTP/1.1 200 OK Connection: close Content-Length: 8702 Last-Modified: Thu, 15 Feb 2024 20:38:48 GMT ETag: "9a680c8c475d8bba600d4d87b4fa7ee5" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=60 Content-Encoding: gzip Content-Type: application/javascript Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 29 Mar 2024 13:45:00 GMT Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-03-29 13:45:00 UTC	1378	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d4 3b 6b 73 da c8 b2 7f 05 ab 4e 38 92 99 c8 80 b1 93 80 b5 29 02 38 66 63 63 17 0f 67 b7 5c 2c 25 4b 03 28 11 12 47 12 71 7c 41 f7 b7 df 9e a7 46 32 4e 9c b3 e7 7c b8 55 bb 41 33 dd d3 ef ee e9 19 c9 07 f3 4d e0 24 5e 18 94 22 1d a3 00 25 c6 56 ce 84 ba 87 e6 c6 d6 9b eb 07 c1 9d 37 65 4f 98 3e 7d b3 a3 92 63 69 02 55 b3 ac e4 71 8d c3 79 29 c2 ff da 78 11 2e 97 f9 43 8b ac 99 97 cb 8e 11 e1 64 13 05 25 07 88 1e 54 0d 32 bf 11 73 1b 3e 47 a8 da 56 80 1f 4a bd 28 0a 23 5d eb d8 41 10 26 a5 b9 17 b8 a5 55 e8 6e 7c 5c fa a7 56 f1 2a da 3f 35 a3 95 2c a3 f0 a1 64 9b 4e e8 62 4b bb ba ee 4e 2e 7b b3 c1 f5 78 76 7e 3d 19 74 35 64 a7 84 de da 22 b2 5b 5b fc 7d 1d 46 49 dc dc a6 69 8b e8 70 57 9d 9a 8e ed fb fa da e4 20 24 b4 d1 23 Data Ascii: ;ksN8)8fccg\,%K(Gq\|AF2N\|UA3M$^"%V7eO>}ciUqy)x.Cd%T2s>GVJ(#]A&Un\|\V*?5,dNbKN.{xv~=t5d"[[}FIipW $#
2024-03-29 13:45:00 UTC	1378	IN	Data Raw: e9 42 d6 30 54 42 01 30 60 5d a6 3c 1b 5f b2 68 62 03 1e 5b a8 e0 45 15 93 f8 b2 6e 64 da 1d 43 92 52 46 c4 83 9c 0a 6c 9e 60 7f 38 0b d6 0d 04 32 d2 dc f5 5e bd 3d 6c fc d4 bf 2a a7 a3 3a a9 f5 97 d0 91 05 35 ee 5a 3e f8 af 79 d7 a7 f4 ff be 83 15 3a cc 79 cc 61 e6 3c 0a 57 64 b6 03 db 00 75 7b e6 3f 75 c9 b3 2e 64 48 39 2f ca 29 ee 48 39 7e c6 97 05 7c aa 94 aa ca ce d2 41 83 72 46 c6 e1 f2 b6 13 dd 33 84 2f 41 d1 9f fa b2 c0 89 38 73 92 cc df 72 57 d2 c7 9f 38 52 69 ed 5d 4c b6 ce c9 b0 df 09 57 6b a8 44 10 6c 38 76 ec 35 d6 59 4c 28 bb 69 46 c0 90 ed 3e d0 2a b6 fa 57 b6 0f 36 5c 41 37 3f 19 9f bf 7e 5b 72 ed c4 d6 88 90 05 9b 6f 40 50 6a 71 2e 09 e7 47 b1 f4 4d c0 a5 60 5b 7b 4e 3e b1 d0 20 44 3f 6c e6 73 1c 61 f7 83 1f 3a 5f db fe 22 8c bc 64 b9 12 Data Ascii: B0TB0`]<_hb[EndCRFl`82^=l:5Z>y:ya<Wdu{?u.dH9/)H9~\|ArF3/A8srW8Ri]LWkDl8v5YL(iF>W6\A7?~[ro@Pjq.GM`[{N> D?lsa:_"d
2024-03-29 13:45:00 UTC	1378	IN	Data Raw: a1 a3 e3 29 8d 8b 8a 4b 47 8d 29 0d 8f 0a a6 a3 93 29 8d 92 ca 9c 8e 4e a7 34 58 2a 0b 3a 7a 33 a5 31 53 59 ee aa 34 5c cf 9f f4 43 ac da bd e8 54 13 90 14 1c 87 89 ed 5b 6f 0f 8b c7 2a 06 bd c4 f3 04 80 b9 06 5b f4 02 92 e6 9d 44 05 a3 9e c0 c9 be 56 7f 4b cf ef 72 fe d5 71 3d 13 e1 ae d6 a8 e8 12 54 39 6d c0 aa 77 67 67 0d 63 ca 2a e3 dc 0f 21 c9 32 e1 8e b2 e2 65 a8 54 4e 9e a3 92 2d cd 9f 0c ac c6 61 76 92 e0 b7 16 fb da 4c 96 d5 3f 3c 04 f0 ba f3 93 63 00 2d 3a 4a 9d c8 1f 03 a0 cb ea 14 ea 58 ae d5 d4 19 8c b4 65 a4 1f dc 8f 29 1b 45 81 cd 1b 36 24 fb 04 36 ff ff b1 4d 38 79 61 9b e0 b9 a8 73 3d 18 8d db 83 f1 c8 ca 89 4b df 7b 25 b1 66 20 f2 66 18 20 38 4e e8 2e f0 c7 d5 e5 45 92 ac f9 14 8a dc 44 bc 48 87 c7 16 fc 0f 9b 9c e7 5a f0 60 ae bd ef d8 Data Ascii: )KG))N4X:z31SY4\CT[o[DVKrq=T9mwggc*!2eTN-avL?<c-:JXe)E6$6M8yas=K{%f f 8N.EDHZ`
2024-03-29 13:45:00 UTC	1378	IN	Data Raw: b9 97 e0 be 49 a1 1e b9 68 21 17 38 13 20 73 4e de 31 53 e8 6d 3d 93 c2 61 33 24 a0 f9 c7 7c 6b df 4b 2c 65 9a be c3 81 86 c5 d4 e4 71 89 ce f0 13 d9 59 fd bd 82 dc a4 20 38 45 a7 52 04 d6 f7 3c e5 2c ef ba f6 29 a0 33 8b eb a4 81 13 84 c0 32 fb a8 c8 bb 3a 2a 78 d6 6e 51 54 21 7c 0b dc 11 fa 2e 30 e1 56 a3 1f 42 b2 19 c9 dc aa 1d 55 c5 bb 7d 45 c3 ec fd fe 57 fc 08 5a 5a 4c 47 6f 2a 88 5b ec 7c 51 3b 63 70 be 8c dc 04 f2 58 30 e1 67 a5 33 28 74 56 86 65 59 59 ff b9 a7 89 60 dc a0 ca 90 f2 1f 5b 7c 61 6d aa ba 82 32 14 28 82 25 eb 39 a5 3e f2 fb 0b 81 47 ee bb 6a 55 a3 75 e0 c5 03 7b a0 4b 4c f2 91 a5 78 3e 2b 58 05 0e 1c 45 3b 49 dc bc 4d a5 9c e4 ed 84 f8 fe 53 41 e0 3d 28 b5 49 3f 06 b9 f0 02 47 99 2b 63 11 11 9a 56 19 d0 6f 66 61 0a 4c 15 67 09 50 5c Data Ascii: Ih!8 sN1Sm=a3$\|kK,eqY 8ER<,)32:xnQT!\|.0VBU}EWZZLGo[\|Q;cpX0g3(tVeYY`[\|am2(%9>GjUu{KLx>+XE;IMSA=(I?G+cVofaLgP\
2024-03-29 13:45:00 UTC	1378	IN	Data Raw: 33 16 87 99 48 79 05 69 18 2e 42 a5 67 34 57 29 92 26 9b 11 0d 80 84 d3 4c 6c 75 19 b5 46 ca ee 72 34 10 6c 41 db 2c fd 86 e3 44 17 b7 40 17 27 ef c9 2e 20 6f 04 3b 3f 9e 64 9b a3 21 2c e2 68 fa c0 b1 61 80 06 e6 bc 72 a1 b9 05 ba 48 e5 e2 90 f1 fe f8 f6 16 c4 a7 04 cb f7 c2 10 2b 81 0a 46 e4 3a 03 4c 43 05 fb 64 42 47 4b 56 46 b2 00 d1 53 94 80 52 9f 54 b1 cb bc 6a 7f 9b a5 93 07 55 0b 28 40 be da 66 0d f4 97 d9 e8 7a 08 0b 24 46 d4 65 07 06 f9 e8 f9 b4 3f 01 4e 99 7a a0 b9 de 82 00 f2 7c 5e e5 35 67 01 03 27 02 09 be ef fd 8c 2a 7c f1 60 1c 51 ea c6 b0 7e 7a 9d f6 b3 74 2d bd cd b0 ca f7 61 3c 5b fb dc ff 86 95 96 83 eb d9 10 ab 80 3f 63 6d f0 64 02 8b cb fa f7 1a 6b 1f 28 fa 00 1a 2b 6c fa 00 d5 bf 2a dc 5e fb 0d 29 1a fe de cf de 8d a7 5d 45 40 96 0e Data Ascii: 3Hyi.Bg4W)&LluFr4lA,D@'. o;?d!,harH+F:LCdBGKVFSRTjU(@fz$Fe?Nz\|^5g'\|`Q~zt-a<[?cmdk(+l^)]E@
2024-03-29 13:45:00 UTC	1378	IN	Data Raw: 7a 9b 57 42 e1 57 df 5a d2 dc 7d 49 a1 37 be 8e 05 cc 7a fd f9 56 83 7b 0c 66 0d da 93 78 bb 32 99 bf 76 6f 0b b1 1e b3 55 12 78 cb 25 bf 94 fa 79 0f 98 ef f6 32 eb ef eb 65 9e 9b 92 14 b4 d9 ad d1 a4 0e 39 a0 a7 f9 db 6d c7 e3 c2 97 8a 85 b9 7d 39 16 bf 1c a5 d7 c3 e4 89 51 58 6d 44 80 eb e5 22 b4 ee 64 5c a2 93 fb ee e1 08 c7 74 2f 4f b1 14 1b e4 06 a1 88 5c ca f3 af a8 93 68 0a 10 94 ce 9d cb ce 7c 72 96 e8 59 e8 65 12 e7 6a a8 7f d7 6d 34 47 39 6a 9d 33 fa 34 56 63 b3 9a 33 da 5f 38 76 0a e5 de cb 32 16 6f c0 14 f4 c9 74 1a 71 40 17 38 0a 1b f1 6c e2 06 bc b0 8c 00 ce a9 a3 97 70 b3 7a a2 8b b9 fc b7 f3 27 78 ea 55 ec 94 7e 17 4c 0e 33 ff ae f5 34 c6 17 56 7d 30 4d 0c 80 17 76 24 65 03 80 fc dc 32 5a ea 7d 32 41 ba 2f e7 76 7c 05 7f 10 95 3e 8e e0 37 Data Ascii: zWBWZ}I7zV{fx2voUx%y2e9m}9QXmD"d\t/O\h\|rYejm4G9j34Vc3_8v2otq@8lpz'xU~L34V}0Mv$e2Z}2A/v\|>7
2024-03-29 13:45:00 UTC	434	IN	Data Raw: 2f 16 a2 57 6d c7 f6 a9 d6 7b 6c 44 bb cd 85 e8 0f db 00 f1 a1 fe ac 11 e1 cb 17 9b fa d5 5d be 72 1a 9f cd 55 f3 b9 f7 b2 f5 69 9a 4d d5 70 b3 d8 28 27 fd 09 a9 cd b9 3f 51 08 70 fc 90 b0 29 da dd b1 58 ba 20 34 7c 2c d4 66 b0 a0 58 b1 58 b0 cb a3 19 db dc 2d a3 21 66 0a e2 1b 6f 8a 12 5e 5a 6f 2c d8 6b f5 1e 0e 34 bc 9d 85 d2 99 74 a2 92 93 74 a4 b2 89 0a 4a d6 dd aa 74 c3 be 93 4c 89 da e7 31 63 fe 13 c7 56 f7 33 59 28 81 ed 8a 13 29 b0 45 2e af 6e b3 8c 60 9a 72 dc 60 7a f2 54 38 9f a5 44 bb e0 83 e0 79 fb 97 c7 8f ad 58 2b 78 77 67 df d2 59 6a 97 82 48 2e bb db 65 b2 49 c6 66 0b 84 6c 50 4b 27 bf 18 b9 70 82 5f f8 bd 04 8f 7a f4 48 50 87 1a d1 61 d5 14 e3 cc f2 34 1e cb 7f 6c 9b d1 e3 7c ae 75 c5 75 47 d7 9a cf d7 dd d1 3c ce fd 6f 1c 2c 43 7b 81 64 Data Ascii: /Wm{lD]rUiMp('?Qp)X 4\|,fXX-!fo^Zo,k4ttJtL1cV3Y()E.n`r`zT8DyX+xwgYjH.eIflPK'p_zHPa4l\|uuG<o,C{d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.16	49812	35.190.43.134	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:00 UTC	592	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 1094 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://cex.io Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:45:00 UTC	1094	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 63 31 66 63 62 31 66 36 2d 62 66 32 66 2d 34 33 33 39 2d 38 62 36 39 2d 32 64 61 32 36 37 36 33 61 32 65 38 22 2c 22 6c 63 22 3a 22 34 61 35 66 31 61 34 39 2d 66 37 37 31 2d 34 32 61 33 2d 61 61 31 33 2d 38 39 35 39 62 35 36 66 37 65 63 30 22 2c 22 6c 73 22 3a 22 33 62 35 63 33 62 66 38 2d 39 34 31 39 2d 34 37 66 34 2d 62 62 66 35 2d 65 66 62 62 63 35 61 36 34 31 61 36 22 2c 22 72 22 3a 22 30 61 35 30 33 37 63 33 2d 66 32 64 39 2d 34 31 39 30 2d 38 63 35 34 2d 63 34 38 65 38 31 63 65 61 35 63 62 22 2c 22 73 73 22 3a 22 61 32 37 61 34 38 63 33 2d 34 32 65 31 2d 34 61 62 61 2d 62 65 35 66 2d 64 35 65 38 30 65 66 30 62 65 34 62 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"c1fcb1f6-bf2f-4339-8b69-2da26763a2e8","lc":"4a5f1a49-f771-42a3-aa13-8959b56f7ec0","ls":"3b5c3bf8-9419-47f4-bbf5-efbbc5a641a6","r":"0a5037c3-f2d9-4190-8c54-c48e81cea5cb","ss":"a27a48c3-42e1-4aba-be5f-d5e80ef0be4b","df":true,"s
2024-03-29 13:45:00 UTC	514	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 13:45:00 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 1 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 access-control-allow-origin: https://cex.io access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.16	49813	172.253.62.101	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:00 UTC	1392	OUT	POST /g/collect?v=2&tid=G-QF933RX2RP&gtm=45je43r0v877859595za200&_p=1711719893207&_gaz=1&gcs=G111&gcd=13n3n3n3n5&npa=0&dma=0&cid=820382369.1711719899&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_s=1&sid=1711719898&sct=1&seg=0&dl=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&dt=Buy%20Bitcoin%20with%20Credit%20or%20Debit%20Card%20Instantly%20-%20CEX.IO&en=page_view&_fv=2&_nsi=1&_ss=2&_ee=1&upn.sign_in=0&tfd=7840 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-03-29 13:45:00 UTC	440	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://cex.io Date: Fri, 29 Mar 2024 13:45:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.16	49814	52.85.151.23	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:00 UTC	657	OUT	GET /sourceConfig/?p=cdn&v=2.48.6&writeKey=20k74eNX2JyWtp0UKQ9VlhB2Xgz HTTP/1.1 Host: api.rudderstack.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 Authorization: Basic MjBrNzRlTlgySnlXdHAwVUtROVZsaEIyWGd6Og== User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:45:00 UTC	786	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 6262 Connection: close Date: Fri, 29 Mar 2024 13:45:00 GMT X-Request-ID: 899d8160-edd2-11ee-b53e-2778fd46acf7 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: X-Request-ID X-DNS-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Vary: Accept-Encoding,Origin X-Cache: Miss from cloudfront Via: 1.1 3dcb635971b5d310e8941cdb963aff70.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: o12oqnc757AUmAz9yuwK1Xg05TbOCttrz5Z1OEV1F7qYzGECXUJYrw==
2024-03-29 13:45:00 UTC	6262	IN	Data Raw: 7b 22 73 6f 75 72 63 65 22 3a 7b 22 69 64 22 3a 22 32 30 6b 37 34 62 55 77 48 7a 4c 69 34 36 31 38 72 70 54 77 69 5a 58 42 36 6c 49 22 2c 22 6e 61 6d 65 22 3a 22 77 65 62 20 70 72 6f 64 22 2c 22 77 72 69 74 65 4b 65 79 22 3a 22 32 30 6b 37 34 65 4e 58 32 4a 79 57 74 70 30 55 4b 51 39 56 6c 68 42 32 58 67 7a 22 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 73 74 61 74 73 43 6f 6c 6c 65 63 74 69 6f 6e 22 3a 7b 22 65 72 72 6f 72 73 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 22 6d 65 74 72 69 63 73 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 7d 7d 2c 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 77 6f 72 6b 73 70 61 63 65 49 64 22 3a 22 31 79 57 54 4b 63 76 6f 42 7a 56 4e 44 31 4b 69 57 35 61 38 70 7a 45 4b 53 37 56 22 2c 22 73 6f 75 72 Data Ascii: {"source":{"id":"20k74bUwHzLi4618rpTwiZXB6lI","name":"web prod","writeKey":"20k74eNX2JyWtp0UKQ9VlhB2Xgz","config":{"statsCollection":{"errors":{"enabled":false},"metrics":{"enabled":false}}},"enabled":true,"workspaceId":"1yWTKcvoBzVND1KiW5a8pzEKS7V","sour

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.16	49811	35.190.43.134	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:00 UTC	595	OUT	GET /config/io/4d52341b-7196-4dc9-a490-6fe981c45213.js?v=3.12.0-2402271815 HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://cex.io sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:45:00 UTC	514	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 13:45:00 GMT access-control-allow-origin: https://cex.io content-type: application/javascript strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 188 x-envoy-upstream-service-time: 44 server: API Gateway alt-svc: clear access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 13:45:00 UTC	188	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 72 79 7b 77 69 6e 64 6f 77 2e 73 6e 61 70 74 72 2e 63 66 67 28 27 34 64 35 32 33 34 31 62 2d 37 31 39 36 2d 34 64 63 39 2d 61 34 39 30 2d 36 66 65 39 38 31 63 34 35 32 31 33 27 2c 7b 22 61 73 63 22 3a 5b 5d 2c 22 61 22 3a 5b 22 50 49 49 22 2c 22 41 56 33 22 5d 2c 22 69 70 67 22 3a 22 31 22 2c 22 62 22 3a 5b 5d 2c 22 74 22 3a 22 32 34 36 22 2c 22 76 22 3a 22 33 2e 37 2e 35 2d 32 34 30 31 30 33 32 33 34 37 22 2c 22 65 63 22 3a 5b 5d 7d 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 28 29 3b Data Ascii: !function(){"use strict";try{window.snaptr.cfg('4d52341b-7196-4dc9-a490-6fe981c45213',{"asc":[],"a":["PII","AV3"],"ipg":"1","b":[],"t":"246","v":"3.7.5-2401032347","ec":[]})}catch(e){}}();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.16	49816	142.251.179.157	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:00 UTC	1192	OUT	GET /pagead/viewthroughconversion/971878938/?random=1711719898597&cv=11&fst=1711719898597&bg=ffffff&guid=ON&async=1&gtm=45be43r0v9117519134za200&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&hn=www.googleadservices.com&frm=0&tiba=Buy%20Bitcoin%20with%20Credit%20or%20Debit%20Card%20Instantly%20-%20CEX.IO&npa=0&pscdl=noapi&auid=1182918140.1711719899&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:45:00 UTC	842	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 29 Mar 2024 13:45:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 29-Mar-2024 14:00:00 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-29 13:45:00 UTC	410	IN	Data Raw: 38 66 33 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 8f3(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-03-29 13:45:00 UTC	1252	IN	Data Raw: 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 76 61 72 20 61 3b 61 3a 7b 69 66 28 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b 61 3d 22 22 7d 72 65 74 75 72 6e 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 72 65 74 75 72 6e 20 67 3f 21 21 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 Data Ascii: 1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("S
2024-03-29 13:45:00 UTC	636	IN	Data Raw: 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 3b 73 2e 73 73 5f 28 77 69 6e 64 6f 77 2c 27 4f 6a 45 33 4d 54 45 33 4d 54 6b 34 4f 54 67 31 4f 54 63 27 2c 5b 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 31 70 2d 75 73 65 72 2d 6c 69 73 74 2f 39 37 31 38 37 38 39 33 38 2f 3f 72 61 6e 64 6f 6d 5c 78 33 64 31 37 31 31 37 31 39 38 39 38 35 39 37 5c 78 32 36 63 76 5c 78 33 64 31 31 5c 78 32 36 66 73 74 5c 78 33 64 31 37 31 31 37 31 37 32 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 33 72 30 76 39 31 31 37 35 31 39 31 33 34 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 Data Ascii: ).call(this);;s.ss_(window,'OjE3MTE3MTk4OTg1OTc',['https://www.google.com/pagead/1p-user-list/971878938/?random\x3d1711719898597\x26cv\x3d11\x26fst\x3d1711717200000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be43r0v9117519134za200\x26gcd\x3d1
2024-03-29 13:45:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.16	49817	104.244.42.5	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:00 UTC	734	OUT	GET /i/adsct?bci=3&eci=2&event_id=576ea13c-93d9-4bc1-9cd1-aa5a7db7a594&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f18fa5bd-cf7a-4a85-8819-2f2353b1741d&tw_document_href=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4a8l&type=javascript&version=2.3.29 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=2934452f-75be-4322-8587-6e259dd8d5bb
2024-03-29 13:45:00 UTC	393	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 13:44:59 GMT perf: 7469935968 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: cfc1deefd497a357 strict-transport-security: max-age=0 x-response-time: 81 x-connection-hash: 431588829089c016e7e7bcbd7698f87b1e42d3691bd2a509c9dea692e7518c05 connection: close
2024-03-29 13:45:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.16	49818	142.251.16.157	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:00 UTC	1316	OUT	GET /td/rul/971878938?random=1711719898597&cv=11&fst=1711719898597&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43r0v9117519134za200&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&hn=www.googleadservices.com&frm=0&tiba=Buy%20Bitcoin%20with%20Credit%20or%20Debit%20Card%20Instantly%20-%20CEX.IO&npa=0&pscdl=noapi&auid=1182918140.1711719899&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:45:00 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 29 Mar 2024 13:45:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 29-Mar-2024 14:00:00 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-29 13:45:00 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-03-29 13:45:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.16	49821	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:00 UTC	869	OUT	GET /static/resources/media/visa.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes
2024-03-29 13:45:00 UTC	457	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:45:00 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-4cd" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: REVALIDATED X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c420e8b57a6-IAD
2024-03-29 13:45:00 UTC	912	IN	Data Raw: 34 63 64 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 37 33 22 20 68 65 69 67 68 74 3d 22 34 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 33 20 34 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 37 32 2e 36 20 34 33 2e 31 43 37 32 2e 36 20 34 34 2e 36 20 37 31 2e 34 20 34 35 2e 38 20 36 39 2e 39 20 34 35 2e 38 48 32 2e 37 43 31 2e 32 20 34 35 2e 38 20 30 20 34 34 2e 36 20 30 20 34 33 2e 31 56 32 2e 37 43 30 20 31 2e 32 20 31 2e 32 20 30 20 32 2e 37 20 30 48 36 39 2e 39 43 37 31 2e 34 20 30 20 37 32 2e 36 20 31 2e 32 20 37 32 2e 36 20 32 2e 37 56 34 33 2e 31 5a 22 0a 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c Data Ascii: 4cd<svg width="73" height="46" viewBox="0 0 73 46" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M72.6 43.1C72.6 44.6 71.4 45.8 69.9 45.8H2.7C1.2 45.8 0 44.6 0 43.1V2.7C0 1.2 1.2 0 2.7 0H69.9C71.4 0 72.6 1.2 72.6 2.7V43.1Z" fill
2024-03-29 13:45:00 UTC	324	IN	Data Raw: 39 36 20 33 32 2e 39 43 34 34 2e 37 39 39 36 20 33 32 2e 39 20 34 38 2e 31 39 39 36 20 33 30 2e 33 20 34 38 2e 32 39 39 36 20 32 36 2e 33 5a 4d 36 31 2e 32 39 39 36 20 33 32 2e 36 48 36 35 2e 38 39 39 36 4c 36 31 2e 38 39 39 36 20 31 33 2e 33 48 35 37 2e 35 39 39 36 43 35 36 2e 35 39 39 36 20 31 33 2e 33 20 35 35 2e 37 39 39 36 20 31 33 2e 39 20 35 35 2e 34 39 39 36 20 31 34 2e 37 4c 34 37 2e 39 39 39 36 20 33 32 2e 36 48 35 33 2e 31 39 39 36 4c 35 34 2e 31 39 39 36 20 32 39 2e 37 48 36 30 2e 35 39 39 36 4c 36 31 2e 32 39 39 36 20 33 32 2e 36 5a 4d 35 35 2e 36 39 39 36 20 32 35 2e 38 4c 35 38 2e 32 39 39 36 20 31 38 2e 36 4c 35 39 2e 37 39 39 36 20 32 35 2e 38 48 35 35 2e 36 39 39 36 5a 4d 33 34 2e 36 39 39 36 20 31 33 2e 33 4c 33 30 2e 35 39 39 36 20 33 Data Ascii: 96 32.9C44.7996 32.9 48.1996 30.3 48.2996 26.3ZM61.2996 32.6H65.8996L61.8996 13.3H57.5996C56.5996 13.3 55.7996 13.9 55.4996 14.7L47.9996 32.6H53.1996L54.1996 29.7H60.5996L61.2996 32.6ZM55.6996 25.8L58.2996 18.6L59.7996 25.8H55.6996ZM34.6996 13.3L30.5996 3
2024-03-29 13:45:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.16	49822	3.162.129.245	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:00 UTC	573	OUT	GET /scevent.min.js HTTP/1.1 Host: sc-static.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tr.snapchat.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-AB=b9bd00ec73544025b937f4253ff9de4c
2024-03-29 13:45:00 UTC	570	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 44888 Connection: close Server: CloudFront Date: Fri, 29 Mar 2024 11:20:10 GMT Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Content-Encoding: utf-8 Cache-Control: public, s-maxage=86400, max-age=600 ETag: b9bd00ec73544025b937f4253ff9de4c X-Cache: Hit from cloudfront Via: 1.1 6fc72fa6c2eb32c52ac1d02c16e75776.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD61-P3 X-Amz-Cf-Id: T02BnK3SHaha2fcfYf1Hj-HCbAWrzweDSsLaINJTMU8W_57d79kHwg== Age: 8690
2024-03-29 13:45:00 UTC	15814	IN	Data Raw: 2f 2a 2a 20 53 6e 61 70 63 68 61 74 20 50 69 78 65 6c 20 53 44 4b 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 2c 72 3d 31 2c 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 3c 65 3b 72 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 69 29 26 26 28 74 5b 69 5d 3d 6e 5b 69 5d 29 3b 72 65 74 75 72 6e 20 74 7d 2c 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 Data Ascii: /** Snapchat Pixel SDK */!function(){"use strict";var t=function(){return t=Object.assign\|\|function(t){for(var n,r=1,e=arguments.length;r<e;r++)for(var i in n=arguments[r])Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i]);return t},t.apply(this,argu
2024-03-29 13:45:00 UTC	16384	IN	Data Raw: 72 79 7b 72 65 74 75 72 6e 20 43 72 2e 73 74 72 69 6e 67 69 66 79 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 72 65 74 75 72 6e 20 63 28 72 29 3f 66 28 6e 2c 72 29 3f 76 6f 69 64 20 30 3a 28 52 28 6e 2c 72 29 2c 72 29 3a 72 7d 29 29 7d 63 61 74 63 68 28 74 29 7b 77 74 28 22 4a 53 4e 22 2c 74 29 7d 74 72 79 7b 69 66 28 63 28 74 29 26 26 21 66 28 6e 2c 74 29 29 7b 52 28 6e 2c 74 29 3b 76 61 72 20 72 3d 22 22 3b 69 66 28 62 28 74 2e 74 6f 4a 53 4f 4e 29 29 72 65 74 75 72 6e 20 44 72 28 74 2e 74 6f 4a 53 4f 4e 28 29 29 3b 69 66 28 6f 28 74 29 29 7b 66 6f 72 28 76 61 72 20 65 3d 44 28 74 29 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 7b 72 2b 3d 28 69 3f 22 2c 22 3a 22 22 29 2b 28 28 73 3d 44 72 28 74 5b 69 5d 29 29 7c 7c 22 6e 75 6c 6c 22 29 7d 72 65 74 Data Ascii: ry{return Cr.stringify(t,(function(t,r){return c(r)?f(n,r)?void 0:(R(n,r),r):r}))}catch(t){wt("JSN",t)}try{if(c(t)&&!f(n,t)){R(n,t);var r="";if(b(t.toJSON))return Dr(t.toJSON());if(o(t)){for(var e=D(t),i=0;i<e;i++){r+=(i?",":"")+((s=Dr(t[i]))\|\|"null")}ret
2024-03-29 13:45:00 UTC	12690	IN	Data Raw: 29 74 72 79 7b 76 61 72 20 61 3d 65 28 72 5b 6f 5d 2c 32 29 2c 63 3d 61 5b 30 5d 2c 75 3d 61 5b 31 5d 2c 73 3d 5f 69 28 63 29 2c 6c 3d 73 26 26 73 2e 76 61 6c 75 65 26 26 71 28 79 28 73 2e 76 61 6c 75 65 29 29 3b 69 66 28 6c 29 7b 76 61 72 20 76 3d 66 28 45 69 2c 75 29 3b 69 66 28 76 29 7b 76 61 72 20 64 3d 75 2e 72 65 70 6c 61 63 65 28 22 5f 22 2c 22 5f 73 22 29 3b 6e 5b 64 5d 3d 28 6e 5b 64 5d 3f 6e 5b 64 5d 2b 22 2c 22 3a 22 22 29 2b 67 69 28 6c 29 7d 69 66 28 76 7c 7c 66 28 62 69 2c 75 29 29 69 66 28 22 75 5f 70 6e 73 22 3d 3d 3d 75 29 66 6f 72 28 76 61 72 20 70 3d 22 75 5f 68 70 6e 73 22 2c 5f 3d 52 65 28 6c 2c 54 69 3d 54 69 7c 7c 2f 5e 30 2b 7c 5c 44 2f 67 2c 53 69 7c 7c 5b 22 31 22 5d 29 2c 68 3d 44 28 5f 29 2c 67 3d 30 3b 67 3c 68 3b 67 2b 2b 29 Data Ascii: )try{var a=e(r[o],2),c=a[0],u=a[1],s=_i(c),l=s&&s.value&&q(y(s.value));if(l){var v=f(Ei,u);if(v){var d=u.replace("_","_s");n[d]=(n[d]?n[d]+",":"")+gi(l)}if(v\|\|f(bi,u))if("u_pns"===u)for(var p="u_hpns",_=Re(l,Ti=Ti\|\|/^0+\|\D/g,Si\|\|["1"]),h=D(_),g=0;g<h;g++)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.16	49820	104.244.42.67	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:00 UTC	755	OUT	GET /i/adsct?bci=3&eci=2&event_id=576ea13c-93d9-4bc1-9cd1-aa5a7db7a594&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=f18fa5bd-cf7a-4a85-8819-2f2353b1741d&tw_document_href=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o4a8l&type=javascript&version=2.3.29 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_mIwiL/VRiw7nRNZdQorkoQ=="
2024-03-29 13:45:00 UTC	401	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 13:44:59 GMT perf: 7469935968 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: ce88e560233274a4 strict-transport-security: max-age=631138519 x-response-time: 74 x-connection-hash: 04d5ae48aed135c0f907d4d11ef22581c7beb8dcfcf2eee78d9ffe89af0df84b connection: close
2024-03-29 13:45:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.16	49819	142.251.16.106	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:00 UTC	1001	OUT	POST /pagead/landing?gcs=G111&gcd=13n3n3n3n5&rnd=1742360597.1711719899&url=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&dma=0&npa=0&gtm=45be43r0v9117519134za200&auid=1182918140.1711719899 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-03-29 13:45:00 UTC	825	IN	HTTP/1.1 302 Found P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 29 Mar 2024 13:45:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=13n3n3n3n5&rnd=1742360597.1711719899&url=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&dma=0&npa=0&gtm=45be43r0v9117519134za200&auid=1182918140.1711719899 X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 13:45:00 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.16	49823	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:00 UTC	875	OUT	GET /static/resources/media/mastercard.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes
2024-03-29 13:45:00 UTC	457	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:45:00 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-6b8" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: REVALIDATED X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c424b3581bb-IAD
2024-03-29 13:45:00 UTC	912	IN	Data Raw: 36 62 38 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 36 22 20 68 65 69 67 68 74 3d 22 32 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 36 20 32 39 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 39 2e 35 39 36 20 33 2e 37 34 39 35 31 48 31 36 2e 34 30 36 32 56 32 35 2e 32 34 37 48 32 39 2e 35 39 36 56 33 2e 37 34 39 35 31 5a 22 20 66 69 6c 6c 3d 22 23 46 46 35 46 30 30 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 37 2e 37 36 36 33 20 31 34 2e 34 39 39 38 43 31 37 2e 37 36 34 37 20 31 32 2e 34 32 39 38 20 31 38 2e 32 33 34 39 20 31 30 2e 33 38 36 35 20 31 39 2e 31 34 31 34 20 38 2e 35 32 34 36 Data Ascii: 6b8<svg width="46" height="29" viewBox="0 0 46 29" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M29.596 3.74951H16.4062V25.247H29.596V3.74951Z" fill="#FF5F00"/> <path d="M17.7663 14.4998C17.7647 12.4298 18.2349 10.3865 19.1414 8.5246
2024-03-29 13:45:00 UTC	815	IN	Data Raw: 35 2e 36 37 35 35 20 33 37 2e 34 35 31 39 20 32 36 2e 37 39 36 35 43 33 35 2e 31 33 39 36 20 32 37 2e 39 31 37 35 20 33 32 2e 35 35 38 20 32 38 2e 33 36 36 36 20 33 30 2e 30 30 32 20 32 38 2e 30 39 32 37 43 32 37 2e 34 34 36 31 20 32 37 2e 38 31 38 37 20 32 35 2e 30 31 38 39 20 32 36 2e 38 33 32 36 20 32 32 2e 39 39 38 20 32 35 2e 32 34 37 31 43 32 34 2e 36 32 39 32 20 32 33 2e 39 36 37 39 20 32 35 2e 39 34 37 39 20 32 32 2e 33 33 35 38 20 32 36 2e 38 35 34 36 20 32 30 2e 34 37 33 38 43 32 37 2e 37 36 31 34 20 31 38 2e 36 31 31 38 20 32 38 2e 32 33 32 36 20 31 36 2e 35 36 38 36 20 32 38 2e 32 33 32 36 20 31 34 2e 34 39 38 34 43 32 38 2e 32 33 32 36 20 31 32 2e 34 32 38 32 20 32 37 2e 37 36 31 34 20 31 30 2e 33 38 35 20 32 36 2e 38 35 34 36 20 38 2e 35 32 Data Ascii: 5.6755 37.4519 26.7965C35.1396 27.9175 32.558 28.3666 30.002 28.0927C27.4461 27.8187 25.0189 26.8326 22.998 25.2471C24.6292 23.9679 25.9479 22.3358 26.8546 20.4738C27.7614 18.6118 28.2326 16.5686 28.2326 14.4984C28.2326 12.4282 27.7614 10.385 26.8546 8.52
2024-03-29 13:45:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.16	49824	3.225.23.81	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:00 UTC	592	OUT	POST /messenger/web/ping HTTP/1.1 Host: api-iam.intercom.io Connection: keep-alive Content-Length: 434 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://cex.io Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:45:00 UTC	434	OUT	Data Raw: 61 70 70 5f 69 64 3d 71 32 32 67 64 32 78 33 26 76 3d 33 26 67 3d 66 65 30 66 66 63 34 35 38 36 39 64 61 66 35 34 33 37 35 66 36 31 65 38 38 64 38 62 65 62 36 63 35 36 63 32 32 64 62 62 26 73 3d 38 64 66 35 35 39 63 37 2d 35 34 34 65 2d 34 66 39 35 2d 39 63 64 35 2d 66 33 34 31 34 32 63 36 33 62 31 63 26 72 3d 26 70 6c 61 74 66 6f 72 6d 3d 77 65 62 26 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 5f 74 79 70 65 3d 6a 73 2d 73 6e 69 70 70 65 74 26 49 64 65 6d 70 6f 74 65 6e 63 79 2d 4b 65 79 3d 61 31 65 65 35 36 66 63 33 39 33 66 61 62 66 64 26 69 6e 74 65 72 6e 61 6c 3d 25 37 42 25 37 44 26 69 73 5f 69 6e 74 65 72 73 65 63 74 69 6f 6e 5f 62 6f 6f 74 65 64 3d 66 61 6c 73 65 26 70 61 67 65 5f 74 69 74 6c 65 3d 42 75 79 25 32 30 42 69 74 63 6f 69 6e 25 32 30 77 69 74 Data Ascii: app_id=q22gd2x3&v=3&g=fe0ffc45869daf54375f61e88d8beb6c56c22dbb&s=8df559c7-544e-4f95-9cd5-f34142c63b1c&r=&platform=web&installation_type=js-snippet&Idempotency-Key=a1ee56fc393fabfd&internal=%7B%7D&is_intersection_booted=false&page_title=Buy%20Bitcoin%20wit
2024-03-29 13:45:00 UTC	912	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:45:00 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Status: 200 OK Cache-Control: max-age=0, private, must-revalidate Access-Control-Allow-Origin: https://cex.io Vary: Accept,Accept-Encoding Strict-Transport-Security: max-age=31556952; includeSubDomains; preload X-Intercom-Version: 8bc832a955b33325cd32d446b951221240981ec2 X-XSS-Protection: 1; mode=block X-Request-Queueing: 0 X-Request-Id: 000fdt67dmbb8hv4gj8g Access-Control-Allow-Headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS ETag: W/"c969523fa9628ec1e810b79a235efe54" X-Runtime: 0.239074 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Server: nginx x-ami-version: ami-03244067f559d9bd4
2024-03-29 13:45:00 UTC	4627	IN	Data Raw: 31 32 30 62 0d 0a 7b 22 61 70 70 22 3a 7b 22 6e 61 6d 65 22 3a 22 43 45 58 2e 49 4f 22 2c 22 61 75 64 69 6f 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 73 68 6f 77 5f 70 6f 77 65 72 65 64 5f 62 79 22 3a 66 61 6c 73 65 2c 22 74 65 61 6d 5f 69 6e 74 72 6f 22 3a 22 57 65 20 72 65 73 70 6f 6e 64 20 74 6f 20 38 30 25 20 6f 66 20 72 65 71 75 65 73 74 73 20 77 69 74 68 69 6e 20 35 20 64 61 79 73 2c 20 62 75 74 20 69 6e 20 73 6f 6d 65 20 63 61 73 65 73 20 72 65 70 6c 79 20 6d 61 79 20 74 61 6b 65 20 75 70 20 74 6f 20 37 20 64 61 79 73 2e 20 57 65 20 77 6f 72 6b 20 66 72 6f 6d 20 36 3a 30 30 20 74 69 6c 6c 20 32 32 3a 30 30 20 47 4d 54 22 2c 22 74 65 61 6d 5f 67 72 65 65 74 69 6e 67 22 3a 22 48 69 20 74 68 65 72 65 20 f0 9f 91 8b 22 2c 22 6d 65 73 73 65 6e 67 Data Ascii: 120b{"app":{"name":"CEX.IO","audio_enabled":true,"show_powered_by":false,"team_intro":"We respond to 80% of requests within 5 days, but in some cases reply may take up to 7 days. We work from 6:00 till 22:00 GMT","team_greeting":"Hi there ","messeng
2024-03-29 13:45:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.16	49825	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:00 UTC	868	OUT	GET /static/resources/media/pci.svg HTTP/1.1 Host: profile.cex.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes
2024-03-29 13:45:00 UTC	458	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:45:00 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Wed, 20 Mar 2024 18:00:51 GMT etag: W/"65fb2453-203a" strict-transport-security: max-age=0; includeSubDomains access-control-allow-origin: * Cache-Control: max-age=18000 CF-Cache-Status: REVALIDATED X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c427ef28221-IAD
2024-03-29 13:45:00 UTC	911	IN	Data Raw: 32 30 33 61 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 38 32 22 20 68 65 69 67 68 74 3d 22 32 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 32 20 32 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 35 2e 38 37 39 38 38 20 31 37 2e 37 35 33 37 56 32 36 2e 37 37 31 32 48 30 2e 36 30 36 34 34 35 56 31 2e 31 37 37 34 39 48 31 30 2e 35 39 30 38 43 31 32 2e 35 31 32 37 20 31 2e 31 37 37 34 39 20 31 34 2e 32 30 30 32 20 31 2e 35 32 39 30 35 20 31 35 2e 36 35 33 33 20 32 2e 32 33 32 31 38 43 31 37 2e 31 31 38 32 20 32 2e 39 33 35 33 20 31 38 2e 32 34 33 32 20 33 2e 39 33 37 32 36 20 31 39 2e 30 32 38 33 20 35 2e 32 Data Ascii: 203a<svg width="82" height="28" viewBox="0 0 82 28" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M5.87988 17.7537V26.7712H0.606445V1.17749H10.5908C12.5127 1.17749 14.2002 1.52905 15.6533 2.23218C17.1182 2.9353 18.2432 3.93726 19.0283 5.2
2024-03-29 13:45:00 UTC	1369	IN	Data Raw: 37 33 20 32 33 2e 35 30 34 39 20 38 2e 35 31 39 32 39 20 32 34 2e 33 37 32 31 20 36 2e 36 34 34 32 39 43 32 35 2e 32 33 39 33 20 34 2e 37 36 39 32 39 20 32 36 2e 34 37 35 36 20 33 2e 33 33 33 37 34 20 32 38 2e 30 38 31 31 20 32 2e 33 33 37 36 35 43 32 39 2e 36 39 38 32 20 31 2e 33 32 39 38 33 20 33 31 2e 35 37 33 32 20 30 2e 38 32 35 39 32 38 20 33 33 2e 37 30 36 31 20 30 2e 38 32 35 39 32 38 43 33 36 2e 36 35 39 32 20 30 2e 38 32 35 39 32 38 20 33 39 2e 30 33 38 31 20 31 2e 36 31 36 39 34 20 34 30 2e 38 34 32 38 20 33 2e 31 39 38 39 37 43 34 32 2e 36 34 37 35 20 34 2e 37 38 31 30 31 20 34 33 2e 36 39 30 34 20 37 2e 30 30 31 37 31 20 34 33 2e 39 37 31 37 20 39 2e 38 36 31 30 38 48 33 38 2e 36 39 38 32 43 33 38 2e 35 36 39 33 20 38 2e 32 30 38 37 34 20 33 Data Ascii: 73 23.5049 8.51929 24.3721 6.64429C25.2393 4.76929 26.4756 3.33374 28.0811 2.33765C29.6982 1.32983 31.5732 0.825928 33.7061 0.825928C36.6592 0.825928 39.0381 1.61694 40.8428 3.19897C42.6475 4.78101 43.6904 7.00171 43.9717 9.86108H38.6982C38.5693 8.20874 3
2024-03-29 13:45:00 UTC	1369	IN	Data Raw: 31 2e 38 32 31 20 31 33 2e 32 38 39 33 43 37 31 2e 38 32 31 20 31 32 2e 39 32 39 36 20 37 31 2e 36 39 34 31 20 31 32 2e 36 35 34 35 20 37 31 2e 34 34 30 32 20 31 32 2e 34 36 34 31 43 37 31 2e 31 38 36 33 20 31 32 2e 32 36 39 35 20 37 30 2e 37 32 39 32 20 31 32 2e 30 36 36 33 20 37 30 2e 30 36 39 31 20 31 31 2e 38 35 34 37 43 36 39 2e 34 30 38 39 20 31 31 2e 36 33 38 39 20 36 38 2e 38 38 36 33 20 31 31 2e 34 32 37 33 20 36 38 2e 35 30 31 32 20 31 31 2e 32 32 43 36 37 2e 34 35 31 37 20 31 30 2e 36 35 32 39 20 36 36 2e 39 32 37 20 39 2e 38 38 39 30 38 20 36 36 2e 39 32 37 20 38 2e 39 32 38 34 37 43 36 36 2e 39 32 37 20 38 2e 34 32 39 31 32 20 36 37 2e 30 36 36 36 20 37 2e 39 38 34 37 38 20 36 37 2e 33 34 35 39 20 37 2e 35 39 35 34 36 43 36 37 2e 36 32 39 35 Data Ascii: 1.821 13.2893C71.821 12.9296 71.6941 12.6545 71.4402 12.4641C71.1863 12.2695 70.7292 12.0663 70.0691 11.8547C69.4089 11.6389 68.8863 11.4273 68.5012 11.22C67.4517 10.6529 66.927 9.88908 66.927 8.92847C66.927 8.42912 67.0666 7.98478 67.3459 7.59546C67.6295
2024-03-29 13:45:00 UTC	1369	IN	Data Raw: 20 31 32 2e 32 36 39 35 20 37 38 2e 37 32 37 33 20 31 32 2e 30 36 36 33 20 37 38 2e 30 36 37 31 20 31 31 2e 38 35 34 37 43 37 37 2e 34 30 37 20 31 31 2e 36 33 38 39 20 37 36 2e 38 38 34 33 20 31 31 2e 34 32 37 33 20 37 36 2e 34 39 39 33 20 31 31 2e 32 32 43 37 35 2e 34 34 39 38 20 31 30 2e 36 35 32 39 20 37 34 2e 39 32 35 20 39 2e 38 38 39 30 38 20 37 34 2e 39 32 35 20 38 2e 39 32 38 34 37 43 37 34 2e 39 32 35 20 38 2e 34 32 39 31 32 20 37 35 2e 30 36 34 37 20 37 2e 39 38 34 37 38 20 37 35 2e 33 34 34 20 37 2e 35 39 35 34 36 43 37 35 2e 36 32 37 35 20 37 2e 32 30 31 39 20 37 36 2e 30 33 31 36 20 36 2e 38 39 35 31 20 37 36 2e 35 35 36 34 20 36 2e 36 37 35 30 35 43 37 37 2e 30 38 35 34 20 36 2e 34 35 35 20 37 37 2e 36 37 37 38 20 36 2e 33 34 34 39 37 20 37 Data Ascii: 12.2695 78.7273 12.0663 78.0671 11.8547C77.407 11.6389 76.8843 11.4273 76.4993 11.22C75.4498 10.6529 74.925 9.88908 74.925 8.92847C74.925 8.42912 75.0647 7.98478 75.344 7.59546C75.6275 7.2019 76.0316 6.8951 76.5564 6.67505C77.0854 6.455 77.6778 6.34497 7
2024-03-29 13:45:00 UTC	1369	IN	Data Raw: 35 38 2e 38 31 30 38 20 32 31 2e 33 31 31 38 43 35 38 2e 36 30 32 34 20 32 31 2e 30 36 35 37 20 35 38 2e 34 39 38 33 20 32 30 2e 37 32 38 34 20 35 38 2e 34 39 38 33 20 32 30 2e 33 56 32 30 2e 31 32 36 32 43 35 38 2e 34 39 38 33 20 31 39 2e 38 35 32 38 20 35 38 2e 35 34 36 35 20 31 39 2e 36 31 31 39 20 35 38 2e 36 34 32 38 20 31 39 2e 34 30 33 36 43 35 38 2e 37 33 39 32 20 31 39 2e 31 39 35 32 20 35 38 2e 38 37 36 35 20 31 39 2e 30 33 35 37 20 35 39 2e 30 35 34 39 20 31 38 2e 39 32 35 43 35 39 2e 32 33 34 36 20 31 38 2e 38 31 33 31 20 35 39 2e 34 34 32 39 20 31 38 2e 37 35 37 31 20 35 39 2e 36 37 39 39 20 31 38 2e 37 35 37 31 43 36 30 2e 30 30 38 20 31 38 2e 37 35 37 31 20 36 30 2e 32 37 32 34 20 31 38 2e 38 34 35 20 36 30 2e 34 37 32 39 20 31 39 2e 30 32 Data Ascii: 58.8108 21.3118C58.6024 21.0657 58.4983 20.7284 58.4983 20.3V20.1262C58.4983 19.8528 58.5465 19.6119 58.6428 19.4036C58.7392 19.1952 58.8765 19.0357 59.0549 18.925C59.2346 18.8131 59.4429 18.7571 59.6799 18.7571C60.008 18.7571 60.2724 18.845 60.4729 19.02
2024-03-29 13:45:00 UTC	1369	IN	Data Raw: 32 2e 39 38 33 36 20 31 39 2e 38 35 35 34 20 36 32 2e 39 33 30 32 20 31 39 2e 36 32 38 38 20 36 32 2e 38 32 33 34 20 31 39 2e 34 37 33 39 43 36 32 2e 37 31 36 37 20 31 39 2e 33 31 38 39 20 36 32 2e 35 36 34 33 20 31 39 2e 32 34 31 35 20 36 32 2e 33 36 36 34 20 31 39 2e 32 34 31 35 43 36 32 2e 31 36 39 38 20 31 39 2e 32 34 31 35 20 36 32 2e 30 31 38 31 20 31 39 2e 33 31 38 33 20 36 31 2e 39 31 31 33 20 31 39 2e 34 37 31 39 43 36 31 2e 38 30 34 36 20 31 39 2e 36 32 34 33 20 36 31 2e 37 35 30 35 20 31 39 2e 38 34 38 32 20 36 31 2e 37 34 39 32 20 32 30 2e 31 34 33 38 56 32 30 2e 32 38 32 35 43 36 31 2e 37 34 39 32 20 32 30 2e 35 37 32 38 20 36 31 2e 38 30 32 36 20 32 30 2e 37 39 38 31 20 36 31 2e 39 30 39 34 20 32 30 2e 39 35 38 33 43 36 32 2e 30 31 36 31 20 Data Ascii: 2.9836 19.8554 62.9302 19.6288 62.8234 19.4739C62.7167 19.3189 62.5643 19.2415 62.3664 19.2415C62.1698 19.2415 62.0181 19.3183 61.9113 19.4719C61.8046 19.6243 61.7505 19.8482 61.7492 20.1438V20.2825C61.7492 20.5728 61.8026 20.7981 61.9094 20.9583C62.0161
2024-03-29 13:45:01 UTC	502	IN	Data Raw: 20 66 69 6c 6c 3d 22 23 36 36 37 43 39 39 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 37 35 2e 32 36 35 36 20 32 31 2e 30 35 34 48 37 34 2e 32 33 38 33 4c 37 34 2e 30 34 33 20 32 31 2e 36 33 39 39 48 37 33 2e 34 31 39 39 4c 37 34 2e 34 37 38 35 20 31 38 2e 37 39 36 31 48 37 35 2e 30 32 31 35 4c 37 36 2e 30 38 35 39 20 32 31 2e 36 33 39 39 48 37 35 2e 34 36 32 39 4c 37 35 2e 32 36 35 36 20 32 31 2e 30 35 34 5a 4d 37 34 2e 33 39 36 35 20 32 30 2e 35 37 39 33 48 37 35 2e 31 30 37 34 4c 37 34 2e 37 35 20 31 39 2e 35 31 34 39 4c 37 34 2e 33 39 36 35 20 32 30 2e 35 37 39 33 5a 22 0a 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 36 36 37 43 39 39 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 37 38 2e 37 30 34 31 20 32 31 2e 36 33 39 39 48 Data Ascii: fill="#667C99"/> <path d="M75.2656 21.054H74.2383L74.043 21.6399H73.4199L74.4785 18.7961H75.0215L76.0859 21.6399H75.4629L75.2656 21.054ZM74.3965 20.5793H75.1074L74.75 19.5149L74.3965 20.5793Z" fill="#667C99"/> <path d="M78.7041 21.6399H
2024-03-29 13:45:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.16	49827	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:00 UTC	2157	OUT	GET /ws/ HTTP/1.1 Host: cex.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_session=RudderEncrypt%3AU2FsdGVkX19abZEkW8YE%2BF05b7BbB7afHsHv2MjnudSIt48PK%2BOJmR5pjtIXA6UrDtM3kf%2B0RfzAtkKZCj1tgMtPGwNrVuQgAHDlkwypck5xKK2NLMsZiLFQIUwbVoGqChNt%2BHwoz2CDp%2ByBkZ9T5A%3D%3D; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f Sec-WebSocket-Key: Y9swCLtBkAA0FdUxASPXzA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-29 13:45:01 UTC	1221	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 29 Mar 2024 13:45:01 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 Content-Security-Policy-Report-Only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Set-Cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fws%2F; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS Location: /ws Strict-Transport-Security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c4399bb3b14-IAD
2024-03-29 13:45:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.16	49828	151.101.65.140	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:00 UTC	877	OUT	GET /rp.gif?ts=1711719899067&id=t2_fngyx&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=586ad4c0-3fa0-43ef-b6b6-cef72ecf199f&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:45:00 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Fri, 29 Mar 2024 13:45:00 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-03-29 13:45:00 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.16	49829	142.251.16.106	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:00 UTC	1268	OUT	GET /pagead/1p-user-list/971878938/?random=1711719898597&cv=11&fst=1711717200000&bg=ffffff&guid=ON&async=1&gtm=45be43r0v9117519134za200&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&frm=0&tiba=Buy%20Bitcoin%20with%20Credit%20or%20Debit%20Card%20Instantly%20-%20CEX.IO&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqVCQy0JY0P1O6wr6K7J3AbHYoU2DdgA&random=4210822442&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-03-29 13:45:00 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 29 Mar 2024 13:45:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 13:45:00 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.16	49831	52.85.151.82	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:00 UTC	408	OUT	GET /sourceConfig/?p=cdn&v=2.48.6&writeKey=20k74eNX2JyWtp0UKQ9VlhB2Xgz HTTP/1.1 Host: api.rudderstack.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:45:00 UTC	662	IN	HTTP/1.1 401 Unauthorized Content-Type: application/json; charset=utf-8 Content-Length: 46 Connection: close Date: Fri, 29 Mar 2024 13:45:00 GMT X-Request-ID: 89fa4760-edd2-11ee-993a-7dee1c1602cf X-DNS-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Vary: Origin X-Cache: Error from cloudfront Via: 1.1 e685e9e08c2e4b105f4d86b35da50628.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: rstBJAqzyONAvdijPWpKCcjSw8aP0-2J9b-divO1hhLdFvsXSOazDw==
2024-03-29 13:45:00 UTC	46	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 57 72 69 74 65 6b 65 79 20 6e 6f 74 20 66 6f 75 6e 64 20 69 6e 20 62 61 73 69 63 20 61 75 74 68 22 7d Data Ascii: {"message":"Writekey not found in basic auth"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.16	49832	52.22.248.30	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:00 UTC	529	OUT	OPTIONS /v1/page HTTP/1.1 Host: cex-dataplane.rudderstack.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: anonymousid,authorization,content-type Origin: https://cex.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:45:00 UTC	410	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Anonymousid, Authorization, Content-Type Access-Control-Allow-Methods: POST Access-Control-Allow-Origin: https://cex.io Access-Control-Max-Age: 900 Date: Fri, 29 Mar 2024 13:45:00 GMT Server: openresty/1.21.4.2 Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.16	49833	142.251.179.157	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:00 UTC	821	OUT	GET /pagead/landing?gcs=G111&gcd=13n3n3n3n5&rnd=1742360597.1711719899&url=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&dma=0&npa=0&gtm=45be43r0v9117519134za200&auid=1182918140.1711719899 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-03-29 13:45:01 UTC	960	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 29 Mar 2024 13:45:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUnTASOlliXdwzfwcaXUWiFp7BaWbu9uF5xcpBbwg6Xg2t8GC9Wwtm0GE_Cz; expires=Sun, 29-Mar-2026 13:45:00 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 13:45:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.16	49836	35.190.43.134	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:01 UTC	699	OUT	POST /p HTTP/1.1 Host: tr6.snapchat.com Connection: keep-alive Content-Length: 889 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://cex.io Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sc_at=v2\|H4sIAAAAAAAAAA3CgQkAIAgEwIkERUN/HMucwuHruHNKu8KpWkGWmRRXkpbxCrBv5Z4Rlx8BDD+iG1R9MgAAAA==
2024-03-29 13:45:01 UTC	889	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 63 31 66 63 62 31 66 36 2d 62 66 32 66 2d 34 33 33 39 2d 38 62 36 39 2d 32 64 61 32 36 37 36 33 61 32 65 38 22 2c 22 6c 63 22 3a 22 34 61 35 66 31 61 34 39 2d 66 37 37 31 2d 34 32 61 33 2d 61 61 31 33 2d 38 39 35 39 62 35 36 66 37 65 63 30 22 2c 22 6c 73 22 3a 22 33 62 35 63 33 62 66 38 2d 39 34 31 39 2d 34 37 66 34 2d 62 62 66 35 2d 65 66 62 62 63 35 61 36 34 31 61 36 22 2c 22 72 22 3a 22 36 63 62 66 35 32 35 38 2d 31 36 64 30 2d 34 62 33 38 2d 61 31 35 39 2d 62 64 37 63 37 64 36 38 63 31 35 33 22 2c 22 73 73 22 3a 22 61 32 37 61 34 38 63 33 2d 34 32 65 31 2d 34 61 62 61 2d 62 65 35 66 2d 64 35 65 38 30 65 66 30 62 65 34 62 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"c1fcb1f6-bf2f-4339-8b69-2da26763a2e8","lc":"4a5f1a49-f771-42a3-aa13-8959b56f7ec0","ls":"3b5c3bf8-9419-47f4-bbf5-efbbc5a641a6","r":"6cbf5258-16d0-4b38-a159-bd7c7d68c153","ss":"a27a48c3-42e1-4aba-be5f-d5e80ef0be4b","df":true,"s
2024-03-29 13:45:01 UTC	429	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 13:45:01 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.16	49837	3.225.23.81	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:01 UTC	361	OUT	GET /messenger/web/ping HTTP/1.1 Host: api-iam.intercom.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:45:01 UTC	4209	IN	HTTP/1.1 406 Not Acceptable Date: Fri, 29 Mar 2024 13:45:01 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 144 Connection: close Status: 406 Not Acceptable Vary: Accept-Encoding Strict-Transport-Security: max-age=31556952; includeSubDomains; preload X-XSS-Protection: 1; mode=block X-Request-Id: 000eav6lsv8tshn9l8sg X-Runtime: 0.011310 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; base-uri 'self'; child-src 'self' docs.google.com fast.wistia.net fast.wistia.com js.stripe.com hooks.stripe.com platform.twitter.com player.vimeo.com staticxx.facebook.com www.facebook.com web.facebook.com www.loom.com play.vidyard.com web.microsoftstream.com share.synthesia.io embed.app.guidde.com share.descript.com app.guideflow.com www.youtube.com www.youtube-nocookie.com content.jwplatform.com players.brightcove.net intercom-sheets.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com gtm.intercom-marketing.com intercominc.typeform.com www.intercom-reporting.com insight.adsrvr.org apisandbox.zuora.com zuora.com www.zuora.com .my.connect.aws www.recaptcha.net intercom.help intercom-help.eu au.intercom.help sharepoint.com .sharepoint.com; connect-src 'self' app.intercom.com api-iam.intercom.io api-ping.intercom.io api-visitor-analytics.intercom.com nexus-websocket-a.intercom.io via.intercom.io wss://nexus-websocket-a.intercom.io nexus-europe-websocket.intercom.io wss://nexus-europe-websocket.intercom.io nexus-australia-websocket.intercom.io wss://nexus-australia-websocket.intercom.io uploads.intercomcdn.com uploads.intercomcdn.eu uploads.au.intercomcdn.com static.intercomassets.com app.getsentry.com sentry.io api.stripe.com meet.intercom.com meet.eu.intercom.com meet.au.intercom.com preview.intercom.com www.google-analytics.com stats.g.doubleclick.net www.facebook.com static.intercomassets.eu app.eu.intercom.com api-iam.eu.intercom.io static.au.intercomassets.com api-iam.au.intercom.io api.au.intercom.io .intercom-chat.com wss://.nexus.intercom-chat.com .messenger.intercom-chat.com graph.facebook.com .twilio.com wss://.twilio.com frontend-telemetry.intercom.io frontend-telemetry.eu.intercom.io frontend-telemetry.au.intercom.io user-presence.intercom.com; font-src data: https:; frame-src 'self' docs.google.com fast.wistia.net fast.wistia.com js.stripe.com hooks.stripe.com platform.twitter.com player.vimeo.com staticxx.facebook.com www.facebook.com web.facebook.com www.loom.com play.vidyard.com web.microsoftstream.com share.synthesia.io embed.app.guidde.com share.descript.com app.guideflow.com www.youtube.com www.youtube-nocookie.com content.jwplatform.com players.brightcove.net intercom-sheets.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com gtm.intercom-marketing.com intercominc.typeform.com www.intercom-reporting.com insight.adsrvr.org apisandbox.zuora.com zuora.com www.zuora.com .my.connect.aws www.recaptcha.net intercom.help intercom-help.eu au.intercom.help sharepoint.com *.sharepoint.com; img-src data: blob: https:; media-src data: blob: https:; object-src 'none'; script-src 'self' js.intercomcdn.com static.intercomassets.com store.intercomassets.com billing-admin.intercomassets.com billing-internal.intercomcdn.com developer-home.intercomassets.com store.intercom.io widget.intercom.io api.tiles.mapbox.com connect.facebook.net js.stripe.com platform.twitter.com switchet.s3.amazonaws.com www.google-analytics.com munchkin.marketo.net app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com dp3rct5vic41c.cloudfront.net static.intercomassets.eu static.au.intercomassets.com static.zuora.com p.trellocdn.com www.recaptcha.net; style-src 'self' 'unsafe-inline' static.intercomassets.com billing-internal.intercomcdn.com developer-home.intercomassets.com static.intercomcdn.com marketing.intercomassets.com api.tiles.mapbox.com fonts.googleapis.com maxcdn.bootstrapcdn.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com fonts.intercomcdn.com static.intercomassets.eu static.au.intercomassets.com; report-uri https://app.getsentry.com/api/66205/csp-report/?sentry_key=0d13edc0ffce4b02bd7bc48d0b497300 Server: nginx
2024-03-29 13:45:01 UTC	144	IN	Data Raw: 7b 22 65 72 72 6f 72 73 22 3a 5b 7b 22 63 6f 64 65 22 3a 22 6d 65 64 69 61 5f 74 79 70 65 5f 6e 6f 74 5f 61 63 63 65 70 74 61 62 6c 65 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 54 68 65 20 41 63 63 65 70 74 20 68 65 61 64 65 72 20 73 68 6f 75 6c 64 20 73 65 6e 64 20 61 20 6d 65 64 69 61 20 74 79 70 65 20 6f 66 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 7d 5d 2c 22 74 79 70 65 22 3a 22 65 72 72 6f 72 2e 6c 69 73 74 22 7d Data Ascii: {"errors":[{"code":"media_type_not_acceptable","message":"The Accept header should send a media type of application/json"}],"type":"error.list"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.16	49839	3.33.152.127	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:01 UTC	647	OUT	GET /i/o/475519/eabaa4fa79044587e479220a/41bec6986704a574349426a752d128dc.png HTTP/1.1 Host: downloads.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:45:01 UTC	1253	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:45:01 GMT Content-Type: image/png Content-Length: 5563 Connection: close Status: 200 OK Last-Modified: Tue, 09 Jan 2024 17:19:14 GMT Cache-Control: max-age=86400, private Strict-Transport-Security: max-age=31556952; includeSubDomains; preload X-Intercom-Version: 8bc832a955b33325cd32d446b951221240981ec2 Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Request-Queueing: 0 X-Request-Id: 00025llsjs1qck8cs2v0 Cross-Origin-Resource-Policy: cross-origin Content-Disposition: inline; filename="41bec6986704a574349426a752d128dc.png"; filename*=UTF-8''41bec6986704a574349426a752d128dc.png Content-Transfer-Encoding: binary X-Runtime: 0.075365 X-Frame-Options: deny X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; font-src fonts.intercomcdn.com; img-src downloads.intercomcdn.com/images/logo-gray-16x16-at-2x.png; media-src 'self'; style-src downloads.intercomcdn.com/410.css fonts.intercomcdn.com/proxima-nova/proxima-nova-all.css static.intercomassets.com Set-Cookie: gtm_id=4dceb4e1-e9af-4e03-b2ef-571592c0a535; domain=intercom.com; path=/; expires=Sat, 29 Mar 2025 13:45:01 GMT; SameSite=None; secure Server: nginx x-ami-version: ami-03244067f559d9bd4
2024-03-29 13:45:01 UTC	5563	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 15 82 49 44 41 54 78 01 ed 9d 4d 72 54 49 92 c7 dd 5f 4a 48 65 b3 28 cd 09 3a b1 2a e8 31 ab 05 e2 04 24 27 28 d8 74 23 f5 82 cc 13 a0 3a 01 aa 13 14 9c 20 53 8b 41 35 b5 11 9c 00 71 02 e8 45 99 95 49 60 64 9d 60 e8 c5 0c 29 a4 7c de e1 2f 33 45 ea 5b 29 bd 08 8f 78 ef ff 33 a3 f4 85 59 21 e9 fd d2 3d 22 3c dc 99 40 d4 34 b7 ba 4b 8b 03 5a ca 85 96 85 69 89 dd a7 84 f9 5b 12 5a d2 2f 93 7e 6e f4 7e 81 e8 e7 40 4d 90 ce 1c 81 28 f8 af cd 6e 53 25 55 41 73 e6 3b 4e cc 65 52 19 9d bc 43 fd 0b 3c fa 7b 72 f8 1f 3a fc 84 10 a8 2b 10 d8 00 95 d5 49 d9 22 15 d5 49 ab b2 0e 35 8a f2 94 8c b0 12 5c 02 08 1c 80 1f 7e eb 2e 1f 1c 50 4b 32 be e7 bc 6c 0d 27 29 ef Data Ascii: PNGIHDR>UIDATxMrTI_JHe(:*1$'(t#: SA5qEI`d`)\|/3E[)x3Y!="<@4KZi[Z/~n~@M(nS%UAs;NeRC<{r:+I"I5\~.PK2l')

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.16	49840	151.101.129.140	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:01 UTC	651	OUT	GET /rp.gif?ts=1711719899067&id=t2_fngyx&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=586ad4c0-3fa0-43ef-b6b6-cef72ecf199f&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:45:01 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Fri, 29 Mar 2024 13:45:01 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-03-29 13:45:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.16	49841	35.190.43.134	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:01 UTC	699	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 3155 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://cex.io Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sc_at=v2\|H4sIAAAAAAAAAA3CgQkAIAgEwIkERUN/HMucwuHruHNKu8KpWkGWmRRXkpbxCrBv5Z4Rlx8BDD+iG1R9MgAAAA==
2024-03-29 13:45:01 UTC	3155	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 63 31 66 63 62 31 66 36 2d 62 66 32 66 2d 34 33 33 39 2d 38 62 36 39 2d 32 64 61 32 36 37 36 33 61 32 65 38 22 2c 22 6c 63 22 3a 22 34 61 35 66 31 61 34 39 2d 66 37 37 31 2d 34 32 61 33 2d 61 61 31 33 2d 38 39 35 39 62 35 36 66 37 65 63 30 22 2c 22 6c 73 22 3a 22 33 62 35 63 33 62 66 38 2d 39 34 31 39 2d 34 37 66 34 2d 62 62 66 35 2d 65 66 62 62 63 35 61 36 34 31 61 36 22 2c 22 72 22 3a 22 37 39 61 64 35 61 30 32 2d 37 34 36 39 2d 34 63 31 63 2d 38 34 30 64 2d 34 63 38 62 35 31 62 32 31 36 36 63 22 2c 22 73 73 22 3a 22 61 32 37 61 34 38 63 33 2d 34 32 65 31 2d 34 61 62 61 2d 62 65 35 66 2d 64 35 65 38 30 65 66 30 62 65 34 62 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"c1fcb1f6-bf2f-4339-8b69-2da26763a2e8","lc":"4a5f1a49-f771-42a3-aa13-8959b56f7ec0","ls":"3b5c3bf8-9419-47f4-bbf5-efbbc5a641a6","r":"79ad5a02-7469-4c1c-840d-4c8b51b2166c","ss":"a27a48c3-42e1-4aba-be5f-d5e80ef0be4b","df":true,"s
2024-03-29 13:45:01 UTC	473	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 13:45:01 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 1 server: API Gateway alt-svc: clear access-control-allow-origin: https://cex.io access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.16	49838	35.174.127.31	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:01 UTC	674	OUT	GET /pubsub/5-DxZC9UqoJ1EljK_xOC3b99xy4F3BEj9YmFgJHaX3ipfQTWiIVeaimn-kfD1lSniz_d6d82XsjfFmM7bTX0yaSnBGTqiWgRi9CEfu?X-Nexus-New-Client=true&X-Nexus-Version=0.12.12&user_role=visitor HTTP/1.1 Host: nexus-websocket-a.intercom.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: 1lGA1JYaF6ZVz13rf9AzWQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.16	49843	52.22.248.30	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:01 UTC	727	OUT	POST /v1/page HTTP/1.1 Host: cex-dataplane.rudderstack.com Connection: keep-alive Content-Length: 1474 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json sec-ch-ua-mobile: ?0 Authorization: Basic MjBrNzRlTlgySnlXdHAwVUtROVZsaEIyWGd6Og== User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 AnonymousId: ZTFmMWZlNzAtY2ZhZS00ZWJiLTgxZDItZjcwOTRkMjljY2Jj sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:45:01 UTC	1474	OUT	Data Raw: 7b 22 63 68 61 6e 6e 65 6c 22 3a 22 77 65 62 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 61 70 70 22 3a 7b 22 6e 61 6d 65 22 3a 22 52 75 64 64 65 72 4c 61 62 73 20 4a 61 76 61 53 63 72 69 70 74 20 53 44 4b 22 2c 22 6e 61 6d 65 73 70 61 63 65 22 3a 22 63 6f 6d 2e 72 75 64 64 65 72 6c 61 62 73 2e 6a 61 76 61 73 63 72 69 70 74 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 32 2e 34 38 2e 36 22 7d 2c 22 74 72 61 69 74 73 22 3a 7b 7d 2c 22 6c 69 62 72 61 72 79 22 3a 7b 22 6e 61 6d 65 22 3a 22 52 75 64 64 65 72 4c 61 62 73 20 4a 61 76 61 53 63 72 69 70 74 20 53 44 4b 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 32 2e 34 38 2e 36 22 7d 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 Data Ascii: {"channel":"web","context":{"app":{"name":"RudderLabs JavaScript SDK","namespace":"com.rudderlabs.javascript","version":"2.48.6"},"traits":{},"library":{"name":"RudderLabs JavaScript SDK","version":"2.48.6"},"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win6
2024-03-29 13:45:01 UTC	262	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://cex.io Content-Length: 2 Content-Type: text/plain; charset=utf-8 Date: Fri, 29 Mar 2024 13:45:01 GMT Server: openresty/1.21.4.2 Vary: Origin Connection: close
2024-03-29 13:45:01 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.16	49815	142.250.31.155	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:01 UTC	774	OUT	POST /g/collect?v=2&tid=G-QF933RX2RP&cid=820382369.1711719899&gtm=45je43r0v877859595za200&aip=1&dma=0&gcs=G111&gcd=13n3n3n3n5&npa=0 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:45:01 UTC	440	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://cex.io Date: Fri, 29 Mar 2024 13:45:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.16	49842	3.208.209.20	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:01 UTC	649	OUT	GET /consent/check/7UKK4UJQK5H4LI4OCBFPWX?flg=1&pv=49777442137.35138&arrfrr=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&_s=36c55156726abe6f7f2d67d9d7d78dcb&_b=2 HTTP/1.1 Host: d.adroll.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:45:01 UTC	1047	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:45:01 GMT Content-Type: application/javascript Content-Length: 553 Connection: close Server: nginx/1.22.1 Cache-Control: no-store, no-cache, must-revalidate P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" Pragma: no-cache Set-Cookie: __adroll=62c35a870d87e29d4af69c72e46c38b4-a_1711719901; Version=1; Expires=Mon, 28-Apr-2025 13:45:00 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=d.adroll.com Set-Cookie: receive-cookie-deprecation=1; Version=1; Expires=Mon, 28-Apr-2025 13:45:00 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Partitioned; Domain=d.adroll.com Set-Cookie: receive-cookie-deprecation=1; Version=1; Expires=Mon, 28-Apr-2025 13:45:00 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Partitioned; Domain=adroll.com Set-Cookie: __adroll_shared=62c35a870d87e29d4af69c72e46c38b4-a_1711719901; Version=1; Expires=Mon, 28-Apr-2025 13:45:00 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com
2024-03-29 13:45:01 UTC	553	IN	Data Raw: 77 69 6e 64 6f 77 2e 61 64 72 6f 6c 6c 5f 65 78 70 5f 6c 69 73 74 20 3d 20 5b 5d 3b 20 77 69 6e 64 6f 77 2e 5f 5f 61 64 72 6f 6c 6c 5f 75 72 6c 5f 63 61 74 65 67 6f 72 79 20 3d 20 22 70 72 6f 64 75 63 74 5f 70 61 67 65 22 3b 20 5f 5f 61 64 72 6f 6c 6c 2e 73 65 74 5f 63 6f 6e 73 65 6e 74 28 74 72 75 65 2c 20 66 61 6c 73 65 2c 20 74 72 75 65 2c 20 22 55 53 22 2c 20 22 47 42 22 2c 20 7b 22 61 72 63 6f 6e 73 65 6e 74 22 3a 6e 75 6c 6c 2c 22 65 75 63 6f 6e 73 65 6e 74 22 3a 6e 75 6c 6c 2c 22 70 75 72 70 6f 73 65 73 22 3a 6e 75 6c 6c 2c 22 65 75 63 6f 6f 6b 69 65 22 3a 6e 75 6c 6c 2c 22 62 61 6e 6e 65 72 22 3a 22 63 75 73 74 6f 6d 5f 61 70 70 72 6f 76 65 64 22 2c 22 69 70 67 65 6f 22 3a 7b 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 55 53 22 2c 22 72 65 67 Data Ascii: window.adroll_exp_list = []; window.__adroll_url_category = "product_page"; __adroll.set_consent(true, false, true, "US", "GB", {"arconsent":null,"euconsent":null,"purposes":null,"eucookie":null,"banner":"custom_approved","ipgeo":{"country_code":"US","reg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.16	49844	172.253.62.104	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:01 UTC	1042	OUT	GET /pagead/1p-user-list/971878938/?random=1711719898597&cv=11&fst=1711717200000&bg=ffffff&guid=ON&async=1&gtm=45be43r0v9117519134za200&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&frm=0&tiba=Buy%20Bitcoin%20with%20Credit%20or%20Debit%20Card%20Instantly%20-%20CEX.IO&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqVCQy0JY0P1O6wr6K7J3AbHYoU2DdgA&random=4210822442&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-03-29 13:45:01 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 29 Mar 2024 13:45:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 13:45:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.16	49845	3.208.209.20	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:01 UTC	973	OUT	GET /segment/7UKK4UJQK5H4LI4OCBFPWX/XKCKCYA7EZE6PKEKRI2LRJ?adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103&flg=1&pv=49777442137.35138&arrfrr=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&cookie=&adroll_s_ref=&keyw=&p0=6919&adroll_external_data=&xa4=1&adroll_version=2.0 HTTP/1.1 Host: d.adroll.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __adroll=62c35a870d87e29d4af69c72e46c38b4-a_1711719901; receive-cookie-deprecation=1; receive-cookie-deprecation=1; __adroll_shared=62c35a870d87e29d4af69c72e46c38b4-a_1711719901
2024-03-29 13:45:01 UTC	2009	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:45:01 GMT Content-Type: image/gif Content-Length: 42 Connection: close Server: nginx/1.22.1 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://cex.io Access-Control-Expose-Headers: X-Advertisable-Eid, X-Attribution-Url, X-Segment-Eid, X-Segment-Display-Name, X-Segment-Name, X-Conversion-Currency, X-Conversion-Value, X-Rule, X-Rule-Type, X-Organization-Eid, X-Pixel-Eid Access-Control-Request-Methods: GET Cache-Control: no-store, no-cache, must-revalidate P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" Pragma: no-cache Set-Cookie: __adroll=62c35a870d87e29d4af69c72e46c38b4-a_1711719901; Version=1; Expires=Mon, 28-Apr-2025 13:45:01 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=d.adroll.com Set-Cookie: receive-cookie-deprecation=1; Version=1; Expires=Mon, 28-Apr-2025 13:45:01 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Partitioned; Domain=d.adroll.com Set-Cookie: receive-cookie-deprecation=1; Version=1; Expires=Mon, 28-Apr-2025 13:45:01 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Partitioned; Domain=adroll.com Set-Cookie: __adroll_shared=62c35a870d87e29d4af69c72e46c38b4-a_1711719901; Version=1; Expires=Mon, 28-Apr-2025 13:45:01 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com X-Advertisable-Eid: 7UKK4UJQK5H4LI4OCBFPWX X-Attribution-Url: https%3A%2F%2Fx.adroll.com%2Fattribution%2Ftrigger%3Ffpc%3D9c2a3d2e2673c4382dbf8e1b819a358e%26advertisable_eid%3D7UKK4UJQK5H4LI4OCBFPWX%26conversion_type%3DPageView%26conversion_value%3D0.0%26pv%3D49777442137.35138 X-Conversion-Currency: X-Conversion-Value: 0.0 X-Organization-Eid: JH2DZAI3PRDHFH4YKGKKZV X-Pixel-Eid: XKCKCYA7EZE6PKEKRI2LRJ X-Rule: * X-Rule-Type: p X-Segment-Display-Name: Visitors to Unsegmented Pages X-Segment-Eid: WTD4YNWMKRE7BLMA7CDUQO X-Segment-Name: *
2024-03-29 13:45:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.16	49846	3.208.209.20	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:01 UTC	921	OUT	GET /cm/g/out?adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103&flg=1&pv=49777442137.35138&arrfrr=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&advertisable=7UKK4UJQK5H4LI4OCBFPWX HTTP/1.1 Host: d.adroll.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __adroll=62c35a870d87e29d4af69c72e46c38b4-a_1711719901; receive-cookie-deprecation=1; receive-cookie-deprecation=1; __adroll_shared=62c35a870d87e29d4af69c72e46c38b4-a_1711719901
2024-03-29 13:45:01 UTC	1128	IN	HTTP/1.1 302 Moved Temporarily Date: Fri, 29 Mar 2024 13:45:01 GMT Content-Length: 99 Connection: close Server: nginx/1.22.1 Cache-Control: no-store, no-cache, must-revalidate Location: https://cm.g.doubleclick.net/pixel?google_sc&google_nid=artb&google_hm=YsNahw2H4p1K9pxy5Gw4tA P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" Pragma: no-cache Set-Cookie: __adroll=62c35a870d87e29d4af69c72e46c38b4-a_1711719901; Version=1; Expires=Mon, 28-Apr-2025 13:45:01 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=d.adroll.com Set-Cookie: receive-cookie-deprecation=1; Version=1; Expires=Mon, 28-Apr-2025 13:45:01 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Partitioned; Domain=d.adroll.com Set-Cookie: receive-cookie-deprecation=1; Version=1; Expires=Mon, 28-Apr-2025 13:45:01 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Partitioned; Domain=adroll.com Set-Cookie: __adroll_shared=62c35a870d87e29d4af69c72e46c38b4-a_1711719901; Version=1; Expires=Mon, 28-Apr-2025 13:45:01 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com
2024-03-29 13:45:01 UTC	99	IN	Data Raw: 47 6f 20 74 6f 20 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 73 63 26 67 6f 6f 67 6c 65 5f 6e 69 64 3d 61 72 74 62 26 67 6f 6f 67 6c 65 5f 68 6d 3d 59 73 4e 61 68 77 32 48 34 70 31 4b 39 70 78 79 35 47 77 34 74 41 Data Ascii: Go to https://cm.g.doubleclick.net/pixel?google_sc&google_nid=artb&google_hm=YsNahw2H4p1K9pxy5Gw4tA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.16	49847	3.208.209.20	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:01 UTC	974	OUT	GET /cm/x,b,index,l,o,outbrain,pubmatic,n,taboola,triplelift,r/out?adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103&flg=1&pv=49777442137.35138&arrfrr=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&advertisable=7UKK4UJQK5H4LI4OCBFPWX HTTP/1.1 Host: d.adroll.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __adroll=62c35a870d87e29d4af69c72e46c38b4-a_1711719901; receive-cookie-deprecation=1; receive-cookie-deprecation=1; __adroll_shared=62c35a870d87e29d4af69c72e46c38b4-a_1711719901
2024-03-29 13:45:01 UTC	1169	IN	HTTP/1.1 302 Moved Temporarily Date: Fri, 29 Mar 2024 13:45:01 GMT Content-Length: 139 Connection: close Server: nginx/1.22.1 Cache-Control: no-store, no-cache, must-revalidate Location: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=105&external_user_id=NjJjMzVhODcwZDg3ZTI5ZDRhZjY5YzcyZTQ2YzM4YjQ&expiration=1743255901 P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" Pragma: no-cache Set-Cookie: __adroll=62c35a870d87e29d4af69c72e46c38b4-a_1711719901; Version=1; Expires=Mon, 28-Apr-2025 13:45:01 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=d.adroll.com Set-Cookie: receive-cookie-deprecation=1; Version=1; Expires=Mon, 28-Apr-2025 13:45:01 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Partitioned; Domain=d.adroll.com Set-Cookie: receive-cookie-deprecation=1; Version=1; Expires=Mon, 28-Apr-2025 13:45:01 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Partitioned; Domain=adroll.com Set-Cookie: __adroll_shared=62c35a870d87e29d4af69c72e46c38b4-a_1711719901; Version=1; Expires=Mon, 28-Apr-2025 13:45:01 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com
2024-03-29 13:45:01 UTC	139	IN	Data Raw: 47 6f 20 74 6f 20 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 31 30 35 26 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 4e 6a 4a 6a 4d 7a 56 68 4f 44 63 77 5a 44 67 33 5a 54 49 35 5a 44 52 68 5a 6a 59 35 59 7a 63 79 5a 54 51 32 59 7a 4d 34 59 6a 51 26 65 78 70 69 72 61 74 69 6f 6e 3d 31 37 34 33 32 35 35 39 30 31 Data Ascii: Go to https://dsum-sec.casalemedia.com/rum?cm_dsp_id=105&external_user_id=NjJjMzVhODcwZDg3ZTI5ZDRhZjY5YzcyZTQ2YzM4YjQ&expiration=1743255901

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.16	49826	151.101.129.140	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:01 UTC	587	OUT	GET /ads/conversions-config/v1/pixel/config/t2_fngyx_telemetry HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cex.io Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:45:01 UTC	868	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86 access-control-allow-origin: * cache-control: max-age=300 content-type: application/json Accept-Ranges: bytes Date: Fri, 29 Mar 2024 13:45:01 GMT Via: 1.1 varnish Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-03-29 13:45:01 UTC	86	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 5f 68 61 73 68 22 3a 22 35 38 31 64 33 35 39 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 64 64 69 74 73 74 61 74 69 63 2e 63 6f 6d 2f 61 64 73 2f 35 38 31 64 33 35 39 64 2f 70 69 78 65 6c 2e 6a 73 22 7d Data Ascii: {"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.16	49849	151.101.1.140	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:01 UTC	397	OUT	OPTIONS /reports HTTP/1.1 Host: w3-reporting-nel.reddit.com Connection: keep-alive Origin: https://alb.reddit.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:45:01 UTC	644	IN	HTTP/1.1 204 No Content Connection: close Server: Varnish Retry-After: 0 Access-Control-Allow-Origin: https://alb.reddit.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type,Origin,X-origination-host,X-origination-path Access-Control-Expose-Headers: * Access-Control-Max-Age: 86400 Accept-Ranges: bytes Date: Fri, 29 Mar 2024 13:45:01 GMT Via: 1.1 varnish Vary: Origin Strict-Transport-Security: max-age=31536000; includeSubdomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.16	49850	52.22.248.30	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:01 UTC	360	OUT	GET /v1/page HTTP/1.1 Host: cex-dataplane.rudderstack.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:45:01 UTC	167	IN	HTTP/1.1 401 Unauthorized Content-Type: text/plain Date: Fri, 29 Mar 2024 13:45:01 GMT Server: openresty/1.21.4.2 Connection: close Transfer-Encoding: chunked
2024-03-29 13:45:01 UTC	27	IN	Data Raw: 31 35 0d 0a 57 72 69 74 65 20 4b 65 79 20 69 73 20 6d 69 73 73 69 6e 67 0a 0d 0a Data Ascii: 15Write Key is missing
2024-03-29 13:45:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.16	49852	3.33.152.127	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:01 UTC	421	OUT	GET /i/o/475519/eabaa4fa79044587e479220a/41bec6986704a574349426a752d128dc.png HTTP/1.1 Host: downloads.intercomcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:45:02 UTC	1260	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:45:02 GMT Content-Type: image/png Content-Length: 5563 Connection: close Status: 200 OK Last-Modified: Tue, 09 Jan 2024 17:19:14 GMT Vary: Accept,Accept-Encoding Strict-Transport-Security: max-age=31556952; includeSubDomains; preload Cache-Control: max-age=86400, private X-Intercom-Version: 8bc832a955b33325cd32d446b951221240981ec2 X-XSS-Protection: 1; mode=block X-Request-Queueing: 0 X-Request-Id: 000e0gd4elc1a8nt32m0 Cross-Origin-Resource-Policy: cross-origin Content-Disposition: inline; filename="41bec6986704a574349426a752d128dc.png"; filename*=UTF-8''41bec6986704a574349426a752d128dc.png Content-Transfer-Encoding: binary X-Runtime: 0.087084 X-Frame-Options: deny X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; font-src fonts.intercomcdn.com; img-src downloads.intercomcdn.com/images/logo-gray-16x16-at-2x.png; media-src 'self'; style-src downloads.intercomcdn.com/410.css fonts.intercomcdn.com/proxima-nova/proxima-nova-all.css static.intercomassets.com Set-Cookie: gtm_id=8d7ea31d-7ae1-4e78-8318-a49689132764; domain=intercom.com; path=/; expires=Sat, 29 Mar 2025 13:45:01 GMT; SameSite=None; secure Server: nginx x-ami-version: ami-03244067f559d9bd4
2024-03-29 13:45:02 UTC	2851	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 15 82 49 44 41 54 78 01 ed 9d 4d 72 54 49 92 c7 dd 5f 4a 48 65 b3 28 cd 09 3a b1 2a e8 31 ab 05 e2 04 24 27 28 d8 74 23 f5 82 cc 13 a0 3a 01 aa 13 14 9c 20 53 8b 41 35 b5 11 9c 00 71 02 e8 45 99 95 49 60 64 9d 60 e8 c5 0c 29 a4 7c de e1 2f 33 45 ea 5b 29 bd 08 8f 78 ef ff 33 a3 f4 85 59 21 e9 fd d2 3d 22 3c dc 99 40 d4 34 b7 ba 4b 8b 03 5a ca 85 96 85 69 89 dd a7 84 f9 5b 12 5a d2 2f 93 7e 6e f4 7e 81 e8 e7 40 4d 90 ce 1c 81 28 f8 af cd 6e 53 25 55 41 73 e6 3b 4e cc 65 52 19 9d bc 43 fd 0b 3c fa 7b 72 f8 1f 3a fc 84 10 a8 2b 10 d8 00 95 d5 49 d9 22 15 d5 49 ab b2 0e 35 8a f2 94 8c b0 12 5c 02 08 1c 80 1f 7e eb 2e 1f 1c 50 4b 32 be e7 bc 6c 0d 27 29 ef Data Ascii: PNGIHDR>UIDATxMrTI_JHe(:*1$'(t#: SA5qEI`d`)\|/3E[)x3Y!="<@4KZi[Z/~n~@M(nS%UAs;NeRC<{r:+I"I5\~.PK2l')
2024-03-29 13:45:02 UTC	2712	IN	Data Raw: 42 91 63 64 9e 37 ce 44 02 9c 9d 83 a0 68 bf f0 32 5a 0e 23 02 97 80 78 3e ba ca 0c 5e 94 80 3f ca 92 57 81 c0 25 90 79 ae fc 0a 55 67 0d fc 53 a6 bc 4a c6 81 5f dd 59 e4 3f c9 2f 7d 0a 8c ef 5d e2 a2 ce 9a 91 46 a7 4e d9 f2 2a c1 23 b0 30 7f 4b 55 23 f3 ff 3d b9 17 be e7 04 92 c5 87 bc 4a f8 14 5a fc 46 2b 93 8e 90 e2 bf cc f1 cb 80 9e 21 0a a7 89 2f 79 95 4c 2a b8 41 c2 e1 bf a7 a6 36 96 23 8f f4 3b 9d 4f 88 c2 e9 e1 53 5e 45 6f 23 85 7e 55 6f 92 67 2c 8e 5d e6 06 fe cb 1d 35 0a 33 76 a4 93 c1 b7 bc 4a e6 9e f6 7f 51 60 7c 5f f9 63 0e d0 b6 f6 18 8d 00 f5 ca 1a 85 dd 2f ec 3e 24 8e 9f 10 f2 2a 99 45 b4 6a 34 bc 97 06 f6 29 30 45 4f e6 00 e8 1a 1f 12 c7 4d 28 79 95 cc a2 48 60 df f3 46 96 c9 ba 9e 69 d9 f7 3a 78 c2 44 62 f7 8d e2 7c 38 32 42 ca ab 64 b9 Data Ascii: Bcd7Dh2Z#x>^?W%yUgSJ_Y?/}]FN#0KU#=JZF+!/yLA6#;OS^Eo#~Uog,]53vJQ`\|_c/>$*Ej4)0EOM(yH`Fi:xDb\|82Bd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.16	49848	35.175.89.38	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:01 UTC	953	OUT	GET /pxl/iframe_content.html?adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103&flg=1&pv=49777442137.35138&arrfrr=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&advertisable=7UKK4UJQK5H4LI4OCBFPWX HTTP/1.1 Host: x.adroll.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; __adroll_shared=62c35a870d87e29d4af69c72e46c38b4-a_1711719901
2024-03-29 13:45:01 UTC	215	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:45:01 GMT Content-Type: text/html Content-Length: 685 Connection: close accept-ranges: bytes last-modified: Thu, 28 Mar 2024 15:55:48 GMT ad-auction-allowed: true
2024-03-29 13:45:01 UTC	685	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 73 63 72 69 70 74 3e 63 6f 6e 73 74 20 75 72 6c 50 61 72 61 6d 73 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 2c 61 64 76 3d 75 72 6c 50 61 72 61 6d 73 2e 67 65 74 28 22 61 64 76 65 72 74 69 73 61 62 6c 65 22 29 2c 66 70 63 3d 75 72 6c 50 61 72 61 6d 73 2e 67 65 74 28 22 61 64 72 6f 6c 6c 5f 66 70 63 22 29 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 2c 6f 72 69 67 69 6e 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 2c 6b 53 65 63 73 50 65 72 44 61 79 3d 32 35 39 32 65 33 3b 6c 65 74 20 75 Data Ascii: <!DOCTYPE html><html><head><meta charset="UTF-8"><script>const urlParams=new URLSearchParams(document.location.search),adv=urlParams.get("advertisable"),fpc=urlParams.get("adroll_fpc").split("-")[0],origin=document.location.origin,kSecsPerDay=2592e3;let u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.16	49851	35.190.43.134	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:01 UTC	1052	OUT	GET /cm/s?bt=1d53c387&pnid=140&cb=1711719900298&u_scsid=a639c1c8-03a4-45d7-9034-2e124368a363&u_sclid=8f6ba538-e1d1-4ce5-a228-8569c78df020 HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://tr.snapchat.com/cm/i?pid=4d52341b-7196-4dc9-a490-6fe981c45213&u_scsid=a27a48c3-42e1-4aba-be5f-d5e80ef0be4b&u_sclid=3b5c3bf8-9419-47f4-bbf5-efbbc5a641a6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sc_at=v2\|H4sIAAAAAAAAAA3CgQkAIAgEwIkERUN/HMucwuHruHNKu8KpWkGWmRRXkpbxCrBv5Z4Rlx8BDD+iG1R9MgAAAA==
2024-03-29 13:45:02 UTC	779	IN	HTTP/1.1 302 Found date: Fri, 29 Mar 2024 13:45:01 GMT location: https://pixel.tapad.com/idsync/ex/push?partner_id=2884&partner_url=https%3A%2F%2Ftr.snapchat.com%2Fcm%2Fp%3Frand%3D1711487619952%26pnid%3D140%26pcid%3D%24%7BTA_DEVICE_ID%7D set-cookie: sc_at=v2\|H4sIAAAAAAAAAE3GwQ2AQAgEwIpIdgMXwG7wkCqueH2azGP2bp0Olx5NsaqSeFiyDCsSfivm0HDR+ckEz694AUCsawRAAAAA;SameSite=None;Version=1;Comment=;Domain=.snapchat.com;Path=/;Max-Age=33696000;Secure strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 2 server: API Gateway alt-svc: clear Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.16	49855	172.64.151.101	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:02 UTC	674	OUT	GET /rum?cm_dsp_id=105&external_user_id=NjJjMzVhODcwZDg3ZTI5ZDRhZjY5YzcyZTQ2YzM4YjQ&expiration=1743255901 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:45:02 UTC	1212	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 13:45:02 GMT Content-Length: 0 Connection: close Location: /rum?cm_dsp_id=105&external_user_id=NjJjMzVhODcwZDg3ZTI5ZDRhZjY5YzcyZTQ2YzM4YjQ&expiration=1743255901&C=1 CF-Ray: 86c04c4d1dd80790-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgbF3sAoJUQAACRtAEC30AAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 13:45:02 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPS=2807; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 13:45:02 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=2807; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 13:45:02 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GRWmfIDHIZsgMvwBdS201rzHB0LCF8TEY7UmbSeXT%2FsHNyMtFYQwxw33l6tk9IGQkzQIAb2fX3XYlbYFSDytMNMHXlKp0pIulHWgUz8Vp%2Fdy%2FlGr6ckgpCqZSrw8IZ6YRIcXfcsJiWQSdg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.16	49857	35.175.89.38	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:02 UTC	869	OUT	GET /igs?advertisable=7UKK4UJQK5H4LI4OCBFPWX&fpc=9c2a3d2e2673c4382dbf8e1b819a358e HTTP/1.1 Host: x.adroll.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://x.adroll.com/pxl/iframe_content.html?adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103&flg=1&pv=49777442137.35138&arrfrr=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&advertisable=7UKK4UJQK5H4LI4OCBFPWX Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; __adroll_shared=62c35a870d87e29d4af69c72e46c38b4-a_1711719901
2024-03-29 13:45:02 UTC	152	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:45:02 GMT Content-Type: application/json Content-Length: 9013 Connection: close vary: accept-encoding
2024-03-29 13:45:02 UTC	9013	IN	Data Raw: 5b 7b 22 6f 77 6e 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 61 64 72 6f 6c 6c 2e 63 6f 6d 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 61 64 72 6f 6c 6c 2e 63 6f 6d 2f 6b 76 2f 76 31 2f 67 65 74 76 61 6c 75 65 73 22 2c 22 6e 61 6d 65 22 3a 22 37 55 4b 4b 34 55 4a 51 4b 35 48 34 4c 49 34 4f 43 42 46 50 57 58 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 61 64 72 6f 6c 6c 2e 63 6f 6d 2f 62 69 64 2f 62 69 64 64 69 6e 67 2d 6c 6f 67 69 63 2e 6a 73 22 2c 22 62 69 64 64 69 6e 67 57 61 73 6d 48 65 6c 70 65 72 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 61 64 72 6f 6c 6c 2e 63 6f 6d 2f 62 69 64 2f 62 69 64 64 69 6e 67 2d 6c 6f 67 69 63 Data Ascii: [{"owner":"https://x.adroll.com","trustedBiddingSignalsURL":"https://x.adroll.com/kv/v1/getvalues","name":"7UKK4UJQK5H4LI4OCBFPWX","biddingLogicURL":"https://x.adroll.com/bid/bidding-logic.js","biddingWasmHelperURL":"https://x.adroll.com/bid/bidding-logic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.16	49854	142.251.179.157	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:02 UTC	712	OUT	GET /pixel?google_sc&google_nid=artb&google_hm=YsNahw2H4p1K9pxy5Gw4tA HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnTASOlliXdwzfwcaXUWiFp7BaWbu9uF5xcpBbwg6Xg2t8GC9Wwtm0GE_Cz
2024-03-29 13:45:02 UTC	598	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://d.adroll.com/cm/g/in Date: Fri, 29 Mar 2024 13:45:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 225 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 13:45:02 UTC	225	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 64 2e 61 64 72 6f 6c 6c 2e 63 6f 6d 2f 63 6d 2f 67 2f 69 6e 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://d.adroll.com/cm/g/in">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.16	49858	151.101.1.140	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:02 UTC	340	OUT	POST /reports HTTP/1.1 Host: w3-reporting-nel.reddit.com Connection: keep-alive Content-Length: 691 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:45:02 UTC	691	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 36 31 30 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 33 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 35 31 2e 31 30 31 2e 31 32 39 2e 31 34 30 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 6f 6b 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6c 62 2e 72 65 64 64 69 74 2e 63 6f 6d 2f 72 70 2e 67 69 66 3f Data Ascii: [{"age":0,"body":{"elapsed_time":610,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":0.3,"server_ip":"151.101.129.140","status_code":200,"type":"ok"},"type":"network-error","url":"https://alb.reddit.com/rp.gif?
2024-03-29 13:45:02 UTC	681	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 content-type: text/plain; charset=utf-8 Accept-Ranges: bytes Date: Fri, 29 Mar 2024 13:45:02 GMT Via: 1.1 varnish Strict-Transport-Security: max-age=31536000; includeSubdomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block server: snooserv Access-Control-Allow-Origin: https://www.reddit.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type,Origin,X-origination-host,X-origination-path Access-Control-Expose-Headers: * Access-Control-Max-Age: 86400 Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.16	49853	34.197.113.183	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:02 UTC	727	OUT	GET /segment/7UKK4UJQK5H4LI4OCBFPWX/XKCKCYA7EZE6PKEKRI2LRJ?adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103&flg=1&pv=49777442137.35138&arrfrr=https%3A%2F%2Fcex.io%2Fbuy-bitcoins&cookie=&adroll_s_ref=&keyw=&p0=6919&adroll_external_data=&xa4=1&adroll_version=2.0 HTTP/1.1 Host: d.adroll.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __adroll=62c35a870d87e29d4af69c72e46c38b4-a_1711719901; __adroll_shared=62c35a870d87e29d4af69c72e46c38b4-a_1711719901
2024-03-29 13:45:02 UTC	1805	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:45:02 GMT Content-Type: image/gif Content-Length: 42 Connection: close Server: nginx/1.22.1 Access-Control-Expose-Headers: X-Advertisable-Eid, X-Attribution-Url, X-Segment-Eid, X-Segment-Display-Name, X-Segment-Name, X-Conversion-Currency, X-Conversion-Value, X-Rule, X-Rule-Type, X-Organization-Eid, X-Pixel-Eid Cache-Control: no-store, no-cache, must-revalidate P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" Pragma: no-cache Set-Cookie: __adroll=62c35a870d87e29d4af69c72e46c38b4-a_1711719901; Version=1; Expires=Mon, 28-Apr-2025 13:45:01 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=d.adroll.com Set-Cookie: receive-cookie-deprecation=1; Version=1; Expires=Mon, 28-Apr-2025 13:45:01 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Partitioned; Domain=d.adroll.com Set-Cookie: receive-cookie-deprecation=1; Version=1; Expires=Mon, 28-Apr-2025 13:45:01 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Partitioned; Domain=adroll.com Set-Cookie: __adroll_shared=62c35a870d87e29d4af69c72e46c38b4-a_1711719901; Version=1; Expires=Mon, 28-Apr-2025 13:45:01 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com X-Advertisable-Eid: 7UKK4UJQK5H4LI4OCBFPWX X-Attribution-Url: https%3A%2F%2Fx.adroll.com%2Fattribution%2Ftrigger%3Ffpc%3D9c2a3d2e2673c4382dbf8e1b819a358e%26advertisable_eid%3D7UKK4UJQK5H4LI4OCBFPWX%26conversion_type%3DPageView%26conversion_value%3D0.0%26pv%3D49777442137.35138 X-Conversion-Currency: X-Conversion-Value: 0.0 X-Organization-Eid: JH2DZAI3PRDHFH4YKGKKZV X-Pixel-Eid: XKCKCYA7EZE6PKEKRI2LRJ X-Rule: * X-Rule-Type: p X-Segment-Display-Name: Visitors to Unsegmented Pages X-Segment-Eid: WTD4YNWMKRE7BLMA7CDUQO X-Segment-Name: *
2024-03-29 13:45:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.16	49856	54.204.205.163	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:02 UTC	826	OUT	GET /attribution/trigger?fpc=9c2a3d2e2673c4382dbf8e1b819a358e&advertisable_eid=7UKK4UJQK5H4LI4OCBFPWX&conversion_type=PageView&conversion_value=0.0&pv=49777442137.35138 HTTP/1.1 Host: x.adroll.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; __adroll_shared=62c35a870d87e29d4af69c72e46c38b4-a_1711719901
2024-03-29 13:45:02 UTC	784	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:45:02 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close set-cookie: ar_debug=1; SameSite=None; Secure; HttpOnly attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0","priority":"0","deduplication_key":"5808655120931249053","filters":{"source_type":["event"]}},{"trigger_data":"0","priority":"0","deduplication_key":"5808655120931249053","filters":{"source_type":["navigation"]}}],"debug_key":"14295778787554553778","filters":{"0":["7UKK4UJQK5H4LI4OCBFPWX"]},"aggregatable_trigger_data":[{"key_piece":"0x00000000000000000000000000000000","source_keys":["1"]}],"aggregatable_values":{"1":8192},"aggregatable_deduplication_keys":[{"deduplication_key":"12168634252083778920"}]}
2024-03-29 13:45:02 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.16	49860	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:02 UTC	2796	OUT	GET /ws/ HTTP/1.1 Host: cex.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1 Sec-WebSocket-Key: zN3QC6WeOtngGuPlYNMuAw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-29 13:45:02 UTC	1221	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 29 Mar 2024 13:45:02 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 Content-Security-Policy-Report-Only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Set-Cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fws%2F; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS Location: /ws Strict-Transport-Security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c4e2ae77fa6-IAD
2024-03-29 13:45:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.16	49859	151.101.129.140	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:02 UTC	401	OUT	GET /ads/conversions-config/v1/pixel/config/t2_fngyx_telemetry HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:45:02 UTC	868	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86 access-control-allow-origin: * cache-control: max-age=300 content-type: application/json Accept-Ranges: bytes Date: Fri, 29 Mar 2024 13:45:02 GMT Via: 1.1 varnish Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-03-29 13:45:02 UTC	86	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 5f 68 61 73 68 22 3a 22 35 38 31 64 33 35 39 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 64 64 69 74 73 74 61 74 69 63 2e 63 6f 6d 2f 61 64 73 2f 35 38 31 64 33 35 39 64 2f 70 69 78 65 6c 2e 6a 73 22 7d Data Ascii: {"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.16	49861	34.111.113.62	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:02 UTC	825	OUT	GET /idsync/ex/push?partner_id=2884&partner_url=https%3A%2F%2Ftr.snapchat.com%2Fcm%2Fp%3Frand%3D1711487619952%26pnid%3D140%26pcid%3D%24%7BTA_DEVICE_ID%7D HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://tr.snapchat.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:45:02 UTC	1147	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 13:45:02 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1711719902643;Expires=Tue, 28 May 2024 13:45:02 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=9ee927f0-b5f7-49af-92b3-17f3470650eb;Expires=Tue, 28 May 2024 13:45:02 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://pixel.tapad.com/idsync/ex/push/check?partner_id=2884&partner_url=https%3A%2F%2Ftr.snapchat.com%2Fcm%2Fp%3Frand%3D1711487619952%26pnid%3D140%26pcid%3D%24%7BTA_DEVICE_ID%7D Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.16	49863	3.208.209.20	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:02 UTC	756	OUT	GET /cm/g/in HTTP/1.1 Host: d.adroll.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __adroll=62c35a870d87e29d4af69c72e46c38b4-a_1711719901; receive-cookie-deprecation=1; receive-cookie-deprecation=1; __adroll_shared=62c35a870d87e29d4af69c72e46c38b4-a_1711719901
2024-03-29 13:45:02 UTC	1081	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:45:02 GMT Content-Type: image/gif Content-Length: 42 Connection: close Server: nginx/1.22.1 Cache-Control: no-store, no-cache, must-revalidate P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" Pragma: no-cache Set-Cookie: __adroll=62c35a870d87e29d4af69c72e46c38b4-g_1711719902-a_1711719901; Version=1; Expires=Mon, 28-Apr-2025 13:45:01 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=d.adroll.com Set-Cookie: receive-cookie-deprecation=1; Version=1; Expires=Mon, 28-Apr-2025 13:45:01 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Partitioned; Domain=d.adroll.com Set-Cookie: receive-cookie-deprecation=1; Version=1; Expires=Mon, 28-Apr-2025 13:45:01 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Partitioned; Domain=adroll.com Set-Cookie: __adroll_shared=62c35a870d87e29d4af69c72e46c38b4-g_1711719902-a_1711719901; Version=1; Expires=Mon, 28-Apr-2025 13:45:01 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com X-Result: g.-1.-1.-1
2024-03-29 13:45:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.16	49862	172.64.151.101	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:02 UTC	740	OUT	GET /rum?cm_dsp_id=105&external_user_id=NjJjMzVhODcwZDg3ZTI5ZDRhZjY5YzcyZTQ2YzM4YjQ&expiration=1743255901&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cex.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZgbF3sAoJUQAACRtAEC30AAA; CMPS=2807; CMPRO=2807
2024-03-29 13:45:02 UTC	990	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:45:02 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86c04c500a919c4e-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgbF3sAoJUQAACRtAEC30AAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 13:45:02 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2807; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 13:45:02 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CKYBY3xP8AsARCT8iBVHHvwU%2F1Aabzstq2uA7%2BDPP0Moush061gyjaAFGf%2B6YNX57nJb8tsDB8uqiqJHzp0BAIG0X4O52ZqUXkTva%2FKffAqKi%2FhS0wKwvZUJji%2FREhiHPEXiWTn35gMUfQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 13:45:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.16	49865	3.225.95.250	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:02 UTC	513	OUT	GET /igs?advertisable=7UKK4UJQK5H4LI4OCBFPWX&fpc=9c2a3d2e2673c4382dbf8e1b819a358e HTTP/1.1 Host: x.adroll.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __adroll_shared=62c35a870d87e29d4af69c72e46c38b4-a_1711719901; receive-cookie-deprecation=1
2024-03-29 13:45:02 UTC	152	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:45:02 GMT Content-Type: application/json Content-Length: 9013 Connection: close vary: accept-encoding
2024-03-29 13:45:02 UTC	9013	IN	Data Raw: 5b 7b 22 6f 77 6e 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 61 64 72 6f 6c 6c 2e 63 6f 6d 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 61 64 72 6f 6c 6c 2e 63 6f 6d 2f 6b 76 2f 76 31 2f 67 65 74 76 61 6c 75 65 73 22 2c 22 6e 61 6d 65 22 3a 22 37 55 4b 4b 34 55 4a 51 4b 35 48 34 4c 49 34 4f 43 42 46 50 57 58 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 61 64 72 6f 6c 6c 2e 63 6f 6d 2f 62 69 64 2f 62 69 64 64 69 6e 67 2d 6c 6f 67 69 63 2e 6a 73 22 2c 22 62 69 64 64 69 6e 67 57 61 73 6d 48 65 6c 70 65 72 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 61 64 72 6f 6c 6c 2e 63 6f 6d 2f 62 69 64 2f 62 69 64 64 69 6e 67 2d 6c 6f 67 69 63 Data Ascii: [{"owner":"https://x.adroll.com","trustedBiddingSignalsURL":"https://x.adroll.com/kv/v1/getvalues","name":"7UKK4UJQK5H4LI4OCBFPWX","biddingLogicURL":"https://x.adroll.com/bid/bidding-logic.js","biddingWasmHelperURL":"https://x.adroll.com/bid/bidding-logic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.16	49864	3.225.95.250	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:02 UTC	612	OUT	GET /attribution/trigger?fpc=9c2a3d2e2673c4382dbf8e1b819a358e&advertisable_eid=7UKK4UJQK5H4LI4OCBFPWX&conversion_type=PageView&conversion_value=0.0&pv=49777442137.35138 HTTP/1.1 Host: x.adroll.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; __adroll_shared=62c35a870d87e29d4af69c72e46c38b4-a_1711719901; receive-cookie-deprecation=1
2024-03-29 13:45:02 UTC	784	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:45:02 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close set-cookie: ar_debug=1; SameSite=None; Secure; HttpOnly attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0","priority":"0","deduplication_key":"5808655120931249053","filters":{"source_type":["event"]}},{"trigger_data":"0","priority":"0","deduplication_key":"5808655120931249053","filters":{"source_type":["navigation"]}}],"debug_key":"16426936898292953776","filters":{"0":["7UKK4UJQK5H4LI4OCBFPWX"]},"aggregatable_trigger_data":[{"key_piece":"0x00000000000000000000000000000000","source_keys":["1"]}],"aggregatable_values":{"1":8192},"aggregatable_deduplication_keys":[{"deduplication_key":"12168634252083778920"}]}
2024-03-29 13:45:02 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.16	49867	34.197.113.183	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:02 UTC	556	OUT	GET /cm/g/in HTTP/1.1 Host: d.adroll.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; receive-cookie-deprecation=1; __adroll=62c35a870d87e29d4af69c72e46c38b4-g_1711719902-a_1711719901; __adroll_shared=62c35a870d87e29d4af69c72e46c38b4-g_1711719902-a_1711719901
2024-03-29 13:45:03 UTC	1081	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:45:03 GMT Content-Type: image/gif Content-Length: 42 Connection: close Server: nginx/1.22.1 Cache-Control: no-store, no-cache, must-revalidate P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" Pragma: no-cache Set-Cookie: __adroll=62c35a870d87e29d4af69c72e46c38b4-g_1711719903-a_1711719901; Version=1; Expires=Mon, 28-Apr-2025 13:45:02 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=d.adroll.com Set-Cookie: receive-cookie-deprecation=1; Version=1; Expires=Mon, 28-Apr-2025 13:45:02 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Partitioned; Domain=d.adroll.com Set-Cookie: receive-cookie-deprecation=1; Version=1; Expires=Mon, 28-Apr-2025 13:45:02 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Partitioned; Domain=adroll.com Set-Cookie: __adroll_shared=62c35a870d87e29d4af69c72e46c38b4-g_1711719903-a_1711719901; Version=1; Expires=Mon, 28-Apr-2025 13:45:02 GMT; Max-Age=34128000; Path=/; HttpOnly; SameSite=None; Secure; Domain=adroll.com X-Result: g.-1.-1.-1
2024-03-29 13:45:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.16	49868	172.64.151.101	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:03 UTC	514	OUT	GET /rum?cm_dsp_id=105&external_user_id=NjJjMzVhODcwZDg3ZTI5ZDRhZjY5YzcyZTQ2YzM4YjQ&expiration=1743255901&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZgbF3sAoJUQAACRtAEC30AAA; CMPS=2807; CMPRO=2807
2024-03-29 13:45:03 UTC	980	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:45:03 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86c04c537d903b02-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgbF3sAoJUQAACRtAEC30AAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 13:45:03 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2807; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 13:45:03 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GdaBGO8odv2yCgIm4ZEw0HDFmn7revH5Fk1n6TjWS2EJCreJBBdvCAxPKxv%2BUaJvmA5I5DUFEf9VcS7UO7XwAlDXCVg9hScW8K6hTDZ7IIBorpbaGwgE6MWYl4Jt31aUxFEb4ndw8B9sog%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 13:45:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.16	49866	34.111.113.62	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:03 UTC	911	OUT	GET /idsync/ex/push/check?partner_id=2884&partner_url=https%3A%2F%2Ftr.snapchat.com%2Fcm%2Fp%3Frand%3D1711487619952%26pnid%3D140%26pcid%3D%24%7BTA_DEVICE_ID%7D HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://tr.snapchat.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1711719902643; TapAd_DID=9ee927f0-b5f7-49af-92b3-17f3470650eb
2024-03-29 13:45:03 UTC	1182	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 13:45:03 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1711719902643;Expires=Tue, 28 May 2024 13:45:03 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=9ee927f0-b5f7-49af-92b3-17f3470650eb;Expires=Tue, 28 May 2024 13:45:03 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Tue, 28 May 2024 13:45:03 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://tr.snapchat.com/cm/p?rand=1711487619952&pnid=140&pcid=9ee927f0-b5f7-49af-92b3-17f3470650eb Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.16	49872	35.190.43.134	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:03 UTC	866	OUT	GET /cm/p?rand=1711487619952&pnid=140&pcid=9ee927f0-b5f7-49af-92b3-17f3470650eb HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://tr.snapchat.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sc_at=v2\|H4sIAAAAAAAAAE3GwQ2AQAgEwIpIdgMXwG7wkCqueH2azGP2bp0Olx5NsaqSeFiyDCsSfivm0HDR+ckEz694AUCsawRAAAAA
2024-03-29 13:45:04 UTC	729	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 13:45:04 GMT access-control-allow-origin: * cache-control: no-cache, no-transform set-cookie: sc_at=v2\|H4sIAAAAAAAAAE3G0QnAMAgFwImEJxrUbmNjncLhk8/CfdzeJV1uVC1BmpnkHyctxfKAvYIeVjxsfEVA51ccxgADhkAAAAA=;SameSite=None;Version=1;Comment=;Domain=.snapchat.com;Path=/;Max-Age=33696000;Secure content-type: text/html strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 2 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.16	49871	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:04 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=bk5L8yGwVrbbZXG&MD=oTsnWUMA HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-03-29 13:45:04 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 8323da95-edd8-40e5-b51c-674f183f73dd MS-RequestId: 7c594e04-b0e7-4308-bb81-caeb552fccf9 MS-CV: Romisntt5UKDi1ke.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 29 Mar 2024 13:45:03 GMT Connection: close Content-Length: 24490
2024-03-29 13:45:04 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-03-29 13:45:04 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.16	49873	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:04 UTC	2796	OUT	GET /ws/ HTTP/1.1 Host: cex.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1 Sec-WebSocket-Key: EcPrdnroHuecs1EET6VHCQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-29 13:45:04 UTC	1221	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 29 Mar 2024 13:45:04 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 Content-Security-Policy-Report-Only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Set-Cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fws%2F; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS Location: /ws Strict-Transport-Security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c59a9b2059c-IAD
2024-03-29 13:45:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.16	49875	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:05 UTC	2821	OUT	GET /ws/ HTTP/1.1 Host: cex.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000 Sec-WebSocket-Key: NICmN2aeKm9rGjXgpFqFfA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-29 13:45:06 UTC	1221	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 29 Mar 2024 13:45:06 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 Content-Security-Policy-Report-Only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Set-Cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fws%2F; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS Location: /ws Strict-Transport-Security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c646c592d1b-IAD
2024-03-29 13:45:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.16	49876	18.154.227.129	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:07 UTC	521	OUT	GET /vendors~app~tooltips-modern.77e8d419.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:45:07 UTC	794	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 162751 Connection: close Date: Fri, 29 Mar 2024 13:45:08 GMT Last-Modified: Thu, 28 Mar 2024 12:00:21 GMT ETag: "bbf9fe5c44467ed294a5ef62e7106fdc" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: 9xCsq55OtuDnRNvG.VfJ.AlGB8jfLmEB Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 747643510d5744fd5b06cb1647567818.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 2N37lmCEikDy0lJZkk__OdIO5zSt7wyn-RLNjKCREPtD4gRQQsi-dg== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-03-29 13:45:07 UTC	16384	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd e9 73 1b 47 96 2f fa fd fd 15 14 a6 2f 1b 18 82 14 a9 cd 36 28 48 97 12 29 4b 36 b5 b4 44 d9 6e 8b 1a 4e 11 28 92 65 02 28 a8 50 20 45 8b 9c 0b ee fb be 88 bb b8 ef fb be 33 c2 94 65 c9 96 97 6e b7 dd 6e b7 97 4a 37 03 31 1f 5e c4 7d 7f c2 3b 27 b3 aa 50 20 21 4f 4f 47 bf 0f 2f e2 da 62 55 66 56 2e 27 33 cf f2 3b 99 59 85 93 ff 7a 22 ea 8a 28 45 b9 04 07 ef f1 f1 51 82 27 4b 94 dc 9c 2c 88 9e 28 af 8b e7 20 c9 c7 f3 51 79 bc c7 29 4a be ff e0 bc de ff 90 45 d1 25 0b 5e 5f ac 5b 74 f2 92 27 ee b5 d7 f8 d7 9d 67 12 de 88 fb c0 17 97 7a ed 72 ca 8d 3b 29 71 f2 43 39 ea 5f 4f fe 5f e6 6c 97 98 c9 b9 d2 72 04 5f 5c 3e 9f e9 e5 1c b9 97 73 fc 9e 5c c1 23 f3 92 43 74 67 7c e0 b3 ff d7 59 0a 0b ef dd b7 c4 79 fd be 1c f3 bd 7b Data Ascii: sG//6(H)K6DnN(e(P E3ennJ71^};'P !OOG/bUfV.'3;Yz"(EQ'K,( Qy)JE%^_[t'gzr;)qC9_O_lr_\>s\#Ctg\|Yy{
2024-03-29 13:45:07 UTC	16384	IN	Data Raw: 69 d5 fa 85 d0 12 41 ad 17 46 34 14 1f 9d 97 3e da 86 6a 44 18 98 41 50 6e 5f 51 f0 8d d8 5b d9 2f 56 f6 a7 95 fd 65 12 18 22 81 09 52 dc 43 4a 2a bf ec a4 a0 7b bf 42 d9 6f 09 03 dd 93 2a e8 4e 55 f6 7b 95 fd 3e 65 7f 30 58 d1 42 41 f7 68 08 36 55 96 e9 98 bb 1a 31 f7 fe 66 7a 3c 09 94 87 61 ee 71 c0 dc 24 50 83 0f da 0c d0 b5 4f 87 a8 24 d0 47 02 fd c1 ca 12 0a 51 db 55 cc 5d 8b a0 9a 04 66 49 71 29 03 d5 24 b0 4a 02 6b 24 b0 13 ac 19 52 71 da 98 56 59 8f 41 81 93 e2 26 52 dc 4c 8a db 83 35 cb 14 54 37 a9 8a 6d 95 81 6a 52 3c 4c 8a e7 48 f1 86 11 54 37 1a 28 eb 0d 51 56 52 42 4a 4a 83 15 7b 94 b2 36 43 7a 33 29 69 09 56 06 68 3a a8 21 af 9f 94 c0 68 f6 23 8f f5 79 9c d7 dc f8 43 07 20 96 a3 0b 08 2b 35 e0 0b 3e 91 23 87 94 6c 92 92 1d 74 43 7b a0 07 8b Data Ascii: iAF4>jDAPn_Q[/Ve"RCJ{BoNU{>e0XBAh6U1fz<aq$PO$GQU]fIq)$Jk$RqVYA&RL5T7mjR<LHT7(QVRBJJ{6Cz3)iVh:!h#yC +5>#ltC{
2024-03-29 13:45:07 UTC	16384	IN	Data Raw: 2b cc 97 b1 9f 5e 3d 10 d2 94 17 56 45 58 58 65 df 48 e3 c5 71 bd 9b c2 6e 27 df 03 d3 e2 56 f6 61 9e 9b f4 a1 1e 72 fb 88 5f 58 f3 3e 13 68 54 a4 50 35 e0 f1 3b 58 66 23 12 aa d1 d0 9a 29 18 6c 34 d7 94 12 f4 84 23 06 3b 74 b1 79 45 24 a0 08 16 76 3c 13 30 dd 9a 0a 15 15 cf ae 1d 2a 11 fb f7 17 22 00 88 96 ba 83 b0 04 b8 2d 1a 2f 1c 42 09 1b 1e 6b 17 c1 f8 65 30 ac f8 f1 91 4a 1b 8b 01 41 51 fc 5c 61 df 1b 76 c6 ef a8 aa 98 31 57 31 82 ba ab 2b de f2 bc d4 94 97 a6 53 b1 22 a2 3f 43 04 3e d0 23 f6 a7 ca ed cc 77 71 15 05 c5 b6 74 c3 27 ac 3f 8f a6 e4 89 8a 64 ae 68 55 f5 ab f8 2a 9d cb 7e 34 3b 31 f5 12 eb 57 48 0d c3 66 4b cd cb 53 0c fe 52 e3 6d 37 b3 ab 66 2a 82 c5 4a 75 17 07 3b 99 70 d9 2e 82 97 64 30 f5 aa 9c 2a 83 97 65 f0 8a 0c a6 5e 93 c0 ab 32 Data Ascii: +^=VEXXeHqn'Var_X>hTP5;Xf#)l4#;tyE$v<0"-/Bke0JAQ\av1W1+S"?C>#wqt'?dhU~4;1WHfKSRm7fJu;p.d0e^2
2024-03-29 13:45:07 UTC	16384	IN	Data Raw: dc 99 38 fc 80 1f 39 b2 9f 3e 28 e0 ce 16 33 b1 a8 74 81 61 6e ba 48 55 33 2a b2 87 e8 83 e8 d4 84 e4 4b af 5d f4 f0 e0 04 99 7d 52 b7 cb 6b 55 38 3c ff 65 76 c2 41 d4 e3 94 36 46 68 02 13 4b dd 9a 18 d2 01 f5 b3 f7 48 64 2a 86 33 42 fb 40 51 1f 7d 54 ae cf 60 72 17 55 74 cd 76 99 c8 28 8a 86 fc 5c 05 75 dd 17 65 81 83 8a 49 42 46 96 20 e3 33 00 d5 7d de 4c 59 2a 14 a9 32 82 3f 09 0e 24 a4 14 d7 a9 57 ee 6c 48 a2 a6 0e 3e 36 99 28 bd 25 f0 91 60 3e 55 01 a1 27 26 b8 4f 06 5f c5 9d 60 ce 78 df eb 56 c4 1d dc 0d 67 62 88 ec 65 e0 4a 3d a0 7f 88 66 bb 92 f4 01 87 a9 4c 2a 90 62 0d 59 a8 8d 66 a1 36 4a 25 09 2e 37 a9 24 7e 2e f3 f0 f6 73 bf 5a d1 88 3c 3a c5 e8 21 ca 98 61 13 44 c1 48 b4 63 6d 88 b2 77 b1 ee bb d4 87 9a f0 5d d4 84 51 08 67 89 81 3e d3 bd 7a Data Ascii: 89>(3tanHU3K]}RkU8<evA6FhKHd3B@Q}T`rUtv(\ueIBF 3}LY2?$WlH>6(%`>U'&O_`xVgbeJ=fLbYf6J%.7$~.sZ<:!aDHcmw]Qg>z
2024-03-29 13:45:07 UTC	3429	IN	Data Raw: b6 c9 fa 10 59 9f 21 eb 5b 64 a3 8f 6c 8e 93 cd 15 b2 55 48 b6 aa c9 56 fb 13 df 39 07 59 2d 26 8b 8b 0e 1c 86 32 3c 70 4e 56 ab c9 6a a3 ac 9f 8f ed f9 c7 e8 26 f7 d8 34 d0 0f 11 b4 8f d5 7e b2 3a 42 56 e7 c8 ea 32 83 f9 0e a4 22 16 b2 3a 45 56 a7 83 65 cd 98 6b 7c cf 3f 8e 3a 50 b0 ac 09 1a 5e 45 b9 2e 10 dc 73 2e b2 96 4f d6 8a e8 9c d6 cb e0 dc 0f 50 07 f8 b8 56 4b d6 ea c8 5a 4b 70 bc 5d d6 d4 47 f7 fc a3 94 f6 af 75 92 b5 ae e0 38 3d 2b 3f de 0a a2 ba 68 85 f4 e3 64 6d 82 ac cd 93 b5 c5 e0 78 1b 5d 2a 37 06 6b 46 00 83 1b 58 a6 35 b2 b6 1e 1c 6f a2 99 5a 00 30 40 57 5b 2f 22 eb 65 64 bd 85 1e 71 6d f0 00 ad 33 02 c2 ac d7 93 f5 06 b2 de 14 2c 2d a2 ab cc eb 0d a0 6b 26 1b c9 7a 17 59 1f 7c b2 40 d6 fb c8 3a 48 a8 be 42 f8 2b 0a fa fc 80 d1 50 d4 38 Data Ascii: Y![dlUHV9Y-&2<pNVj&4~:BV2":EVek\|?:P^E.s.OPVKZKp]Gu8=+?hdmx]*7kFX5oZ0@W[/"edqm3,-k&zY\|@:HB+P8
2024-03-29 13:45:07 UTC	16384	IN	Data Raw: b9 7f 57 f9 3f b7 96 fd 02 96 4c b1 06 ea f8 e9 e8 02 19 69 47 2a 1f 19 24 23 a3 64 64 8a 8c cc 93 91 55 26 ca 47 7a c8 08 ec f0 e6 a7 51 2b df 33 d5 93 29 d2 b3 ce d7 62 1d 13 0e 53 db b6 76 7e f0 d7 65 0f 20 ff 16 19 d9 63 5a 7b 37 47 d8 68 d9 e9 e4 d2 d9 e8 c0 eb 9e 0a 4e d8 a3 35 64 b4 c9 66 43 f5 fc 67 9a 69 e5 a3 3d 64 74 4c d4 ca 67 b9 56 3e 3a fc 8f b6 f9 0a ba 0b f4 04 02 7f ac 8c 8c 55 91 f1 72 02 f2 62 bc 83 8c 8f 92 f1 29 32 3e 4b 26 fa c9 c4 38 99 98 3c 9d af 20 13 1b 64 b2 9c 39 ba d5 ee 03 a7 d4 41 eb 1d 6b 26 63 ed 64 6c 82 8c 1d b2 73 b6 95 f3 f2 15 68 3a 4a c6 7a c8 18 8c b2 af 9c 71 83 b1 61 32 36 f2 7a 70 d4 c2 f9 1d 1b 61 46 98 32 08 cd 46 0d 76 ee 1b 63 d0 06 19 db 21 63 07 46 e9 c9 f2 3f 34 22 9d 9d 4e b6 80 ee df d2 f6 04 cd 5f dd Data Ascii: W?LiG*$#ddU&GzQ+3)bSv~e cZ{7GhN5dfCgi=dtLgV>:Urb)2>K&8< d9Ak&cdlsh:Jzqa26zpaF2Fvc!cF?4"N_
2024-03-29 13:45:07 UTC	1024	IN	Data Raw: ae b3 7c ef e1 9f f4 5b ef bf 9f 82 db 33 b9 bb a9 d8 53 2b 35 96 aa a4 ea a9 81 94 7f b1 5f 1a 72 20 05 72 9b f7 b9 9f 15 94 0a 9a 4a 08 fd 7e 6c 79 a3 a5 dd c5 37 90 e0 57 74 f8 2a 50 43 11 bc 0a 02 c1 1c b6 d5 d7 21 c4 ea e0 82 21 35 ea 33 93 a3 78 dc 64 26 87 f1 60 c9 4c 36 f0 78 c8 4c b6 f0 18 c8 4c 8e e1 71 8f 89 76 4b 1d 7e 74 34 5f 9a c9 01 ec 92 d7 8c bb 85 4a 75 3a 11 16 62 e4 ae 1b 42 8a d3 75 4b 88 73 7a 19 13 e2 58 41 45 88 70 46 af 0b 71 ee 48 03 4e e4 0b 7b 47 84 2a 76 aa 2b 07 0d b6 b3 74 48 ce 00 6a c3 79 bf 9c da d0 6b 4d a4 37 15 fd b4 02 b8 3f 35 13 33 14 d3 31 98 5b 2a 2a ae dc 66 9e 5b f4 ed b7 cf 1f 3f 66 36 f4 c7 8f 6f c3 d6 08 6d 02 4a d8 8f 96 15 a6 41 5e bd 2a d7 86 24 6b 67 07 91 2a 12 36 a6 3a ba 66 94 eb c3 7f c0 44 ef 68 cb Data Ascii: \|[3S+5_r rJ~ly7WtPC!!53xd&`L6xLLqvK~t4_Ju:bBuKszXAEpFqHN{Gv+tHjykM7?531[*f[?f6omJA^$kg*6:fDh
2024-03-29 13:45:07 UTC	16384	IN	Data Raw: 1d 9b 73 ae 26 eb f8 ae ba 2a 5f e5 e7 26 1f 5f 12 3b 34 43 d8 16 4d be 24 fb 68 0c e3 6c 64 f9 92 ec a3 31 8c 2b c8 fa f4 41 4e 06 56 e7 1c 7b 25 bd 48 c6 33 40 b7 1f ec 09 00 af 57 78 ff 3f 7e d6 84 49 53 39 2e 18 a1 db 6e 33 2c cc c6 e8 73 f7 34 97 2c 34 81 0b 26 69 96 db cd e7 89 39 88 d7 08 d0 bb 33 3a bc 4a e5 ad d0 f4 54 91 3b 71 1c bf 51 db 2e da de a8 6d 1b db 7f b8 6d f5 45 f2 25 04 88 cb ec 4b 81 08 c3 12 11 86 51 bd fe 71 14 f8 47 2d c5 e8 25 93 6a cf 68 a1 11 78 06 7b d3 17 ee aa f4 98 0b ee 7f 2e d9 e6 b0 52 6e 48 dc de 24 aa 20 71 79 6f 7f 15 87 c2 e8 8f 41 21 9e b1 ff a4 49 fd a4 49 fd a4 49 fd a4 49 fd 79 69 52 7f f8 80 d6 d1 04 5c 5d ca 3b 9f 2d 72 9c 23 c3 7f b2 33 da f7 d3 d3 7f 80 33 ff a9 0c 0c dc 6c cc dc b5 fe 04 e6 05 db 17 2a de Data Ascii: s&_&_;4CM$hld1+ANV{%H3@Wx?~IS9.n3,s4,4&i93:JT;qQ.mmE%KQqG-%jhx{.RnH$ qyoA!IIIIyiR\];-r#33l
2024-03-29 13:45:07 UTC	1024	IN	Data Raw: 22 ce 2c 57 12 ee 84 71 25 71 16 95 4a 4c 0b 97 f7 5d 56 a3 e1 aa df c1 21 43 ae 3f 1b 0e a1 d7 34 1e 70 de a5 be 7c 94 4c e4 8b 13 1b dc 81 e0 8b 92 32 64 8a b8 b5 34 36 b6 dd 87 9e d0 79 5c 61 8e 36 ed 79 07 ee 21 8d a0 83 0c d0 c3 d2 94 ae 51 48 18 ed 85 2f fc e9 d3 d3 c9 f4 42 17 1f bc 90 d7 4c 65 74 86 ef a9 17 8b ec a3 d0 c5 4d db 75 9e 7b 77 7c 41 d3 58 64 4f 05 32 de e3 82 83 3b 76 d6 c8 4c 5e d3 b7 17 34 d7 48 d7 37 cf ca 09 49 91 80 2f 1b 89 6d c1 f4 30 de d8 38 d0 36 40 71 7f a8 1d 4a ca 90 be 23 51 62 b3 e7 76 e1 3b 09 03 6a 0a f1 bd 22 09 37 65 bf c9 fa 5b 77 3d 3d 4b af ae b4 4b dc aa 76 79 b4 61 56 09 0c 08 27 c4 53 b4 92 f6 23 4d cf fb 74 a9 e9 3b d0 0c 09 c5 54 d5 31 53 4f b3 0d 14 cc ba a9 d6 2e d7 ca a8 9c b2 d1 59 8d 23 d9 49 d2 1a 9e Data Ascii: ",Wq%qJL]V!C?4p\|L2d46y\a6y!QH/BLetMu{w\|AXdO2;vL^4H7I/m086@qJ#Qbv;j"7e[w==KKvyaV'S#Mt;T1SO.Y#I
2024-03-29 13:45:07 UTC	16384	IN	Data Raw: 1c a6 34 45 cb c0 59 51 cb c0 c0 f7 a7 68 48 d3 bb 1c a0 09 3f ac 9a dd 83 43 c3 8d af dc 77 c7 95 2f 02 fb 18 5f 0d 20 d9 24 ec 5e ce e7 29 f5 6e 6f 3c f4 f7 dd d0 1f 9d 81 e4 c5 85 4e e0 ec a0 22 88 53 0f 7a 93 0c b1 44 b5 fa 12 96 6f 27 30 c2 16 2f 2a 54 cb 81 54 21 1b 4c 65 6b 49 de 0f 54 48 5e 5e 91 ed a2 25 4f 93 63 e8 a8 d9 20 cf 39 8b 2b 0e 62 70 9f 13 57 04 e8 17 32 7b b3 4f 43 e8 fb 00 18 13 4e da 98 6f ed c0 40 39 ec 6a cc 86 02 94 11 c4 c5 1f ae 31 7e 06 bc 4c 37 d6 7d 5d 65 93 f1 13 71 b4 c2 ea e9 ae 69 3f 11 c3 7d 6a fc 44 fb 89 8e 77 65 70 7c f3 d5 c7 37 ec d2 81 77 08 ac 74 dd 62 fe 44 88 66 63 28 fb 06 3a d2 1e 4c 13 16 66 71 67 25 a8 94 cd 9e 47 31 dc 79 4c b7 2a c5 c2 a6 d0 74 69 ae f2 b1 88 5a 43 2f 7e 05 15 6e a2 bc a9 ef a9 70 77 b1 Data Ascii: 4EYQhH?Cw/_ $^)no<N"SzDo'0/TT!LekITH^^%Oc 9+bpW2{OCNo@9j1~L7}]eqi?}jDwep\|7wtbDfc(:Lfqg%G1yLtiZC/~npw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.16	49877	18.154.227.129	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:07 UTC	512	OUT	GET /vendors~app-modern.3733d47a.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:45:07 UTC	793	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 21502 Connection: close Date: Fri, 29 Mar 2024 13:45:08 GMT Last-Modified: Thu, 28 Mar 2024 12:00:21 GMT ETag: "418911f0e28e7f33a5ac1fc4f3c723de" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: LrzyVduZVy57TPB2e90ATiZYFJhNaOLA Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 fdb52cd1c10dcf08197f1215fcd8e512.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: FyC2hUnLVM7Ny9kihM4WJT8RtFvlrbMClXIWtiZMWgG5VJurl3UbEA== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-03-29 13:45:07 UTC	8314	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed bd fb 7a db 46 b2 38 f8 2a 24 c6 47 01 cc 16 45 ca 96 6c 81 41 78 32 be ec 64 d6 8e fd 8b 9c cc c9 50 8c 0c 91 4d 11 63 10 60 00 50 12 43 e2 3c c0 fe b1 af b0 af b8 8f b0 55 d5 57 80 a0 2d 67 e2 ec 9e ef db f9 26 16 d1 d7 ea ee ea ea ba 75 b5 7b 1d a7 57 61 fc 6e 1e e5 dd 5b 7e b5 0c 27 1f 9e cd 57 c9 87 28 29 78 36 49 17 97 ff ca 83 4f 17 d9 6e 47 63 af bb 5c e5 73 77 34 7a fc a8 7f 32 66 9b d3 de e3 c7 7d df e5 ac 60 99 17 7c b3 e1 41 d6 4d 16 53 97 7b 6c b6 4a 26 45 94 26 2d ee 42 26 4b 58 e4 6d 6e c2 ac 95 07 ed b6 5b 74 ff 91 66 1f 78 76 70 50 74 ff 0a 3d e3 df b7 59 ba 88 72 8e 3f df cc 66 f9 24 e3 3c 79 16 26 37 61 de 90 f4 03 4f a6 3c 8b 92 eb 67 29 40 78 57 1c 3f c7 42 7f 7b f7 fa 95 c8 7f 11 f3 05 4f 8a c6 c4 ee Data Ascii: zF8*$GElAx2dPMc`PC<UW-g&u{Wan[~'W()x6IOnGc\sw4z2f}`\|AMS{lJ&E&-B&KXmn[tfxvpPt=Yr?f$<y&7aO<g)@xW?B{O
2024-03-29 13:45:07 UTC	9000	IN	Data Raw: 0d 19 6c 74 52 27 0f 7e e1 87 23 fa b8 32 ae ec 8b 30 fb 20 bc f9 05 5b 0e 85 df 1b 75 87 f7 fe 2b 20 f4 25 93 ca 8d dd 45 55 d7 ee d1 57 53 e0 68 4e a8 14 06 4a eb b7 53 85 df 85 93 22 5e c3 62 29 73 28 5e a8 83 34 8e e1 77 90 83 db a9 02 5c 27 20 39 fc 7e 80 1c 5e ad 02 30 51 4d 15 16 a9 28 1f de d5 cb 53 f8 22 ff ab 4a 1d 4a ad 62 95 df 82 66 33 7e cd ef 4a e7 2b 06 73 13 c5 0d 1d 49 bd 2b 65 3b 6c 95 7d a4 cc 8f 3f bc 82 12 ab a8 61 1a 75 91 1f bf 7b ee 30 f4 b3 6a 2a 83 e9 0b 58 50 69 1c 63 00 27 cf 00 87 78 53 61 9d a9 8b af 96 cb fd c5 29 b3 65 97 c7 25 95 14 29 1c 08 3f 8d 4d e3 ea 5c 13 ff 90 a1 74 90 a0 b4 00 e4 00 36 02 e0 96 58 ad 3d 4b 14 03 9b dc 58 05 16 0c 86 06 b9 ef 20 f3 63 f5 10 81 72 dc eb 8b 34 e3 cd 85 2b a0 41 db 50 10 ca 8b 60 2d Data Ascii: ltR'~#20 [u+ %EUWShNJS"^b)s(^4w\' 9~^0QM(S"JJbf3~J+sI+e;l}?au{0j*XPic'xSa)e%)?M\t6X=KX cr4+AP`-
2024-03-29 13:45:07 UTC	4188	IN	Data Raw: 77 da db cd 73 63 73 ac 7b cc ac 41 6d be ed c5 82 72 d7 41 6d 62 70 af a4 e6 4c 97 08 50 02 a9 d2 33 c6 ae 82 1d 40 df cc 66 40 17 de 92 5d a0 02 a5 9d 51 05 f1 f6 73 66 ed 0a b5 c1 3b bd 9e 83 e0 cf 2b dd 51 0a 96 de 6e 01 79 fb 00 7b bf 64 77 d6 92 e2 9c df f0 ac 02 d7 0f 3c a6 b7 20 71 71 df a5 3f 49 7c b4 53 87 0a 15 7e 57 6d 8d 30 b8 59 70 ff 00 39 4d ad 16 80 ac da ab e2 5f 2b 0e 6a 83 bc 96 7b d3 85 3f 87 77 f8 6f 67 81 ff 7a 47 b7 dd 35 13 27 95 ef de 75 c5 af c3 1b f9 03 0a 89 1f a2 1c b1 6d d0 08 fe 85 56 f0 0f 94 c0 3f 98 7f c7 e8 78 c7 66 e8 07 b4 42 7f a1 08 fd a5 32 65 a9 2c d1 0d 5a ba 5d d9 5f 5d 53 98 c1 a6 71 b4 ef 1c 67 92 04 25 ae 22 3c 2c da 51 13 ec d0 ae 54 52 9c 78 f7 80 59 19 ba 34 31 f4 68 86 5e 9f 9b 45 18 25 df de 45 39 50 11 Data Ascii: wscs{AmrAmbpLP3@f@]Qsf;+Qny{dw< qq?I\|S~Wm0Yp9M_+j{?wogzG5'umV?xfB2e,Z]_]Sqg%"<,QTRxY41h^E%E9P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.16	49878	18.154.227.129	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:07 UTC	513	OUT	GET /app~tooltips-modern.d78e4d48.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:45:07 UTC	793	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 54071 Connection: close Date: Fri, 29 Mar 2024 13:45:08 GMT Last-Modified: Thu, 28 Mar 2024 12:00:20 GMT ETag: "91db46f9a239ddda3b9ea3e0af746198" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: JyQ_Pz4R_18oDwXuNPB4JIMrMz6nbui1 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 6cf4081c1099e7ccfdba44532a13bc54.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 2vVzJxEK8JMgPoAeToHvBN5kZdvR2ZFP0e6CHIBuPGpGgc0m2hI6Aw== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-03-29 13:45:07 UTC	15717	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 8b 7a db 46 92 28 fc 2a 14 36 d1 10 e3 26 cc bb 28 2a 8c 56 96 ed c4 33 be 6d e4 dc c6 eb a3 80 64 53 84 05 02 34 00 4a 62 28 ce b3 9c 67 f9 9f ec af aa ee 06 ba 71 a1 e8 24 33 7b 66 bf d9 cd c8 20 d0 f7 ae ae ae 7b 59 ab 98 d7 e2 24 f2 26 89 75 52 bf f2 c3 b1 eb bf 9b 7b b1 73 cb c7 4b 77 72 7d 3e 5f 05 d7 5e 90 f0 68 12 2e 2e 3f c6 a3 87 8b dc df bf ff 60 3b cb 55 3c af bf 7f 3f e8 f6 db 1f d8 66 d0 1f 74 07 c3 3a 67 09 0b ed d1 d7 9b d0 99 d6 13 b6 39 1b d6 e1 d7 93 55 92 84 c1 37 51 b8 5a 9e 25 30 94 f1 2a e1 5b fb e4 c6 8d 6a d1 28 ac 1f f7 7b dd a6 cd 3c 78 ec c2 73 cb 66 01 be 6d 0d 3a 6d 9b b9 f0 78 d4 1a 74 bb 36 8b e1 71 d0 3f 6e 77 6c e6 c3 63 a7 d3 6b 1f db 27 93 30 88 93 da 64 54 6f b2 d8 39 5b db 75 6b 4c Data Ascii: zF(6&(V3mdS4Jb(gq$3{f {Y$&uR{sKwr}>_^h..?`;U<?ft:g9U7QZ%0*[j({<xsfm:mxt6q?nwlck'0dTo9[ukL
2024-03-29 13:45:07 UTC	16384	IN	Data Raw: 3b cb e9 42 c9 8f b9 93 fb 69 e5 4d ae c9 71 43 1f 3e bd bd c4 bb 68 ad cf 21 2b 5c 04 37 bd 4a 01 e6 b4 6b 82 65 77 08 9c 1d e0 9f e1 b8 e9 5d ab 77 7a bf 1e a6 eb 99 0a fe 47 2f ab bf 37 d6 da 05 82 77 ce a3 cc bf 1a 16 4d be bb c4 0b 5f 94 db 56 e9 40 5c e7 ad cc 97 c5 36 c4 ca 0e 27 5b 96 99 a4 d9 db 93 38 77 b9 1b 98 cc fa 8f 66 f3 a8 3b c6 34 55 26 12 4b 3f 6c 53 66 26 de b2 76 e7 a8 d7 a9 12 74 54 5c e1 ed f6 71 26 e4 0f 46 ad 66 33 e3 2b 5d 5d 94 41 f7 d7 77 7c 26 2f f3 8d a6 1b 9a ae a4 b9 ab cb 84 c1 cc 53 8e 5a 8b d4 76 f2 45 00 e4 ab eb 9f 05 30 35 2a e7 e3 fd 3e 11 54 d5 df 30 09 37 7b 3f 65 4b 53 74 da 82 97 0b 36 37 6f 71 ea fa fd 8a 5d 19 af 7d 14 f0 b9 8f 02 76 37 8a 1f c1 bf 27 05 83 4a 79 e3 4a ee 26 54 7c 08 b1 8e e8 20 57 74 da c7 0f Data Ascii: ;BiMqC>h!+\7Jkew]wzG/7wM_V@\6'[8wf;4U&K?lSf&vtT\q&Ff3+]]Aw\|&/SZvE05*>T07{?eKSt67oq]}v7'JyJ&T\| Wt
2024-03-29 13:45:07 UTC	1024	IN	Data Raw: 8a 58 50 a2 9f 8f d0 37 e1 e2 1d 2d 17 de c7 10 ba 92 85 c8 55 fa 88 71 89 f4 7a 1f 57 38 68 71 3d 3e 22 ea 22 c4 f3 50 1d 94 91 21 96 79 1b fe 75 6b 20 23 b5 fc 85 cb 40 8d c0 44 9e 6c 27 ac e5 56 22 32 57 c2 37 57 22 d5 56 62 ae af c4 c8 94 03 c8 c5 48 d4 99 03 9a 50 be 57 9c 79 7e 11 d2 fc 22 f8 b6 45 e0 66 87 1f 51 4a 44 e1 5d f9 ba 8c c8 05 ae a4 b3 20 c8 d4 38 9d ca 58 2b 17 64 6e b8 6f b2 3f 5a fe eb 0d da 18 21 98 d2 d2 00 a1 f9 b1 86 35 61 95 49 d9 9c 60 7d 10 ee 53 fb ed 69 d6 b8 ea d6 68 fe 59 33 1f 2d 21 ab d1 e5 1e 32 cf ba 2e 37 aa 18 eb 51 db 0e a5 c5 47 75 9c 07 41 8e 1a a2 64 5c 83 08 46 ab 51 a0 04 b9 50 fc d3 77 30 f8 c1 98 fc 62 ca dd 00 bd a5 6b 77 74 73 57 a0 6e e0 60 a6 1a fa e0 3e ff 30 b0 40 60 b2 14 cf 1a bf dc d0 24 c9 1c 73 3a Data Ascii: XP7-UqzW8hq=>""P!yuk #@Dl'V"2W7W"VbHPWy~"EfQJD] 8X+dno?Z!5aI`}SihY3-!2.7QGuAd\FQPw0bkwtsWn`>0@`$s:
2024-03-29 13:45:07 UTC	11208	IN	Data Raw: 85 ca 6d 26 62 56 f7 6c 50 b0 d3 45 e0 f5 96 61 fd 20 cd 42 cc 7f 65 64 a0 04 c7 87 7c dd 43 ec 19 62 ea fb c9 51 00 9a 41 02 c6 9c f1 8a e5 fa c6 2f 14 3f 1f 47 61 16 fa f3 c3 88 50 a2 f8 2e 5a 3b cb 1c 7a f1 1b 53 86 5d 52 ba 32 96 3e c1 25 13 bd e9 f2 39 a3 9e d2 ca b3 6d ec 67 a8 2b 87 2d 58 73 2e 3c 11 a8 5d 7e c7 29 d9 fe 48 e4 0e 01 f3 ad ca 01 83 5c 24 24 6d 18 e0 30 45 af d1 cb ec a0 49 05 e7 79 a0 f2 15 84 bc 5c 46 a6 9c 2f 26 46 b1 44 c7 b7 c3 1b 29 84 65 7a e2 40 88 de fc f1 f8 45 30 0a 40 e4 01 e3 3d 21 f4 4e 38 52 cd bb 94 4d 51 30 84 45 24 39 8b 17 c1 4b b2 a9 41 44 c3 b8 25 26 8c df 56 2c 69 91 6e 01 62 a1 e2 48 55 c0 45 8e 8c 45 76 15 d8 a4 93 30 b8 8f 29 8e ee 63 68 19 1e 94 0a 2d f2 49 2b 44 96 36 35 39 d8 04 ba 6d 0d 42 24 fa a4 43 33 Data Ascii: m&bVlPEa Bed\|CbQA/?GaP.Z;zS]R2>%9mg+-Xs.<]~)H\$$m0EIy\F/&FD)ez@E0@=!N8RMQ0E$9KAD%&V,inbHUEEv0)ch-I+D659mB$C3
2024-03-29 13:45:07 UTC	9738	IN	Data Raw: 51 6e 33 eb 0a 57 57 8d 1d a0 cb 0d 42 1c b1 c8 be 02 48 5e 41 b8 7f 00 21 58 42 d3 9e 9b 40 44 2a bb b9 d2 c0 aa 09 d7 65 84 5b f5 74 af b8 2b 6e 4d 5f d8 db 78 11 46 0f a9 c3 a8 a6 99 2b f3 ae d1 61 a9 41 24 e1 38 33 3e ce 98 8d 33 64 2b 72 cf d4 d4 58 46 15 8a 05 92 98 2f 54 67 52 d2 ff cc 67 a4 80 32 04 b9 19 06 65 a6 c4 64 2a 63 2f 25 09 17 52 12 ae a4 ff 42 23 4d f5 ea 67 0d eb 95 cf 5d f8 7c 49 9d cc 66 07 a4 2c b8 d4 3e f3 6c 6d 77 fb 96 80 d8 db db 7e 9b 77 e7 62 b2 f8 d4 5c 15 59 7f 5b 20 a0 b0 fb f4 04 fe b1 93 8e 39 5a e4 6e 90 d6 d5 a1 ac c9 a7 14 2d 35 85 ad a8 ee 69 77 bc 96 25 e8 ea 11 d3 e9 3c c6 bf 8b 0d 76 de 1c c0 ad a6 97 7b fd a5 8a ab 70 e8 80 d7 f7 8b 65 13 ae 04 60 65 02 cc 20 ea 5d 5e ee e9 9a 21 66 07 61 32 e2 5a 8e 07 75 75 ad Data Ascii: Qn3WWBH^A!XB@De[t+nM_xF+aA$83>3d+rXF/TgRg2edc/%RB#Mg]\|If,>lmw~wb\Y[ 9Zn-5iw%<v{pe`e ]^!fa2Zuu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.16	49880	23.221.242.90	443

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:07 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-29 13:45:07 UTC	468	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=148739 Date: Fri, 29 Mar 2024 13:45:07 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.16	49881	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:07 UTC	2821	OUT	GET /ws/ HTTP/1.1 Host: cex.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000 Sec-WebSocket-Key: aUuUMmbmNvbJYneN/wEkOw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-29 13:45:08 UTC	1221	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 29 Mar 2024 13:45:07 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 Content-Security-Policy-Report-Only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Set-Cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fws%2F; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS Location: /ws Strict-Transport-Security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c6f1a4f818c-IAD
2024-03-29 13:45:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.16	49882	23.221.242.90	443

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:07 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-29 13:45:08 UTC	774	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-CID: 7 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 8BFC17DD061B46CAAD2B2AEB7B19C3D8 Ref B: CH1AA2040901011 Ref C: 2023-07-21T06:04:00Z X-MSEdge-Ref: Ref A: 1421F39FA7224BE199CC2F2C3DD24574 Ref B: CHI30EDGE0415 Ref C: 2023-07-21T06:04:00Z Content-Type: application/octet-stream X-Azure-Ref: 0DMGnYgAAAACXaXykPZuVRq4aV6pCkeO8U0pDRURHRTAzMTgAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=148674 Date: Fri, 29 Mar 2024 13:45:08 GMT Content-Length: 55 Connection: close X-CID: 2
2024-03-29 13:45:08 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.16	49879	18.154.227.129	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:08 UTC	504	OUT	GET /app-modern.ef7a291f.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:45:08 UTC	794	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 136493 Connection: close Date: Fri, 29 Mar 2024 13:45:09 GMT Last-Modified: Thu, 28 Mar 2024 12:00:20 GMT ETag: "a05d47f6c60754a17b845c79523a5872" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: ROQd4A2qSz4Cgm9AULt6XQe9r3HqOd5p Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 1103f2f4fcd4848a1668ac878932c20a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 0xmBlHOiIZih5wNHESqb9WmwoPy-57Qh2QHhURMUHsheXejtUeLseg== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-03-29 13:45:08 UTC	16384	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd db 72 1b 49 b2 20 f8 2b 64 8e 9a 8d 3c 0a 66 e1 42 f0 02 34 8a 4d 51 52 49 55 52 49 47 94 4a 55 ad a3 43 25 81 00 91 22 90 09 65 26 78 29 10 66 f3 3c 66 3b 36 fb 30 66 fb b6 66 fb b0 6f fb bc ef fb 29 f3 05 fb 09 eb ee 71 cf 0b c8 52 d5 e9 39 3d 3b 73 a6 4b 60 66 64 84 47 84 87 df dd c3 5b 64 7c 23 cb d3 68 98 7b fd c6 f9 34 39 0b a7 6f 27 51 16 5c f1 b3 79 38 bc 38 9e 2c e2 8b 28 ce 79 3a 4c 66 a7 9f b3 c1 dd 4d 6e 6f 3f 7c f4 83 f9 22 9b 34 3e 7c e8 74 db 3b 1f d9 b2 b5 bf db ec f4 1a 9c e5 2c f6 07 df 2e e3 60 d4 c8 d9 f2 51 af 01 7f 45 ec 92 fe 4d 56 7e ff 32 4c 37 d2 41 dc d8 df 3d 68 77 fc fe 30 89 b3 7c 23 1a 74 da 2c 19 34 9a 2c 0d 8e 6e fc 86 17 7a 6c 99 87 e9 39 cf 7b 1e 3f 98 5e 1e a4 49 d3 5b c1 8b 51 94 cd Data Ascii: rI +d<fB4MQRIURIGJUC%"e&x)f<f;60ffo)qR9=;sK`fdG[d\|#h{49o'Q\y88,(y:LfMno?\|"4>\|t;,.`QEMV~2L7A=hw0\|#t,4,nzl9{?^I[Q
2024-03-29 13:45:08 UTC	15716	IN	Data Raw: 7c dd f1 3a 7b c4 ef 8c 59 d0 4b 92 f5 7e b6 ab ff cf c3 34 57 96 86 18 94 42 e7 46 ca 82 8c 31 70 ae 91 59 ae 37 8f 95 d5 cd c4 91 b1 d0 6c a6 7b 56 66 46 23 c0 4e 29 e0 f8 47 12 a7 10 d7 86 8e 40 6b 4f 67 64 07 3a a0 19 2d ff 16 f6 65 e4 4b 93 e3 06 4a 53 f2 42 49 32 4b cc 19 91 ba 85 6d 9d 98 69 09 71 22 65 c6 73 0b 89 c6 96 22 7d 69 69 98 37 88 9a 58 50 e4 4c 21 28 c7 81 bf 6d 6d 6d 6d 0e e1 6c 9d 61 a5 bc fc 61 6b f5 a9 6c cc bd c3 e8 24 6a e6 cd d8 1a 88 15 9c 16 3c 4a fc 3c b3 a6 63 ad 68 dd 8c 2a f7 6a ed ee 16 37 d2 98 89 d7 dd 73 8b b8 26 6a 26 e9 5b 5f 9f 8f 5c 59 99 89 43 1f e3 ca e2 3d 9f f6 71 87 37 4f c2 e1 84 b2 d3 cd 42 10 9d 5d 1a 13 4e f1 5a d3 27 f8 42 af ab 00 28 a7 50 88 aa 9b 43 51 c9 ca f1 fa 6f 83 60 3e ca e0 ea 6a 49 71 e7 a1 79 Data Ascii: \|:{YK~4WBF1pY7l{VfF#N)G@kOgd:-eKJSBI2Kmiq"es"}ii7XPL!(mmmmlaakl$j<J<ch*j7s&j&[_\YC=q7OB]NZ'B(PCQo`>jIqy
2024-03-29 13:45:08 UTC	16384	IN	Data Raw: 90 26 d3 74 83 ef e0 7e 51 fc 8a 6d 74 6c 22 bc 6b 8c 54 5a bd 80 9e fb 5f 1b 5e 6e 5d b5 8c 84 67 e7 e1 5a 71 ad 3b 86 f3 bd a0 a4 b5 6d d0 7c 44 2d c6 fa bd aa 27 f7 ae b5 86 e7 5b 8f cd ca 76 7a a6 15 b5 4a 13 ee 06 fd 54 1d e9 15 07 cc 5c 33 8a a0 c4 87 e4 e6 5e 39 05 6f 46 d5 cd 13 2f 2b d2 e1 26 f5 d2 61 d2 37 8d 29 8c dc c2 b4 ce cb a0 03 fb d8 18 b4 61 76 aa e4 ea 65 78 0a 81 2c 02 35 bc 26 a7 77 33 d6 c4 a6 21 94 38 a1 81 c1 89 39 52 b6 61 0d 63 40 6f 26 1d 81 c3 94 42 f2 aa cf 7a 5e bf f5 aa 9a f4 e0 96 07 df 42 7d 79 60 6e 6f 3b 34 0f 2e 40 51 40 27 4d 50 17 0c 36 55 9c 87 5e 99 1a 14 b9 54 18 61 75 13 69 21 86 d8 6e e0 44 49 61 e5 43 92 19 75 43 eb 9c c0 50 b8 a1 ce 53 e6 bb 8f ae 57 10 3a 74 b3 66 59 e2 2c 3c 7c 29 cd b9 d2 32 ab 89 a3 ab cc Data Ascii: &t~Qmtl"kTZ_^n]gZq;m\|D-'[vzJT\3^9oF/+&a7)avex,5&w3!89Rac@o&Bz^B}y`no;4.@Q@'MP6U^Taui!nDIaCuCPSW:tfY,<\|)2
2024-03-29 13:45:08 UTC	1024	IN	Data Raw: 6a 49 8a c8 ea 66 ff ea 5f 8d dd 5a de fe c1 04 8a 41 23 fd 8e 5b d8 f9 a9 ca 17 1c 40 19 d6 2d 35 48 b3 d9 e6 6d 92 47 23 8c 54 29 b5 81 ff 84 e7 e3 fb 44 80 bf e4 f1 da 02 d3 8a f5 bf fb ef 17 59 36 4b 8f 7a 7f ff ee ef df 5d 85 81 ca e9 e8 d7 e0 9f bb 30 be 43 cc 60 f7 ef df 4d d3 f3 e4 ef df 7d e7 65 22 b7 04 87 b6 94 9e 14 39 c8 24 25 9c 29 45 ed 50 28 2e 05 ec f8 59 fc 3c be c6 ac ee e8 a6 ec 4f 03 72 54 c7 34 d3 7c 5f 62 02 20 4d 99 e8 12 d6 4f 4c ef 6a 84 2b f0 42 de 8e 84 92 0e 89 fb 09 d3 4f 70 99 99 f4 10 8d 6d 78 8c 94 f5 d1 e5 8c 1f 7d ff e4 7f c5 5b e4 c9 7d 41 27 bc 35 ee c2 16 51 2e 6c f4 5f 80 5d 32 64 ca 2f 96 fc c3 c8 1d a9 b6 1d 4a 53 1d 76 0e ed 76 0d 3c 89 e6 5f 0c e0 93 92 7a 80 4b fe 5c b0 fd 64 9e a4 b9 08 51 15 61 2f 0a 6e 5e 09 Data Ascii: jIf_ZA#[@-5HmG#T)DY6Kz]0C`M}e"9$%)EP(.Y<OrT4\|_b MOLj+BOpmx}[}A'5Q.l_]2d/JSvv<_zK\dQa/n^
2024-03-29 13:45:08 UTC	16384	IN	Data Raw: e2 dd d0 cb cf 4f 63 0f 69 9e 3f a0 ba 02 2e 5b 6b 77 52 12 df f3 a5 39 d1 96 e6 42 ce bf a6 4b 8d 48 05 29 d3 ec 8c 93 64 d5 b0 7f b5 bd 51 1a 3b 91 5b 80 95 8d 33 03 e2 0a 55 fc 64 02 44 1b 10 4c 03 bd 8f 2a 5b b1 82 1b cc 03 ad 06 66 7b 3b a6 6c c5 e5 06 88 63 61 71 22 bc f4 52 34 15 a1 6f 7f b1 e8 84 89 bc 94 a3 f2 b3 80 5a 5b 5c c1 33 0a e5 5e 7a 8f 91 39 f2 a9 44 4d 91 3a 95 95 27 32 2a 31 15 44 af 3c 9d 0f de 87 ec 1a a6 d6 9c b7 60 05 4b 05 b5 43 30 ad f2 2c 84 e5 59 80 e2 8a fa d4 a8 5b 1b 28 3b a1 53 5c a1 59 4b 61 94 b8 64 e4 39 dc ed 28 2d ff 21 5b 61 e3 8a 9a 57 5f 46 31 d9 b8 6a 35 c1 6d 04 f3 63 c2 71 89 2f c4 47 b0 5b 0a 50 bd 62 d7 22 71 70 92 98 9e 97 9a fd 29 3f 97 c2 a3 3d 74 77 52 9e 4b a6 33 54 e1 59 c9 6e 65 94 10 47 bd da a1 97 34 Data Ascii: Oci?.[kwR9BKH)dQ;[3UdDL[f{;lcaq"R4oZ[\3^z9DM:'21D<`KC0,Y[(;S\YKad9(-![aW_F1j5mcq/G[Pb"qp)?=twRK3TYneG4
2024-03-29 13:45:08 UTC	1024	IN	Data Raw: cf 57 51 5b 91 ec 7f 8b cb 09 91 98 5f 25 39 71 3e 88 cd 43 3c 15 83 14 c3 fb df fb cb 30 f0 d3 17 05 50 d3 47 b4 5a 9a 05 1f cf 8f d0 a7 f6 43 25 f5 67 53 ac b1 13 b6 c6 4e d8 1a 3b c1 b0 09 1e 01 c3 52 2f c2 59 55 02 03 66 f9 42 55 87 60 5d d6 d0 0c e4 4f d8 1b 34 5a 12 b1 21 a8 85 4f 90 65 51 93 8a 1e 4e bf c4 66 36 22 28 05 ad 93 b2 be f9 25 a8 da 4a d3 91 d5 4b 6e 4e f2 3d cd 1c 69 d1 6b d4 37 a2 7a 8f d1 32 e6 bf 26 2d c0 c2 7c 84 70 c0 d1 58 f6 e4 fe 9e 5f 9e bf 34 64 6c 49 9a 8f 7c 71 77 37 8d 05 10 84 ec 6d f4 14 77 2d ba 49 af 22 71 07 36 0f de c0 97 e2 55 36 be a3 8d 8d a6 6d 03 f7 d5 78 64 59 1a 17 f2 0f 24 93 16 89 57 54 2d a6 26 a8 7a 19 a3 9f 90 21 7b 50 c5 ca 66 de 0b cd dc 8b 3c 30 32 ef f4 05 cb 17 67 69 c2 1d 9a a7 15 38 41 b9 ee 91 1f Data Ascii: WQ[_%9q>C<0PGZC%gSN;R/YUfBU`]O4Z!OeQNf6"(%JKnN=ik7z2&-\|pX_4dlI\|qw7mw-I"q6U6mxdY$WT-&z!{Pf<02gi8A
2024-03-29 13:45:08 UTC	16384	IN	Data Raw: dd 66 7d 9a 2a b3 0e ab ec 9d 20 75 b8 75 8a c4 cf cf 4b 15 c9 5e a1 eb c5 0c 54 77 58 ee 10 53 62 19 41 fa 5a 48 10 6f 97 7e 34 4e c4 42 c7 19 78 98 c0 e2 a8 21 ab 30 36 f0 0f 06 ae 25 3c 97 0f 34 be 8e 04 cb be 24 fe 22 46 ab 1d e5 03 23 79 e0 03 43 d7 c6 9e b1 7e 10 a4 ca 13 a6 7e 61 05 8f b9 51 78 7f 5f 44 29 1e 20 4f e5 b5 ee 48 a9 05 7f d9 50 8e 79 8e 26 c9 e4 41 9d 22 26 96 cb 4d 0c cb 1b 4e 5f 9e cf 09 0f 5a 64 29 c8 49 8e da 17 a1 4e bb f0 59 75 ca 8a b9 67 8a 63 c5 49 f1 ee 9d a8 00 9f d6 04 1a bc 8f 2b 29 98 d6 5c 94 58 af a7 e2 c8 7c 12 cc 5e a3 00 05 22 83 24 4e 98 96 65 05 0b fa a7 f8 f4 18 b8 08 f5 ec a3 e4 22 4f 7c 68 df 8b b3 37 3e 8a e9 5e 72 d3 6a 6f a4 9b e2 f1 96 43 0f c8 2f b0 70 47 91 b7 84 71 c8 1e f9 c0 05 fa 6c 9a 85 a4 5f 5d fa Data Ascii: f}* uuK^TwXSbAZHo~4NBx!06%<4$"F#yC~~aQx_D) OHPy&A"&MN_Zd)INYugcI+)\X\|^"$Ne"O\|h7>^rjoC/pGql_]
2024-03-29 13:45:08 UTC	16384	IN	Data Raw: ed 60 9f 27 37 4e bd 97 40 fc 70 16 87 51 5c 52 36 a1 20 9f 93 58 e3 6e cb 1a f0 12 8c 67 a2 39 a7 57 55 c9 86 a5 b7 59 c6 61 5f 77 75 0b 73 44 e7 e3 7b d9 0a cd e3 3f 51 94 e8 90 3b 72 70 c0 18 01 69 a3 87 30 c0 03 ef b6 a7 51 00 61 8d 6d 34 61 89 5d a1 c3 a2 f8 1d 42 d9 35 b6 1c f9 1d df f3 e7 7e 98 ba 80 39 af c1 66 65 fa 76 8d 17 cc 1f c3 a2 75 91 b2 30 eb 56 30 ec 3d 83 15 2a ac 3c 2f 49 23 49 7c 52 f0 40 39 54 72 23 bd 57 31 ec 4c 29 35 cc f9 d0 f0 5e 56 2b f0 d7 49 1d 86 94 fe ae ee 28 72 17 b1 cc c9 29 58 4d 98 66 c3 f7 c2 88 27 3b af 04 ba f6 4f 0d 31 2f 0c 76 c6 d7 47 d5 85 4e 1d 78 0e e5 01 4b b6 a9 a1 ec 16 e6 21 03 42 f7 27 98 3a fd 9f 3b a5 a1 89 db 01 fe 42 97 53 34 a6 94 fe 89 19 d2 47 3d 9f e9 75 7a dc cb 4b 43 55 aa a6 cf 1c 97 ab 9d f9 Data Ascii: `'7N@pQ\R6 Xng9WUYa_wusD{?Q;rpi0Qam4a]B5~9fevu0V0=*</I#I\|R@9Tr#W1L)5^V+I(r)XMf';O1/vGNxK!B':;BS4G=uzKCU
2024-03-29 13:45:08 UTC	2048	IN	Data Raw: d9 e8 58 47 b2 e4 01 a5 64 a6 c7 30 35 e5 f2 06 9b 4d a0 fb 57 b6 f1 be 5e ad 54 29 7b ac 1d 99 50 01 a6 1b 1d 46 c1 14 7e 8a 48 2c ec b8 ec 98 56 c1 0c 1c 9e 7b 46 d0 a0 3d d7 10 3f 91 14 25 a7 8c c1 bf f7 79 ed f6 cf 39 af 0d d6 3a af dd fc c5 e7 b5 c1 ff d0 79 ed e6 3f e7 b5 bf d1 79 ed 00 f6 a3 94 2a 4f 38 58 25 fa ba c4 e8 12 f6 dc fe af 5f 74 27 3c 62 8e bb 3d 07 f3 c2 71 1f 29 2f e1 2f 66 ac d0 0b 93 24 11 27 2c 89 02 79 63 29 9d b4 a2 82 64 13 0f e8 72 34 d3 27 ea 07 63 7d 94 4f 4f 51 97 3c 2a ae 19 71 a9 8e 99 39 79 14 67 7c 1f 11 da 22 c4 6c 38 3c 3b e5 d3 51 70 56 8b 13 54 44 6b 9c 6f e8 e5 e7 78 0b 5e 5f c4 12 92 f0 a3 12 a9 90 59 2e 3e e0 54 b7 24 29 b8 5c da b0 99 80 44 39 b6 8b 76 9d 68 a6 d6 8e de cd 70 27 e2 73 23 b2 aa 07 b8 06 a2 dc 36 Data Ascii: XGd05MW^T){PF~H,V{F=?%y9:y?yO8X%_t'<b=q)//f$',yc)dr4'c}OOQ<q9yg\|"l8<;QpVTDkox^_Y.>T$)\D9vhp's#6
2024-03-29 13:45:08 UTC	16384	IN	Data Raw: ed 1e 1b 08 13 ce 83 9e 6e 56 bf b3 59 55 8e 4d 2b cf e4 f3 59 85 9b 8b 96 4c 22 6b c6 60 bc c7 68 fb 87 51 07 ff d5 74 62 4e 2c 8d 0f 31 cc 43 98 c5 9e 76 22 eb 29 f0 96 96 3c dd 93 35 a5 ac 4b b6 08 dc 65 8b e9 19 5b 4b 1a f2 77 4d a1 1b 4f 77 2a a1 e2 3b 0f ae 2f 06 76 e2 d6 3c b1 03 fb c2 74 65 ff 66 7e 72 7e 3f 4b 96 d8 07 69 89 7d 98 fd 4d a3 6a 3f cc 96 26 f3 fa 38 2b 4e e6 05 fd 5f 3f 99 57 bb ae c7 49 68 8b 93 79 b5 f1 3f 96 cc eb fd ec f1 b1 f2 7e b6 2a 99 57 7d 7f ab 03 07 65 2a f2 1d ba 1e 69 a8 c7 f6 2c 8b e5 f7 6a 62 81 c3 46 c3 a8 b7 37 29 40 a2 b6 6d 74 3b 6d fc d1 ac 9f b5 92 fb 94 d9 92 3d c3 cb 50 bc c6 fe 9b 75 8d cd 7a a3 d6 ec 18 6d d3 d8 ee c0 7f 98 79 ac 54 c7 4c 5f f5 26 fd d9 98 d6 a0 9a 6e b3 44 7f d6 da c6 f6 d6 36 fd b9 95 7c Data Ascii: nVYUM+YL"k`hQtbN,1Cv")<5Ke[KwMOw;/v<tef~r~?Ki}Mj?&8+N_?WIhy?~W}e*i,jbF7)@mt;m=PuzmyTL_&nD6\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.16	49883	18.154.227.129	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:09 UTC	519	OUT	GET /launcher-discovery-modern.374890f2.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:45:09 UTC	792	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 1926 Connection: close Date: Fri, 29 Mar 2024 13:45:10 GMT Last-Modified: Thu, 28 Mar 2024 12:00:21 GMT ETag: "c8d15d2b5331fe0e09a3f74e8aa0779b" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: NN7cxoGx2ssrxmhtyZYY29051Bs1ORL5 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 ccabfbceff64477665e33f03003a399c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 8aiQAJU3chkDhNHdYr4VQ0u6ghbKk1Q-4PsXKrk7BMFHtVdkS860Wg== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-03-29 13:45:09 UTC	1926	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 58 6d 73 db 36 12 fe 2b 0c af a7 21 53 90 a5 5e 2c 5b e4 a8 bd d4 c9 4d 3b 97 5c 32 97 b4 f9 90 c9 b8 10 09 49 88 49 82 05 40 4b 0a a3 ff 7e 0b f0 55 14 63 3b bd b3 c7 36 05 ec 1b 9e 5d ec 3e b4 99 0b 62 08 c9 69 28 cd c0 da c4 6c 85 e3 77 5b 2a dc 1d 59 65 38 bc bd de e6 e9 2d 4d 25 e1 21 4b 6e 3e 89 e5 c3 22 5f be 7c f8 68 bb 59 2e b6 d6 87 0f 8b c5 7c f2 11 15 d3 c5 78 7e e5 5b 04 51 24 ec e5 8f 85 70 b9 45 6d 24 dc c8 a2 a8 88 c8 1a e7 b1 f4 2d d8 7a 89 f3 34 dc 12 fe 9c 8a 90 dd 11 7e f8 27 c7 09 39 da c1 1d e6 86 5c 0a 6b 31 bf 98 79 36 4a e1 71 7e 39 9b 5f da 88 c1 e3 0c 96 c7 36 c2 6a 75 71 35 05 01 0e 8f 57 f3 c5 64 6a 07 21 4b 85 34 b6 4b cb 43 dc a5 97 b6 65 7a 7f 2f 18 c4 4e e5 c1 f7 82 e3 d8 eb 7c 1e 07 47 d3 Data Ascii: Xms6+!S^,[M;\2II@K~Uc;6]>bi(lw[*Ye8-M%!Kn>"_\|hY.\|x~[Q$pEm$-z4~'9\k1y6Jq~9_6juq5Wdj!K4KCez/N\|G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.16	49884	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:09 UTC	2821	OUT	GET /ws/ HTTP/1.1 Host: cex.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000 Sec-WebSocket-Key: Us5H7rSYXDYln7gPyQLb6Q== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-29 13:45:09 UTC	1221	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 29 Mar 2024 13:45:09 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 Content-Security-Policy-Report-Only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Set-Cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fws%2F; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS Location: /ws Strict-Transport-Security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c79da079c4f-IAD
2024-03-29 13:45:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.16	49885	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:11 UTC	2821	OUT	GET /ws/ HTTP/1.1 Host: cex.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000 Sec-WebSocket-Key: hiBOJ5DL+UfkYlRxZr3aZg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-29 13:45:11 UTC	1221	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 29 Mar 2024 13:45:11 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 Content-Security-Policy-Report-Only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Set-Cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fws%2F; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS Location: /ws Strict-Transport-Security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c85ac068275-IAD
2024-03-29 13:45:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.16	49886	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:12 UTC	2821	OUT	GET /ws/ HTTP/1.1 Host: cex.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000 Sec-WebSocket-Key: oMPX9p8AA3glPEtcsf5zrw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-29 13:45:13 UTC	1221	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 29 Mar 2024 13:45:13 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 Content-Security-Policy-Report-Only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Set-Cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fws%2F; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS Location: /ws Strict-Transport-Security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c909b1e20a6-IAD
2024-03-29 13:45:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.16	49887	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:14 UTC	2821	OUT	GET /ws/ HTTP/1.1 Host: cex.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000 Sec-WebSocket-Key: FtWZH8nsTOtz7HYnAjPCRA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-29 13:45:15 UTC	1221	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 29 Mar 2024 13:45:15 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 Content-Security-Policy-Report-Only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Set-Cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fws%2F; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS Location: /ws Strict-Transport-Security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04c9bee5e3b29-IAD
2024-03-29 13:45:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.16	49888	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:16 UTC	2821	OUT	GET /ws/ HTTP/1.1 Host: cex.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000 Sec-WebSocket-Key: mce43x6XdZw7jr2pkdzang== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-29 13:45:17 UTC	1221	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 29 Mar 2024 13:45:17 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 Content-Security-Policy-Report-Only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Set-Cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fws%2F; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS Location: /ws Strict-Transport-Security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04ca859b23ae1-IAD
2024-03-29 13:45:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.16	49889	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:18 UTC	2821	OUT	GET /ws/ HTTP/1.1 Host: cex.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000 Sec-WebSocket-Key: R6Si6TrXvMJ4ZscXqo9r4w== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-29 13:45:19 UTC	1221	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 29 Mar 2024 13:45:19 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 Content-Security-Policy-Report-Only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Set-Cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fws%2F; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS Location: /ws Strict-Transport-Security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04cb62fc73898-IAD
2024-03-29 13:45:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.16	49890	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:21 UTC	2821	OUT	GET /ws/ HTTP/1.1 Host: cex.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000 Sec-WebSocket-Key: yoPM8HfyKSIqZ0Mnt/gdYw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-29 13:45:21 UTC	1221	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 29 Mar 2024 13:45:21 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 Content-Security-Policy-Report-Only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Set-Cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fws%2F; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS Location: /ws Strict-Transport-Security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04cc50bf2200a-IAD
2024-03-29 13:45:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.16	49891	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:24 UTC	2821	OUT	GET /ws/ HTTP/1.1 Host: cex.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000 Sec-WebSocket-Key: Qf7D3yru5HnwybbpBTqpWg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-29 13:45:24 UTC	1221	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 29 Mar 2024 13:45:24 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 Content-Security-Policy-Report-Only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Set-Cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fws%2F; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS Location: /ws Strict-Transport-Security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04cd73fa787a2-IAD
2024-03-29 13:45:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.16	49892	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:27 UTC	2821	OUT	GET /ws/ HTTP/1.1 Host: cex.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000 Sec-WebSocket-Key: Ldfxpwy4EffqGI+AO/DPig== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-29 13:45:28 UTC	1221	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 29 Mar 2024 13:45:28 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 Content-Security-Policy-Report-Only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Set-Cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fws%2F; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS Location: /ws Strict-Transport-Security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04cecec1f8262-IAD
2024-03-29 13:45:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.16	49893	3.225.23.81	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:30 UTC	596	OUT	POST /messenger/web/metrics HTTP/1.1 Host: api-iam.intercom.io Connection: keep-alive Content-Length: 1513 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://cex.io Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:45:30 UTC	1513	OUT	Data Raw: 61 70 70 5f 69 64 3d 71 32 32 67 64 32 78 33 26 76 3d 33 26 67 3d 66 65 30 66 66 63 34 35 38 36 39 64 61 66 35 34 33 37 35 66 36 31 65 38 38 64 38 62 65 62 36 63 35 36 63 32 32 64 62 62 26 73 3d 38 64 66 35 35 39 63 37 2d 35 34 34 65 2d 34 66 39 35 2d 39 63 64 35 2d 66 33 34 31 34 32 63 36 33 62 31 63 26 72 3d 26 70 6c 61 74 66 6f 72 6d 3d 77 65 62 26 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 5f 74 79 70 65 3d 6a 73 2d 73 6e 69 70 70 65 74 26 49 64 65 6d 70 6f 74 65 6e 63 79 2d 4b 65 79 3d 66 65 64 35 36 34 32 65 61 34 64 63 64 33 62 39 26 69 6e 74 65 72 6e 61 6c 3d 26 69 73 5f 69 6e 74 65 72 73 65 63 74 69 6f 6e 5f 62 6f 6f 74 65 64 3d 6e 75 6c 6c 26 70 61 67 65 5f 74 69 74 6c 65 3d 42 75 79 25 32 30 42 69 74 63 6f 69 6e 25 32 30 77 69 74 68 25 32 30 43 72 65 Data Ascii: app_id=q22gd2x3&v=3&g=fe0ffc45869daf54375f61e88d8beb6c56c22dbb&s=8df559c7-544e-4f95-9cd5-f34142c63b1c&r=&platform=web&installation_type=js-snippet&Idempotency-Key=fed5642ea4dcd3b9&internal=&is_intersection_booted=null&page_title=Buy%20Bitcoin%20with%20Cre
2024-03-29 13:45:30 UTC	812	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 13:45:30 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Status: 200 OK Cache-Control: no-cache Access-Control-Allow-Origin: https://cex.io Vary: Accept-Encoding Strict-Transport-Security: max-age=31556952; includeSubDomains; preload X-Intercom-Version: 8bc832a955b33325cd32d446b951221240981ec2 X-XSS-Protection: 1; mode=block X-Request-Queueing: 0 X-Request-Id: 000bem3lp4j7bun8ums0 Access-Control-Allow-Headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS X-Runtime: 0.023057 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Server: nginx x-ami-version: ami-03244067f559d9bd4
2024-03-29 13:45:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.16	49894	3.225.23.81	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:30 UTC	364	OUT	GET /messenger/web/metrics HTTP/1.1 Host: api-iam.intercom.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 13:45:30 UTC	4209	IN	HTTP/1.1 406 Not Acceptable Date: Fri, 29 Mar 2024 13:45:30 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 144 Connection: close Status: 406 Not Acceptable Vary: Accept-Encoding Strict-Transport-Security: max-age=31556952; includeSubDomains; preload X-XSS-Protection: 1; mode=block X-Request-Id: 0000pd2fl5b7e9sfqce0 X-Runtime: 0.011797 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; base-uri 'self'; child-src 'self' docs.google.com fast.wistia.net fast.wistia.com js.stripe.com hooks.stripe.com platform.twitter.com player.vimeo.com staticxx.facebook.com www.facebook.com web.facebook.com www.loom.com play.vidyard.com web.microsoftstream.com share.synthesia.io embed.app.guidde.com share.descript.com app.guideflow.com www.youtube.com www.youtube-nocookie.com content.jwplatform.com players.brightcove.net intercom-sheets.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com gtm.intercom-marketing.com intercominc.typeform.com www.intercom-reporting.com insight.adsrvr.org apisandbox.zuora.com zuora.com www.zuora.com .my.connect.aws www.recaptcha.net intercom.help intercom-help.eu au.intercom.help sharepoint.com .sharepoint.com; connect-src 'self' app.intercom.com api-iam.intercom.io api-ping.intercom.io api-visitor-analytics.intercom.com nexus-websocket-a.intercom.io via.intercom.io wss://nexus-websocket-a.intercom.io nexus-europe-websocket.intercom.io wss://nexus-europe-websocket.intercom.io nexus-australia-websocket.intercom.io wss://nexus-australia-websocket.intercom.io uploads.intercomcdn.com uploads.intercomcdn.eu uploads.au.intercomcdn.com static.intercomassets.com app.getsentry.com sentry.io api.stripe.com meet.intercom.com meet.eu.intercom.com meet.au.intercom.com preview.intercom.com www.google-analytics.com stats.g.doubleclick.net www.facebook.com static.intercomassets.eu app.eu.intercom.com api-iam.eu.intercom.io static.au.intercomassets.com api-iam.au.intercom.io api.au.intercom.io .intercom-chat.com wss://.nexus.intercom-chat.com .messenger.intercom-chat.com graph.facebook.com .twilio.com wss://.twilio.com frontend-telemetry.intercom.io frontend-telemetry.eu.intercom.io frontend-telemetry.au.intercom.io user-presence.intercom.com; font-src data: https:; frame-src 'self' docs.google.com fast.wistia.net fast.wistia.com js.stripe.com hooks.stripe.com platform.twitter.com player.vimeo.com staticxx.facebook.com www.facebook.com web.facebook.com www.loom.com play.vidyard.com web.microsoftstream.com share.synthesia.io embed.app.guidde.com share.descript.com app.guideflow.com www.youtube.com www.youtube-nocookie.com content.jwplatform.com players.brightcove.net intercom-sheets.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com gtm.intercom-marketing.com intercominc.typeform.com www.intercom-reporting.com insight.adsrvr.org apisandbox.zuora.com zuora.com www.zuora.com .my.connect.aws www.recaptcha.net intercom.help intercom-help.eu au.intercom.help sharepoint.com *.sharepoint.com; img-src data: blob: https:; media-src data: blob: https:; object-src 'none'; script-src 'self' js.intercomcdn.com static.intercomassets.com store.intercomassets.com billing-admin.intercomassets.com billing-internal.intercomcdn.com developer-home.intercomassets.com store.intercom.io widget.intercom.io api.tiles.mapbox.com connect.facebook.net js.stripe.com platform.twitter.com switchet.s3.amazonaws.com www.google-analytics.com munchkin.marketo.net app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com dp3rct5vic41c.cloudfront.net static.intercomassets.eu static.au.intercomassets.com static.zuora.com p.trellocdn.com www.recaptcha.net; style-src 'self' 'unsafe-inline' static.intercomassets.com billing-internal.intercomcdn.com developer-home.intercomassets.com static.intercomcdn.com marketing.intercomassets.com api.tiles.mapbox.com fonts.googleapis.com maxcdn.bootstrapcdn.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com fonts.intercomcdn.com static.intercomassets.eu static.au.intercomassets.com; report-uri https://app.getsentry.com/api/66205/csp-report/?sentry_key=0d13edc0ffce4b02bd7bc48d0b497300 Server: nginx
2024-03-29 13:45:30 UTC	144	IN	Data Raw: 7b 22 65 72 72 6f 72 73 22 3a 5b 7b 22 63 6f 64 65 22 3a 22 6d 65 64 69 61 5f 74 79 70 65 5f 6e 6f 74 5f 61 63 63 65 70 74 61 62 6c 65 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 54 68 65 20 41 63 63 65 70 74 20 68 65 61 64 65 72 20 73 68 6f 75 6c 64 20 73 65 6e 64 20 61 20 6d 65 64 69 61 20 74 79 70 65 20 6f 66 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 7d 5d 2c 22 74 79 70 65 22 3a 22 65 72 72 6f 72 2e 6c 69 73 74 22 7d Data Ascii: {"errors":[{"code":"media_type_not_acceptable","message":"The Accept header should send a media type of application/json"}],"type":"error.list"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.16	49895	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:32 UTC	2821	OUT	GET /ws/ HTTP/1.1 Host: cex.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000 Sec-WebSocket-Key: Yh5C0/mRMj0qVWsp+JKIoA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-29 13:45:32 UTC	1221	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 29 Mar 2024 13:45:32 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 Content-Security-Policy-Report-Only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Set-Cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fws%2F; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS Location: /ws Strict-Transport-Security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04d0a2f0956e6-IAD
2024-03-29 13:45:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.16	49896	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:36 UTC	2821	OUT	GET /ws/ HTTP/1.1 Host: cex.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000 Sec-WebSocket-Key: gMnRkOhVLJ83qEOJEvs0xw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-29 13:45:37 UTC	1221	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 29 Mar 2024 13:45:37 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 Content-Security-Policy-Report-Only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Set-Cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fws%2F; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS Location: /ws Strict-Transport-Security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04d261c8557cd-IAD
2024-03-29 13:45:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.16	49897	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:41 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=bk5L8yGwVrbbZXG&MD=oTsnWUMA HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-03-29 13:45:41 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: 3e7c5dc8-0ff8-4cc0-97f7-9786c10e3904 MS-RequestId: 337871ce-a21b-4e44-bc98-d100091f30ad MS-CV: G6khxmk50k2DofKj.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 29 Mar 2024 13:45:40 GMT Connection: close Content-Length: 25457
2024-03-29 13:45:41 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-03-29 13:45:41 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.16	49898	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:41 UTC	2821	OUT	GET /ws/ HTTP/1.1 Host: cex.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000 Sec-WebSocket-Key: C1Aqh/0hXLMIGOLZERNWMQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-29 13:45:42 UTC	1221	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 29 Mar 2024 13:45:42 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 Content-Security-Policy-Report-Only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Set-Cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fws%2F; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS Location: /ws Strict-Transport-Security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04d43dff281bd-IAD
2024-03-29 13:45:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.16	49899	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:47 UTC	2821	OUT	GET /ws/ HTTP/1.1 Host: cex.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000 Sec-WebSocket-Key: eLeSYosoM6TRqSS3ggfVQw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-29 13:45:47 UTC	1221	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 29 Mar 2024 13:45:47 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 Content-Security-Policy-Report-Only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Set-Cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fws%2F; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS Location: /ws Strict-Transport-Security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04d66fb2b824b-IAD
2024-03-29 13:45:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.16	49900	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:50 UTC	2821	OUT	GET /ws/ HTTP/1.1 Host: cex.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000 Sec-WebSocket-Key: NlP9cisLLFTUFaJa8fCDhA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-29 13:45:51 UTC	1221	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 29 Mar 2024 13:45:51 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 Content-Security-Policy-Report-Only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Set-Cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fws%2F; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS Location: /ws Strict-Transport-Security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04d7e3a53204b-IAD
2024-03-29 13:45:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.16	49902	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:45:56 UTC	2821	OUT	GET /ws/ HTTP/1.1 Host: cex.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000 Sec-WebSocket-Key: aCZAkdWrnbB56axmIcibTQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-29 13:45:57 UTC	1221	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 29 Mar 2024 13:45:57 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 Content-Security-Policy-Report-Only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Set-Cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fws%2F; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS Location: /ws Strict-Transport-Security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04da35bf05af9-IAD
2024-03-29 13:45:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.16	49904	34.237.73.95	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:46:01 UTC	674	OUT	GET /pubsub/5-DxZC9UqoJ1EljK_xOC3b99xy4F3BEj9YmFgJHaX3ipfQTWiIVeaimn-kfD1lSniz_d6d82XsjfFmM7bTX0yaSnBGTqiWgRi9CEfu?X-Nexus-New-Client=true&X-Nexus-Version=0.12.12&user_role=visitor HTTP/1.1 Host: nexus-websocket-a.intercom.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: S6xKjq1w+kxl50WaBDR6Dw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.16	49905	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:46:01 UTC	2821	OUT	GET /ws/ HTTP/1.1 Host: cex.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000 Sec-WebSocket-Key: wRzaniQHxvRiV0A+NbS2Rw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-29 13:46:02 UTC	1221	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 29 Mar 2024 13:46:02 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 Content-Security-Policy-Report-Only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Set-Cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fws%2F; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS Location: /ws Strict-Transport-Security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04dc35dc407bb-IAD
2024-03-29 13:46:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.16	49906	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:46:07 UTC	2821	OUT	GET /ws/ HTTP/1.1 Host: cex.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000 Sec-WebSocket-Key: ngZSTe3C+ZxHzZYlt9WR+A== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-29 13:46:08 UTC	1221	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 29 Mar 2024 13:46:08 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 Content-Security-Policy-Report-Only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Set-Cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fws%2F; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS Location: /ws Strict-Transport-Security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04de71f8c3985-IAD
2024-03-29 13:46:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.16	49907	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:46:14 UTC	2821	OUT	GET /ws/ HTTP/1.1 Host: cex.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000 Sec-WebSocket-Key: 6MZ/Zf4D3BqPeK3qvFwwBg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-29 13:46:14 UTC	1221	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 29 Mar 2024 13:46:14 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 Content-Security-Policy-Report-Only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Set-Cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fws%2F; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS Location: /ws Strict-Transport-Security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04e113f8e2419-IAD
2024-03-29 13:46:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.16	49908	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:46:17 UTC	2821	OUT	GET /ws/ HTTP/1.1 Host: cex.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000 Sec-WebSocket-Key: guJwKaxc0s5AAw+2BmGN7g== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-29 13:46:17 UTC	1221	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 29 Mar 2024 13:46:17 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 Content-Security-Policy-Report-Only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Set-Cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fws%2F; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS Location: /ws Strict-Transport-Security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04e244c3e8296-IAD
2024-03-29 13:46:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.16	49910	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:46:24 UTC	2821	OUT	GET /ws/ HTTP/1.1 Host: cex.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000 Sec-WebSocket-Key: PWTx8Q+5WQsP3HAVua7kbw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-29 13:46:24 UTC	1221	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 29 Mar 2024 13:46:24 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 Content-Security-Policy-Report-Only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Set-Cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fws%2F; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS Location: /ws Strict-Transport-Security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04e4cf82907b0-IAD
2024-03-29 13:46:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.16	49911	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:46:27 UTC	2821	OUT	GET /ws/ HTTP/1.1 Host: cex.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000 Sec-WebSocket-Key: Z85Y7YQdVTBlYEism3+KfQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-29 13:46:27 UTC	1221	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 29 Mar 2024 13:46:27 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 Content-Security-Policy-Report-Only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Set-Cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fws%2F; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS Location: /ws Strict-Transport-Security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04e612c875992-IAD
2024-03-29 13:46:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.16	49912	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:46:30 UTC	2821	OUT	GET /ws/ HTTP/1.1 Host: cex.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000 Sec-WebSocket-Key: qkU8zrcLjrFjNyCd45R4uQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-29 13:46:31 UTC	1221	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 29 Mar 2024 13:46:31 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 Content-Security-Policy-Report-Only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Set-Cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fws%2F; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS Location: /ws Strict-Transport-Security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04e76f8ac05de-IAD
2024-03-29 13:46:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.16	49913	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:46:37 UTC	2821	OUT	GET /ws/ HTTP/1.1 Host: cex.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000 Sec-WebSocket-Key: X0PzfHX/kA4lL+z71PIQng== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-29 13:46:37 UTC	1221	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 29 Mar 2024 13:46:37 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 Content-Security-Policy-Report-Only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Set-Cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fws%2F; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS Location: /ws Strict-Transport-Security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04e9f7fb22d1d-IAD
2024-03-29 13:46:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.16	49914	34.237.73.95	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:46:40 UTC	674	OUT	GET /pubsub/5-DxZC9UqoJ1EljK_xOC3b99xy4F3BEj9YmFgJHaX3ipfQTWiIVeaimn-kfD1lSniz_d6d82XsjfFmM7bTX0yaSnBGTqiWgRi9CEfu?X-Nexus-New-Client=true&X-Nexus-Version=0.12.12&user_role=visitor HTTP/1.1 Host: nexus-websocket-a.intercom.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: mHs9bzME/VOMvv2SxnTDTQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.16	49915	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:46:42 UTC	2821	OUT	GET /ws/ HTTP/1.1 Host: cex.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000 Sec-WebSocket-Key: YQojfAbZ2syqMpdSqo25UA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-29 13:46:42 UTC	1221	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 29 Mar 2024 13:46:42 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 Content-Security-Policy-Report-Only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Set-Cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fws%2F; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS Location: /ws Strict-Transport-Security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04ebecd353970-IAD
2024-03-29 13:46:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.16	49916	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:46:47 UTC	2821	OUT	GET /ws/ HTTP/1.1 Host: cex.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000 Sec-WebSocket-Key: Ng/OetLrSOPuIBJNAsLDCg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-29 13:46:47 UTC	1221	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 29 Mar 2024 13:46:47 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 Content-Security-Policy-Report-Only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Set-Cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fws%2F; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS Location: /ws Strict-Transport-Security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04edf499807b6-IAD
2024-03-29 13:46:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.16	49917	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:46:51 UTC	2821	OUT	GET /ws/ HTTP/1.1 Host: cex.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000 Sec-WebSocket-Key: 6sSp2ms+7wytr2dNyTVUdA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-29 13:46:51 UTC	1221	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 29 Mar 2024 13:46:51 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 Content-Security-Policy-Report-Only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Set-Cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fws%2F; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS Location: /ws Strict-Transport-Security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04ef5ebc98244-IAD
2024-03-29 13:46:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.16	49918	104.20.0.37	443	5632	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 13:46:53 UTC	2821	OUT	GET /ws/ HTTP/1.1 Host: cex.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cex.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: initialTrafficSource={"utmcsr":"(direct)","utmcmd":"(none)","utmccn":"(not set)"}; __utmzzses=1; auth_rudder_landing_page=cex.io/buy-bitcoins; cex-session=s%3ADy6rzhHosDBOxg4auZuMEL7Y.B%2BLfqxmsLSgOdi8jivtPkm%2B8yqREate6CGCSWHR63As; ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fsingle-bundle-widget-get-config%3FforPage%3D%2Fbuy-bitcoins%26originator%3Dcex%26widgetSymbols%3DBTC%26widgetPairsForSymbols%3DUSD%2CEUR%2CGBP%2CRUB; cookieyes-consent=consentid:NTNoMkJzYVdhOEsyM1pIcGdoaEFSSVR4eFBldmxIVGE,consent:yes,action:no,necessary:yes,functional:yes,analytics:yes,advertisement:yes; _scid=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; _scid_r=c1fcb1f6-bf2f-4339-8b69-2da26763a2e8; rl_user_id=RudderEncrypt%3AU2FsdGVkX19aY1j2eGrJ0UzFHMm2a7zzNgT7UJHScM8%3D; rl_trait=RudderEncrypt%3AU2FsdGVkX1%2B4impFVhjqaC8UF90o%2FW6AjviM2RNppzo%3D; rl_group_id=RudderEncrypt%3AU2FsdGVkX18e0X8XwdtJ6lx7vKopADPrMi32dKlSl4E%3D; rl_group_trait=RudderEncrypt%3AU2FsdGVkX18XZ5tsSmSt0l3XpyZPURKksETAoZENf2Y%3D; rl_anonymous_id=RudderEncrypt%3AU2FsdGVkX1%2BHVJmw0sqZTt87ElEVZHxtiHjAbBxaEZ3ipnG52J1cIpLHRDdOwli1k78mKuRyVOV4USUnaq1qdA%3D%3D; rl_page_init_referrer=RudderEncrypt%3AU2FsdGVkX19KYRT1H0nhlkPGV6pHatHVZAdhvnmP8xM%3D; rl_page_init_referring_domain=RudderEncrypt%3AU2FsdGVkX1%2BF0lcobvuyHN%2FtjDbo7yQuZhLmoPgRuaw%3D; _ga_QF933RX2RP=GS1.1.1711719898.1.0.1711719898.60.0.0; _ga=GA1.1.820382369.1711719899; _gcl_au=1.1.1182918140.1711719899; _rdt_uuid=1711719899066.586ad4c0-3fa0-43ef-b6b6-cef72ecf199f; _hjSessionUser_1666385=eyJpZCI6ImZjZWY4NDhlLTY1ZTYtNWRjZC05ZjM5LTI4NGE5Zjc2YjVjYSIsImNyZWF0ZWQiOjE3MTE3MTk4OTkxNjAsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1666385=eyJpZCI6IjUyYmZlZDkxLTMyOTctNDVhYy1iN2Y4LTM4ZmIxMjMwNDViZCIsImMiOjE3MTE3MTk4OTkxNjEsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _hjHasCachedUserAttributes=true; rl_session=RudderEncrypt%3AU2FsdGVkX18jOWJCIeGZ2xhfbkxhvJZyE9H7sGLfNmyyntxuibbj50r2DnKQ%2FRWc6MwUCxguItE3azvxZCUFi7Z7IqEgneCxdrlnKOsaUKJssg78uh0Dv5llu3OPUCaCAycWlLhuCsZSffs5dIW0Ng%3D%3D; intercom-id-q22gd2x3=5419350e-1956-4da1-ac16-cfbeefcdc256; intercom-session-q22gd2x3=; intercom-device-id-q22gd2x3=9744dca7-db63-4a10-adab-9cb47d9cd71c; __adroll_fpc=9c2a3d2e2673c4382dbf8e1b819a358e-1711719900103; __ar_v4=%7C7UKK4UJQK5H4LI4OCBFPWX%3A20240328%3A1%7CXKCKCYA7EZE6PKEKRI2LRJ%3A20240328%3A1; _sctr=1%7C1711666800000 Sec-WebSocket-Key: kmZ/wzJ3G04sF9jzMaVprA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-29 13:46:54 UTC	1221	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 29 Mar 2024 13:46:54 GMT Transfer-Encoding: chunked Connection: close x-app-version: master.98b41cca.74c03b37f5b923ac0ab067d83ea9852760a8df7d02496827c9d49664a8cfb588 Content-Security-Policy-Report-Only: default-src 'self';connect-src 'self' https://maps.googleapis.com https://cex.io wss://cex.io/ws/;frame-src 'self' * ext.cex.io;font-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.cex.io;img-src 'self' data: https://static.cex.io;media-src 'self' https://static.cex.io;style-src 'self' 'unsafe-inline' https://.googleapis.com https://code.jquery.com https://static.cex.io;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cex.io;report-uri https://cex.io/cspr; X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Set-Cookie: ref=Direct%3Astaticcexio.prodgnr.kube%3A%2Fws%2F; Max-Age=31536000; Domain=.cex.io; Path=/; HttpOnly; Secure Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS Location: /ws Strict-Transport-Security: max-age=0; includeSubDomains CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86c04f070b803aee-IAD
2024-03-29 13:46:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	14:44:50
Start date:	29/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://cex.io/buy-bitcoins
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	14:44:50
Start date:	29/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1880,i,98147228044675047,16913516860262030291,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://cex.io/buy-bitcoins

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Windows Analysis Report
https://cex.io/buy-bitcoins