Edit tour

Windows Analysis Report
http://fr0qzh.ncjfhzfdhcxvxcz.com

Overview

General Information

Sample URL:	http://fr0qzh.ncjfhzfdhcxvxcz.com
Analysis ID:	1426776
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5232 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1352 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 --field-trial-handle=2228,i,14099771991237491365,1493214966627256411,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6408 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://fr0qzh.ncjfhzfdhcxvxcz.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://www.nurse-jobs-in-us-19058.com/?backfill=0&lrt=1&KW1=Nurse+Jobs+In+US+Salary&KW2=Rn+Nurse&KW3=Highest+Paying+Travel+Nursing+Jobs&KW4=Nursing+Jobs+Atlanta&KW5=Work+Nurse+In+US&KW6=Nursing+Jobs+US&domainname=0&searchbox=0&subid1=f267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8&track_id=f267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8&kcoptimize=1&theme=DoriPlus&vertical=Jobs+%26+Education&offer=Nurse+Jobs+in+US+PR	HTTP Parser: No favicon
Source: https://www.google.com/sorry/index?continue=https://www.adsensecustomsearchads.com/afs/ads%3Fadtest%3Doff%26psid%3D9614410000%26pcsa%3Dfalse%26channel%3D000002%252C000004%252Cbucket077%26client%3Ddp-teaminternet08_3ph%26r%3Dm%26hl%3Den%26rpbu%3Dhttps%253A%252F%252Fwww.nurse-jobs-in-us-19058.com%252F%253Fts%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%26terms%3DNurse%2520Jobs%2520In%2520US%2520Salary%252CRn%2520Nurse%252CHighest%2520Paying%2520Travel%2520Nursing%2520Jobs%252CN...	HTTP Parser: No favicon
Source: https://www.google.com/sorry/index?continue=https://www.adsensecustomsearchads.com/afs/ads%3Fadtest%3Doff%26psid%3D9614410000%26pcsa%3Dfalse%26channel%3D000002%252C000004%252Cbucket077%26client%3Ddp-teaminternet08_3ph%26r%3Dm%26hl%3Den%26rpbu%3Dhttps%253A%252F%252Fwww.nurse-jobs-in-us-19058.com%252F%253Fts%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%26terms%3DNurse%2520Jobs%2520In%2520US%2520Salary%252CRn%2520Nurse%252CHighest%2520Paying%2520Travel%2520Nursing%2520Jobs%252CN...	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&s=pu_3HDiEyM9TCcxupFbFCoi_K-yaLzWD2BeE7tP97G-lOlfLQaxX054vMbvAfYJgw-JY5UiIFMvK5FMCLgfceoJGpfHl_e7v4LQh8Ff1IpUxVNe1bfeYdHdTRNYu43d2JlAs4Rzhgc-MHhz904JxiG3ijIaTYKkL2COkyeYiXcu6lIMgJ7CagObp5yZpbevMLgGyKy3-Pfyy5RdxJI5PSz3cK5wU5Vni3CA9g0AMOB-v82Om0tBfSzFZixpxaksII6PfUCUBsTTA0x9OEZBlQYFhyl7HR6I&cb=ouhijxfz7tdw	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49749 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.204.68
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.204.68
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /?backfill=0&lrt=1&KW1=Nurse+Jobs+In+US+Salary&KW2=Rn+Nurse&KW3=Highest+Paying+Travel+Nursing+Jobs&KW4=Nursing+Jobs+Atlanta&KW5=Work+Nurse+In+US&KW6=Nursing+Jobs+US&domainname=0&searchbox=0&subid1=f267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8&track_id=f267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8&kcoptimize=1&theme=DoriPlus&vertical=Jobs+%26+Education&offer=Nurse+Jobs+in+US+PR HTTP/1.1Host: www.nurse-jobs-in-us-19058.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/doriplus_40a0ff4d/img/arrows.png HTTP/1.1Host: d1t9jheyiyj1h6.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nurse-jobs-in-us-19058.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=nurse-jobs-in-us-19058.com&toggle=browserjs&uid=MTcxMzI3NjA4Mi4xOTM4OjNmNjcyNmE2NTk3ZjdmNjgwZjJkYTkxNDI2ZTQ1YjZhZTBkY2YyMDY1OGU1MjExY2NhYjY2NDkzZTM5YzNjNWM6NjYxZTg0YjIyZjUwNA%3D%3D HTTP/1.1Host: www.nurse-jobs-in-us-19058.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"device-memory: 8rtt: 200sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36viewport-width: 1280dpr: 1downlink: 1.55ect: 4gsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nurse-jobs-in-us-19058.com/?backfill=0&lrt=1&KW1=Nurse+Jobs+In+US+Salary&KW2=Rn+Nurse&KW3=Highest+Paying+Travel+Nursing+Jobs&KW4=Nursing+Jobs+Atlanta&KW5=Work+Nurse+In+US&KW6=Nursing+Jobs+US&domainname=0&searchbox=0&subid1=f267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8&track_id=f267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8&kcoptimize=1&theme=DoriPlus&vertical=Jobs+%26+Education&offer=Nurse+Jobs+in+US+PRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nurse-jobs-in-us-19058.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/doriplus_40a0ff4d/img/arrows.png HTTP/1.1Host: d1t9jheyiyj1h6.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ls.php?t=661e84b2&token=919606b8901427ba59aa0a659a23183739e6c9f8 HTTP/1.1Host: www.nurse-jobs-in-us-19058.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"device-memory: 8rtt: 200sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36viewport-width: 1280dpr: 1downlink: 1.55ect: 4gsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nurse-jobs-in-us-19058.com/?backfill=0&lrt=1&KW1=Nurse+Jobs+In+US+Salary&KW2=Rn+Nurse&KW3=Highest+Paying+Travel+Nursing+Jobs&KW4=Nursing+Jobs+Atlanta&KW5=Work+Nurse+In+US&KW6=Nursing+Jobs+US&domainname=0&searchbox=0&subid1=f267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8&track_id=f267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8&kcoptimize=1&theme=DoriPlus&vertical=Jobs+%26+Education&offer=Nurse+Jobs+in+US+PRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=nurse-jobs-in-us-19058.com&toggle=browserjs&uid=MTcxMzI3NjA4Mi4xOTM4OjNmNjcyNmE2NTk3ZjdmNjgwZjJkYTkxNDI2ZTQ1YjZhZTBkY2YyMDY1OGU1MjExY2NhYjY2NDkzZTM5YzNjNWM6NjYxZTg0YjIyZjUwNA%3D%3D HTTP/1.1Host: www.nurse-jobs-in-us-19058.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=9614410000&pcsa=false&channel=000002%2C000004%2Cbucket077&client=dp-teaminternet08_3ph&r=m&hl=en&rpbu=https%3A%2F%2Fwww.nurse-jobs-in-us-19058.com%2F%3Fts%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&terms=Nurse%20Jobs%20In%20US%20Salary%2CRn%20Nurse%2CHighest%20Paying%20Travel%20Nursing%20Jobs%2CNursing%20Jobs%20Atlanta%2CWork%20Nurse%20In%20US%2CNursing%20Jobs%20US&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2351657781676576&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301444%2C17301450%2C17301465%2C17301266&client_gdprApplies=0&format=r6%7Cs&nocache=2971713276083896&num=0&output=afd_ads&domain_name=www.nurse-jobs-in-us-19058.com&v=3&bsl=8&pac=0&u_his=1&u_tz=120&dt=1713276083898&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=754&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=623135625&rurl=https%3A%2F%2Fwww.nurse-jobs-in-us-19058.com%2F%3Fbackfill%3D0%26lrt%3D1%26KW1%3DNurse%2BJobs%2BIn%2BUS%2BSalary%26KW2%3DRn%2BNurse%26KW3%3DHighest%2BPaying%2BTravel%2BNursing%2BJobs%26KW4%3DNursing%2BJobs%2BAtlanta%26KW5%3DWork%2BNurse%2BIn%2BUS%26KW6%3DNursing%2BJobs%2BUS%26domainname%3D0%26searchbox%3D0%26subid1%3Df267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8%26track_id%3Df267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8%26kcoptimize%3D1%26theme%3DDoriPlus%26vertical%3DJobs%2B%2526%2BEducation%26offer%3DNurse%2BJobs%2Bin%2BUS%2BPR HTTP/1.1Host: www.adsensecustomsearchads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.nurse-jobs-in-us-19058.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sorry/index?continue=https://www.adsensecustomsearchads.com/afs/ads%3Fadtest%3Doff%26psid%3D9614410000%26pcsa%3Dfalse%26channel%3D000002%252C000004%252Cbucket077%26client%3Ddp-teaminternet08_3ph%26r%3Dm%26hl%3Den%26rpbu%3Dhttps%253A%252F%252Fwww.nurse-jobs-in-us-19058.com%252F%253Fts%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%26terms%3DNurse%2520Jobs%2520In%2520US%2520Salary%252CRn%2520Nurse%252CHighest%2520Paying%2520Travel%2520Nursing%2520Jobs%252CNursing%2520Jobs%2520Atlanta%252CWork%2520Nurse%2520In%2520US%252CNursing%2520Jobs%2520US%26max_radlink_len%3D40%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-2351657781676576%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%252C17300003%252C17301437%252C17301439%252C17301442%252C17301444%252C17301450%252C17301465%252C17301266%26client_gdprApplies%3D0%26format%3Dr6%257Cs%26nocache%3D2971713276083896%26num%3D0%26output%3Dafd_ads%26domain_name%3Dwww.nurse-jobs-in-us-19058.com%26v%3D3%26bsl%3D8%26pac%3D0%26u_his%3D1%26u_tz%3D120%26dt%3D1713276083898%26u_w%3D1280%26u_h%3D1024%26biw%3D1280%26bih%3D907%26psw%3D1280%26psh%3D754%26frm%3D0%26uio%3D--%26cont%3Dtc%26drt%3D0%26jsid%3Dcaf%26nfp%3D1%26jsv%3D623135625%26rurl%3Dhttps%253A%252F%252Fwww.nurse-jobs-in-us-19058.com%252F%253Fbackfill%253D0%2526lrt%253D1%2526KW1%253DNurse%252BJobs%252BIn%252BUS%252BSalary%2526KW2%253DRn%252BNurse%2526KW3%253DHighest%252BPaying%252BTravel%252BNursing%252BJobs%2526KW4%253DNursing%252BJobs%252BAtlanta%2526KW5%253DWork%252BNurse%252BIn%252BUS%2526KW6%253DNursing%252BJobs%252BUS%2526domainname%253D0%2526searchbox%253D0%2526subid1%253Df267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8%2526track_id%253Df267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8%2526kcoptimize%253D1%2526theme%253DDoriPlus%2526vertical%253DJobs%252B%252526%252BEducation%2526offer%253DNurse%252BJobs%252Bin%252BUS%252BPR&hl=en&q=EgRRtTk0GLWJ-rAGIjDaGBoxEH2Ax5Av90Fv-fzT-D7tnLqg2aFIPN4Fu4kjQkBZ5hs3U4uumsui1VkfXHIyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chro
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/sorry/index?continue=https://www.adsensecustomsearchads.com/afs/ads%3Fadtest%3Doff%26psid%3D9614410000%26pcsa%3Dfalse%26channel%3D000002%252C000004%252Cbucket077%26client%3Ddp-teaminternet08_3ph%26r%3Dm%26hl%3Den%26rpbu%3Dhttps%253A%252F%252Fwww.nurse-jobs-in-us-19058.com%252F%253Fts%253DfERvcmlQbHVzfHxlODY4N3xidWNrZXQwNzd8fHx8fHw2NjFlODRiMjJmNGM1fHx8MTcxMzI3NjA4Mi4yMTU4fGZmNjExYTJkZjlhZjhhOTI3YzYxNjVhMzA3MjAzMDlmMjFhNDIzOTR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDB8ZXlKemRXSnBaREVpT2lKbU1qWTNZVEZtTVRNME1qSm1NRGN6TVdJeU1tVTVOVGcxTUdRNE5HSXhObVZoWkRCaE9XVXdPVGMzWkRrek5XTTVNalpqTkdVMk1tVmlaR1U0TkdRNElpd2lkSEpoWTJ0ZmFXUWlPaUptTWpZM1lURm1NVE0wTWpKbU1EY3pNV0l5TW1VNU5UZzFNR1E0TkdJeE5tVmhaREJoT1dVd09UYzNaRGt6TldNNU1qWmpOR1UyTW1WaVpHVTROR1E0SW4wPXw5MTk2MDZiODkwMTQyN2JhNTlhYTBhNjU5YTIzMTgzNzM5ZTZjOWY4fDB8ZHAtdGVhbWludGVybmV0MDhfM3BofDF8MHx8%26terms%3DNurse%2520Jobs%2520In%2520US%2520Salary%252CRn%2520Nurse%252CHighest%2520Paying%2520Travel%2520Nursing%2520Jobs%252CNursing%2520Jobs%2520Atlanta%252CWork%2520Nurse%2520In%2520US%252CNursing%2520Jobs%2520US%26max_radlink_len%3D40%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-2351657781676576%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%252C17300003%252C17301437%252C17301439%252C17301442%252C17301444%252C17301450%252C17301465%252C17301266%26client_gdprApplies%3D0%26format%3Dr6%257Cs%26nocache%3D2971713276083896%26num%3D0%26output%3Dafd_ads%26domain_name%3Dwww.nurse-jobs-in-us-19058.com%26v%3D3%26bsl%3D8%26pac%3D0%26u_his%3D1%26u_tz%3D120%26dt%3D1713276083898%26u_w%3D1280%26u_h%3D1024%26biw%3D1280%26bih%3D907%26psw%3D1280%26psh%3D754%26frm%3D0%26uio%3D--%26cont%3Dtc%26drt%3D0%26jsid%3Dcaf%26nfp%3D1%26jsv%3D623135625%26rurl%3Dhttps%253A%252F%252Fwww.nurse-jobs-in-us-19058.com%252F%253Fbackfill%253D0%2526lrt%253D1%2526KW1%253DNurse%252BJobs%252BIn%252BUS%252BSalary%2526KW2%253DRn%252BNurse%2526KW3%253DHighest%252BPaying%252BTravel%252BNursing%252BJobs%2526KW4%253DNursing%252BJobs%252BAtlanta%2526KW5%253DWork%252BNurse%252BIn%252BUS%2526KW6%253DNursing%252BJobs%252BUS%2526domainname%253D0%2526searchbox%253D0%2526subid1%253Df267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8%2526track_id%253Df267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8%2526kcoptimize%253D1%2526theme%253DDoriPlus%2526vertical%253DJobs%252B%252526%252BEducation%2526offer%253DNurse%252BJobs%252Bin%252BUS%252BPR&hl=en&q=EgRRtTk0GLWJ-rAGIjDaGBoxEH2Ax5Av90Fv-
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&s=pu_3HDiEyM9TCcxupFbFCoi_K-yaLzWD2BeE7tP97G-lOlfLQaxX054vMbvAfYJgw-JY5UiIFMvK5FMCLgfceoJGpfHl_e7v4LQh8Ff1IpUxVNe1bfeYdHdTRNYu43d2JlAs4Rzhgc-MHhz904JxiG3ijIaTYKkL2COkyeYiXcu6lIMgJ7CagObp5yZpbevMLgGyKy3-Pfyy5RdxJI5PSz3cK5wU5Vni3CA9g0AMOB-v82Om0tBfSzFZixpxaksII6PfUCUBsTTA0x9OEZBlQYFhyl7HR6I&cb=ouhijxfz7tdw HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.google.com/sorry/index?continue=https://www.adsensecustomsearchads.com/afs/ads%3Fadtest%3Doff%26psid%3D9614410000%26pcsa%3Dfalse%26channel%3D000002%252C000004%252Cbucket077%26client%3Ddp-teaminternet08_3ph%26r%3Dm%26hl%3Den%26rpbu%3Dhttps%253A%252F%252Fwww.nurse-jobs-in-us-19058.com%252F%253Fts%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%26terms%3DNurse%2520Jobs%2520In%2520US%2520Salary%252CRn%2520Nurse%252CHighest%2520Paying%2520Travel%2520Nursing%2520Jobs%252CNursing%2520Jobs%2520Atlanta%252CWork%2520Nurse%2520In%2520US%252CNursing%2520Jobs%2520US%26max_radlink_len%3D40%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-2351657781676576%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%252C17300003%252C17301437%252C17301439%252C17301442%252C17301444%252C17301450%252C17301465%252C17301266%26client_gdprApplies%3D0%26format%3Dr6%257Cs%26nocache%3D2971713276083896%26num%3D0%26output%3Dafd_ads%26domain_name%3Dwww.nurse-jobs-in-us-19058.com%26v%3D3%26bsl%3D8%26pac%3D0%26u_his%3D1%26u_tz%3D120%26dt%3D1713276083898%26u_w%3D1280%26u_h%3D1024%26biw%3D1280%26bih%3D907%26psw%3D1280%26psh%3D754%26frm%3D0%26uio%3D--%26cont%3Dtc%26drt%3D0%26jsid%3Dcaf%26nfp%3D1%26jsv%3D623135625%26rurl%3Dhttps%253A%252F%252Fwww.nurse-jobs-in-us-19058.com%252F%253Fbackfill%253D0%2526lrt%253D1%2526KW1%253DNurse%252BJobs%252BIn%252BUS%
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm- HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&s=pu_3HDiEyM9TCcxupFbFCoi_K-yaLzWD2BeE7tP97G-lOlfLQaxX054vMbvAfYJgw-JY5UiIFMvK5FMCLgfceoJGpfHl_e7v4LQh8Ff1IpUxVNe1bfeYdHdTRNYu43d2JlAs4Rzhgc-MHhz904JxiG3ijIaTYKkL2COkyeYiXcu6lIMgJ7CagObp5yZpbevMLgGyKy3-Pfyy5RdxJI5PSz3cK5wU5Vni3CA9g0AMOB-v82Om0tBfSzFZixpxaksII6PfUCUBsTTA0x9OEZBlQYFhyl7HR6I&cb=ouhijxfz7tdwAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/KTA1qoE7ZDz05UuzGBms7CVmuC34sZ4nnXwNjg065Po.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&s=pu_3HDiEyM9TCcxupFbFCoi_K-yaLzWD2BeE7tP97G-lOlfLQaxX054vMbvAfYJgw-JY5UiIFMvK5FMCLgfceoJGpfHl_e7v4LQh8Ff1IpUxVNe1bfeYdHdTRNYu43d2JlAs4Rzhgc-MHhz904JxiG3ijIaTYKkL2COkyeYiXcu6lIMgJ7CagObp5yZpbevMLgGyKy3-Pfyy5RdxJI5PSz3cK5wU5Vni3CA9g0AMOB-v82Om0tBfSzFZixpxaksII6PfUCUBsTTA0x9OEZBlQYFhyl7HR6I&cb=ouhijxfz7tdwAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.nurse-jobs-in-us-19058.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"device-memory: 8rtt: 200sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36viewport-width: 1280dpr: 1downlink: 1.55ect: 4gsec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nurse-jobs-in-us-19058.com/?backfill=0&lrt=1&KW1=Nurse+Jobs+In+US+Salary&KW2=Rn+Nurse&KW3=Highest+Paying+Travel+Nursing+Jobs&KW4=Nursing+Jobs+Atlanta&KW5=Work+Nurse+In+US&KW6=Nursing+Jobs+US&domainname=0&searchbox=0&subid1=f267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8&track_id=f267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8&kcoptimize=1&theme=DoriPlus&vertical=Jobs+%26+Education&offer=Nurse+Jobs+in+US+PRAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=0d8188d52b2490d8:T=1713276085:RT=1713276085:S=ALNI_MY_YCGmJHgGj1ClMiXTzAnbgHwuxw
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.google.com/sorry/index?continue=https://www.adsensecustomsearchads.com/afs/ads%3Fadtest%3Doff%26psid%3D9614410000%26pcsa%3Dfalse%26channel%3D000002%252C000004%252Cbucket077%26client%3Ddp-teaminternet08_3ph%26r%3Dm%26hl%3Den%26rpbu%3Dhttps%253A%252F%252Fwww.nurse-jobs-in-us-19058.com%252F%253Fts%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%26terms%3DNurse%2520Jobs%2520In%2520US%2520Salary%252CRn%2520Nurse%252CHighest%2520Paying%2520Travel%2520Nursing%2520Jobs%252CNursing%2520Jobs%2520Atlanta%252CWork%2520Nurse%2520In%2520US%252CNursing%2520Jobs%2520US%26max_radlink_len%3D40%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-2351657781676576%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%252C17300003%252C17301437%252C17301439%252C17301442%252C17301444%252C17301450%252C17301465%252C17301266%26client_gdprApplies%3D0%26format%3Dr6%257Cs%26nocache%3D2971713276083896%26num%3D0%26output%3Dafd_ads%26domain_name%3Dwww.nurse-jobs-in-us-19058.com%26v%3D3%26bsl%3D8%26pac%3D0%26u_his%3D1%26u_tz%3D120%26dt%3D1713276083898%26u_w%3D1280%26u_h%3D1024%26biw%3D1280%26bih%3D907%26psw%3D1280%26psh%3D754%26frm%3D0%26uio%3D--%26cont%3Dtc%26drt%3D0%26jsid%3Dcaf%26nfp%3D1%26jsv%3D623135625%26rurl%3Dhttps%253A%252F%252Fwww.nurse-jobs-in-us-19058.com%252F%253Fbackfill%253D0%2526lrt%253D1%2526KW1%253DNurse%252BJobs%252BIn%252BUS%252BSalary%2526KW2%253DRn%252BNurse%2526KW3%253DHighest%252BPaying%252BTravel%252BNursing%252BJobs%2526KW4%253DNursing%252BJobs%252BAtlanta%2526KW5%253DWork%252BNurse%252BIn%252BUS%2526KW6%253DNursing%252BJobs%252BUS%2526domainname%253D0%2526searchbox%253D0%2526subid1%253Df267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8%2526track_id%253Df267a1f1
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.nurse-jobs-in-us-19058.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=0d8188d52b2490d8:T=1713276085:RT=1713276085:S=ALNI_MY_YCGmJHgGj1ClMiXTzAnbgHwuxw
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: fr0qzh.ncjfhzfdhcxvxcz.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /us HTTP/1.1Host: fr0qzh.ncjfhzfdhcxvxcz.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: unknown

DNS traffic detected: queries for: fr0qzh.ncjfhzfdhcxvxcz.com

Source: chromecache_52.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_52.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_52.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_52.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_52.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_59.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=
Source: chromecache_59.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_59.2.dr	String found in binary or memory: https://partner.googleadservices.com/gampad/cookie.js
Source: chromecache_52.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_52.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_52.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_52.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_52.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_52.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_59.2.dr	String found in binary or memory: https://syndicatedsearch.goog
Source: chromecache_52.2.dr, chromecache_60.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_52.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__.
Source: chromecache_60.2.dr, chromecache_63.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49749 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@19/30@20/10

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 --field-trial-handle=2228,i,14099771991237491365,1493214966627256411,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://fr0qzh.ncjfhzfdhcxvxcz.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 --field-trial-handle=2228,i,14099771991237491365,1493214966627256411,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://fr0qzh.ncjfhzfdhcxvxcz.com	1%	Virustotal		Browse

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
bg.microsoft.map.fastly.net	0%	Virustotal	Browse
syndicatedsearch.goog	0%	Virustotal	Browse
fr0qzh.ncjfhzfdhcxvxcz.com	1%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://syndicatedsearch.goog	0%	URL Reputation	safe
https://recaptcha.net	0%	URL Reputation	safe
https://www.gstatic.c..?/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__.	0%	URL Reputation	safe
http://fr0qzh.ncjfhzfdhcxvxcz.com/	1%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	0%, Virustotal, Browse	unknown
d1t9jheyiyj1h6.cloudfront.net	18.160.37.59	true	false		high
d2hny5gy9445xa.cloudfront.net	18.160.78.67	true	false		high
www3.l.google.com	142.250.105.102	true	false		high
www.nurse-jobs-in-us-19058.com	104.247.82.91	true	false		unknown
syndicatedsearch.goog	142.250.9.101	true	false	0%, Virustotal, Browse	unknown
www.google.com	74.125.138.147	true	false		high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	0%, Virustotal, Browse	unknown
fr0qzh.ncjfhzfdhcxvxcz.com	unknown	unknown	false	1%, Virustotal, Browse	unknown
www.adsensecustomsearchads.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	false		high
about:blank	false		low
https://www.nurse-jobs-in-us-19058.com/?backfill=0&lrt=1&KW1=Nurse+Jobs+In+US+Salary&KW2=Rn+Nurse&KW3=Highest+Paying+Travel+Nursing+Jobs&KW4=Nursing+Jobs+Atlanta&KW5=Work+Nurse+In+US&KW6=Nursing+Jobs+US&domainname=0&searchbox=0&subid1=f267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8&track_id=f267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8&kcoptimize=1&theme=DoriPlus&vertical=Jobs+%26+Education&offer=Nurse+Jobs+in+US+PR	false		unknown
https://www.google.com/js/bg/KTA1qoE7ZDz05UuzGBms7CVmuC34sZ4nnXwNjg065Po.js	false		high
https://d1t9jheyiyj1h6.cloudfront.net/themes/doriplus_40a0ff4d/img/arrows.png	false		high
http://fr0qzh.ncjfhzfdhcxvxcz.com/	false	1%, Virustotal, Browse	unknown
https://www.nurse-jobs-in-us-19058.com/favicon.ico	false		unknown
https://www.google.com/recaptcha/api.js	false		high
https://www.nurse-jobs-in-us-19058.com/ls.php?t=661e84b2&token=919606b8901427ba59aa0a659a23183739e6c9f8	false		unknown
https://www.google.com/adsense/domains/caf.js?abp=1	false		high
http://fr0qzh.ncjfhzfdhcxvxcz.com/us	false		unknown
https://www.nurse-jobs-in-us-19058.com/track.php?domain=nurse-jobs-in-us-19058.com&toggle=browserjs&uid=MTcxMzI3NjA4Mi4xOTM4OjNmNjcyNmE2NTk3ZjdmNjgwZjJkYTkxNDI2ZTQ1YjZhZTBkY2YyMDY1OGU1MjExY2NhYjY2NDkzZTM5YzNjNWM6NjYxZTg0YjIyZjUwNA%3D%3D	false		unknown
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_52.2.dr	false		high
https://syndicatedsearch.goog	chromecache_59.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha#6262736	chromecache_52.2.dr	false		high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_52.2.dr	false		high
https://recaptcha.net	chromecache_52.2.dr	false	URL Reputation: safe	unknown
https://www.gstatic.c..?/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__.	chromecache_52.2.dr	false	URL Reputation: safe	low
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_52.2.dr	false		high
https://cloud.google.com/contact	chromecache_52.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_52.2.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_52.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_52.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_52.2.dr	false		high
https://www.google.com/recaptcha/api2/	chromecache_52.2.dr, chromecache_60.2.dr	false		high
https://support.google.com/recaptcha	chromecache_52.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
74.125.138.147	www.google.com	United States	15169	GOOGLEUS	false
18.160.37.59	d1t9jheyiyj1h6.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
142.250.9.106	unknown	United States	15169	GOOGLEUS	false
142.250.105.102	www3.l.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.9.101	syndicatedsearch.goog	United States	15169	GOOGLEUS	false
18.160.78.67	d2hny5gy9445xa.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
142.250.9.147	unknown	United States	15169	GOOGLEUS	false
104.247.82.91	www.nurse-jobs-in-us-19058.com	Canada	206834	TEAMINTERNET-CA-ASCA	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1426776
Start date and time:	2024-04-16 16:00:25 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 19s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://fr0qzh.ncjfhzfdhcxvxcz.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@19/30@20/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.15.94, 108.177.122.84, 173.194.219.101, 173.194.219.100, 173.194.219.102, 173.194.219.113, 173.194.219.138, 173.194.219.139, 34.104.35.123, 74.125.136.156, 74.125.136.157, 74.125.136.155, 74.125.136.154, 142.250.105.94, 64.233.185.95, 142.251.15.95, 64.233.177.95, 64.233.176.95, 74.125.138.95, 142.250.105.95, 74.125.136.95, 108.177.122.95, 172.253.124.95, 172.217.215.95, 142.250.9.95, 173.194.219.95, 172.253.124.94, 74.125.136.94, 13.85.23.86, 199.232.210.172, 13.95.31.18, 192.229.211.108, 20.166.126.56
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, slscr.update.microsoft.com, partner.googleadservices.com, clientservices.googleapis.com, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, partner46.googleadservices.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, www.gstatic.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 49

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	11375
Entropy (8bit):	7.645494653990172
Encrypted:	false
SSDEEP:	192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/
MD5:	0CB2E5165DC9324EB462199F04E1FFA9
SHA1:	9E0F89847EC8A98D98A6020BC5C4ED32B7A48BF8
SHA-256:	67DFF0AAD873050F12609885F2264417CCDD0D438311000A704C89F0865F7865
SHA-512:	7A285C4A87B9F9093B7BA720D8FE08E0AD7E2EBDE9EF8C8D11B70AFA08245AF8F8A7281C7B3FBE8BAD21C3AFDE4F32634D3BD416822892AA47BA82C12F4B8191
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......X.....Om......tEXtSoftware.Adobe ImageReadyq.e<....PLTE......cdtIK^IK]IK\03IHK_acsceubdtcet..0=@SHK]IL]HK\MPbNQbORc.....0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes..-..0. 5.!6."7.#8."6.$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.....-../.....0../.....0../..1..1..2..3..4. 5.!6.#8.$9.%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.....0.!5."6.#7.$8.%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs..-.....0..1. 4.!5."6.#7.$8 '< ';*0B.4F06H06G..-..0.!5 (< (;...................................................................................................................................................................................................................................................t....tRNS..............................................................................................................................................

Chrome Cache Entry: 50

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (406), with no line terminators
Category:	downloaded
Size (bytes):	406
Entropy (8bit):	5.523668266574284
Encrypted:	false
SSDEEP:	12:xWx3bQtZYbtmRGiXZHd7Hw/QtZYbtmhSB4DXZHd7n:GGVVdzw/GNDVd7n
MD5:	4FD5761D4F4254089ADEAEF6CBF8AEF0
SHA1:	43DEC1D6F3ED0550D9A92DF75390E32B8D55A252
SHA-256:	4E16F603FA287D1A33A3047BAFCB481934424102AFD42BB72D057C22F928809A
SHA-512:	B32DEFE706E8E888E21E4564AF62D0001B47BA854C436531C7C92B6206E287CA5C48640A4A0328B328BB30E92BF551246B7AD4D735FAEEFC1754BA8A961C5AC2
Malicious:	false
Reputation:	low
URL:	https://partner.googleadservices.com/gampad/cookie.js?domain=www.nurse-jobs-in-us-19058.com&client=dp-teaminternet08_3ph&product=SAS&callback=__sasCookie
Preview:	__sasCookie({"_cookies_":[{"_value_":"ID=0d8188d52b2490d8:T=1713276085:RT=1713276085:S=ALNI_MY_YCGmJHgGj1ClMiXTzAnbgHwuxw","_expires_":1746972085,"_path_":"/","_domain_":"nurse-jobs-in-us-19058.com","_version_":1},{"_value_":"UID=00000ddf96215718:T=1713276085:RT=1713276085:S=ALNI_MaWGVv4icoj9hpp2rO8ASrxJWKASw","_expires_":1746972085,"_path_":"/","_domain_":"nurse-jobs-in-us-19058.com","_version_":2}]});

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56398), with no line terminators
Category:	downloaded
Size (bytes):	56398
Entropy (8bit):	5.907604034780877
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyB5lxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0B5chXwW49z2
MD5:	EB4BC511F79F7A1573B45F5775B3A99B
SHA1:	D910FB51AD7316AA54F055079374574698E74B35
SHA-256:	7859A62E04B0ACB06516EB12454DE6673883ECFAEAED6C254659BCA7CD59C050
SHA-512:	EC9BDF1C91B6262B183FD23F640EAC22016D1F42DB631380676ED34B962E01BADDA91F9CBDFA189B42FE3182A992F1B95A7353AF41E41B2D6E1DAB17E87637A0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (554)
Category:	downloaded
Size (bytes):	510578
Entropy (8bit):	5.695280300193632
Encrypted:	false
SSDEEP:	6144:/LJaSgOPDcwWOTEmzYSU9F0Gx95F+SiT1i7uiv5VQgDx212FC:IS4sGx97+SihiSrFIC
MD5:	E9CCB3DBDE79BA5FFDF9CAD4B32D59FD
SHA1:	3A8CD67ADC7C885BDF683F1E7F491E6A4A50679F
SHA-256:	8F2C6777C7CCC01AB67290FA8ACD5A4C4866BE64129F39DFAEB9197DFA15E137
SHA-512:	5CA7C8439030C9B4B966760C660640A094B0D6E30E10DF85D7B900C6F9108B0E309298ED93C006634BB3F437BAB3CFF1B83A5D1B18C666C04346F0856294C461
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0./.var y=function(){return[function(E,X,B,M,c,v,Y,I,h,J,F,a,C,R,P){return E+4>>3==(E-8<<2>=(R=[1,"F",22],E)&&(E+2&12)<E&&(M=u[32](4,B[R[1]]),P=A[16](32,0,X,B[R[1]],M)),R[0])&&(M=void 0===M?null:M,Y=[3,341,278],c=d[46](16,21,X,u[31](32,B)),J=e[48](7,Y[0],X,u[31](35,X),u[31](28,Y[R[0]])),I=g[27](77,15,u[31](29,X),X,u[31](33,438)),v=u[31](38,Y[2]),a=A[32](R[2],l[13](2,d[9](48,36),X),[u[7](24,v),u[31](34,X)]),C=[c,J,I,a],null!=M&&(h=A[8](73),F=A[8](72),C=[W[30](8,h,u[31](28,B),u[31](37,0))].concat(C,[W[30](8,.F,R[0],R[0]),h,e[39](12,M,X),F])),P=C),P}]}(),g=function(){return[function(E,X,B,M,c,v){return 3<=((((E^(v=[7,"W",2],19))&v[0]\|\|(this[v

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	11375
Entropy (8bit):	7.645494653990172
Encrypted:	false
SSDEEP:	192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/
MD5:	0CB2E5165DC9324EB462199F04E1FFA9
SHA1:	9E0F89847EC8A98D98A6020BC5C4ED32B7A48BF8
SHA-256:	67DFF0AAD873050F12609885F2264417CCDD0D438311000A704C89F0865F7865
SHA-512:	7A285C4A87B9F9093B7BA720D8FE08E0AD7E2EBDE9EF8C8D11B70AFA08245AF8F8A7281C7B3FBE8BAD21C3AFDE4F32634D3BD416822892AA47BA82C12F4B8191
Malicious:	false
Reputation:	low
URL:	https://d1t9jheyiyj1h6.cloudfront.net/themes/doriplus_40a0ff4d/img/arrows.png
Preview:	.PNG........IHDR.......X.....Om......tEXtSoftware.Adobe ImageReadyq.e<....PLTE......cdtIK^IK]IK\03IHK_acsceubdtcet..0=@SHK]IL]HK\MPbNQbORc.....0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes..-..0. 5.!6."7.#8."6.$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.....-../.....0../.....0../..1..1..2..3..4. 5.!6.#8.$9.%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.....0.!5."6.#7.$8.%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs..-.....0..1. 4.!5."6.#7.$8 '< ';*0B.4F06H06G..-..0.!5 (< (;...................................................................................................................................................................................................................................................t....tRNS..............................................................................................................................................

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAk8dqZYMe7mkRIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (8970)
Category:	downloaded
Size (bytes):	15506
Entropy (8bit):	5.624583101232542
Encrypted:	false
SSDEEP:	384:TiDSrLHMfZGGRpO6vNB0S2A26EHeDCtkGarTuUIY/piT1SvRjG6:TiDGMf4MlwuEHSCtkGarTuUIY/wT1Sv5
MD5:	F77D5BF74CBE84ECA21F0F57F58401FB
SHA1:	0A8E1C831A1E7E0481EF6C9002753440D4411599
SHA-256:	A95FE87E264A0004B6C15EA38A32F6A9B5587B5305D13BF68864D802B605776B
SHA-512:	818E74D844A301DC1778EE7B342AA7275D412E90A74A9132E6A9AE8CF9FBE1D254F651E792F6CB40A34F3F15A98B27E06DDE7D69D27AC3E9A50BF4CD3B755712
Malicious:	false
Reputation:	low
URL:	https://www.nurse-jobs-in-us-19058.com/?backfill=0&lrt=1&KW1=Nurse+Jobs+In+US+Salary&KW2=Rn+Nurse&KW3=Highest+Paying+Travel+Nursing+Jobs&KW4=Nursing+Jobs+Atlanta&KW5=Work+Nurse+In+US&KW6=Nursing+Jobs+US&domainname=0&searchbox=0&subid1=f267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8&track_id=f267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8&kcoptimize=1&theme=DoriPlus&vertical=Jobs+%26+Education&offer=Nurse+Jobs+in+US+PR
Preview:	<!DOCTYPE html>.<html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_B7jLp9LWlX3r7QfpjH3gpNyj3EPlze2UCK5MUX7pot7VBTnfuTk5K/SPez6cJrihpcGoBJNsZ/3H6exx+c3dgA==" xmlns="http://www.w3.org/1999/xhtml" lang="en">.<head>. <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/>. <title>nurse-jobs-in-us-19058.com</title>. <style media="screen">..asset_star0 {..background: url('//d1t9jheyiyj1h6.cloudfront.net/themes/assets/star0.gif') no-repeat center;..width: 13px;..height: 12px;..display: inline-block;.}...asset_star1 {..background: url('//d1t9jheyiyj1h6.cloudfront.net/themes/assets/star1.gif') no-repeat center;..width: 13px;..height: 12px;..display: inline-block;.}...asset_starH {..background: url('//d1t9jheyiyj1h6.cloudfront.net/themes/assets/starH.gif') no-repeat center;..width: 13

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2247)
Category:	downloaded
Size (bytes):	191034
Entropy (8bit):	5.670148993228833
Encrypted:	false
SSDEEP:	3072:jvMIMJmD5WyQeAqZBX38XqXGUCbTg4uay1SyY2:jvdar4XlXFCbTgRaoSy9
MD5:	2B9B3FB565414D4067F47E903DCEDAE7
SHA1:	FA6C361C4F31A07AA9AAC4CAE9533CF0163FA710
SHA-256:	6755421152A21AA507850023907D54945D380B86751043863031FC8A1B1BE913
SHA-512:	22BEA0CEA7C94C398D9F37C02496B2F2C27EF33C988BD9573CE39A306D2C7F02E74A4F3DFF4456BF62B4CA8399E5837C904AF1968F8FD57115F0322E0FEB671B
Malicious:	false
Reputation:	low
URL:	https://www.google.com/adsense/domains/caf.js?abp=1
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"10734389847372509698",packages:"domains",module:"ads",version:"1",m:{cei:"17300003,17301437,17301439,17301442,17301444,17301450,17301465,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:""}};var m;function da(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ea="function"==type

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1222), with no line terminators
Category:	downloaded
Size (bytes):	1222
Entropy (8bit):	5.812687833352702
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCLTLv138EgFB5vtTGJTlWtB31ngirLOGsLqo40RWUnYN:VKEctKonR3evtTA8/1/OXLrwUnG
MD5:	3F1B1790C083261F6FD3CF02FB56F2F8
SHA1:	BF1B289456E260CF5C5F0AF7C1B0F4E9BA7EB97B
SHA-256:	A58FF2DE4D6A14E055A553E83A4E67AEA6AAF589A57364305EEC36105CCE9EF3
SHA-512:	99D52B4D79A3B36CDAF0640C37FA504518DAF3C23A2FEAAE6A4966633D5407F1941F726741BE59E25A6726698614D202033BC6BD3D34DD2A352789088C54F0DE
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-eZG8e4nRp0gEpRB75JBNzhS0vVseDRBVprGQYHJN

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.476409765557392
Encrypted:	false
SSDEEP:	3:H0hCkuWthHeTn:UUkuqxeT
MD5:	A3144EE887752BC84252FAACD4DFFD83
SHA1:	172430F70BAEDA54BB9F533293E0E80A2DA5835D
SHA-256:	8B87CFF79D0F8142D02D4A5991C83A5D59A7733BCB0EBEDD0DE57E559C6EAEFB
SHA-512:	E366210709098991B8B21140DF48E50CD650E115A30A8A5EEC016B98B077C6DA3FEE972BA219409AD72E85BF575A033E1E9AAC7931B727E4BA15644AAC5349D3
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAm9kdt4mJTv1hIFDVNaR8USEAk8dqZYMe7mkRIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgAKCQoHDVNaR8UaAA==

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17679)
Category:	downloaded
Size (bytes):	18274
Entropy (8bit):	5.641324572550196
Encrypted:	false
SSDEEP:	192:KxwRrAxpw8cV7uhFfUAlCxnBLdIpU1fkucU+lKuoC5O6j8eae50W55TvQF8BbyHw:2s/uhaqGTs7HoCseae50eZ42BbuhK
MD5:	92312DFE3B3C5E1A20BC7E8D8158BD9C
SHA1:	7574B3E0548EEBD164BBEBBF3C44A1842469DEF4
SHA-256:	293035AA813B643CF4E54BB31819ACEC2566B82DF8B19E279D7C0D8E0D3AE4FA
SHA-512:	BB6056A556A98CCC0BDA9DFE52E7A72543970B731A9857D071AFA9A95E53DA7A4AA7C7F29664769502BCD7B3E9967F4B1EF7A68EC472E16BDF9F0284FB9E1A1A
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/KTA1qoE7ZDz05UuzGBms7CVmuC34sZ4nnXwNjg065Po.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var M=function(J){return J},d=this\|\|self,K=function(J,T){if((J=(T=d.trustedTypes,null),!T)\|\|!T.createPolicy)return J;try{J=T.createPolicy("bg",{createHTML:M,createScript:M,createScriptURL:M})}catch(t){d.console&&d.console.error(t.message)}return J};(0,eval)(function(J,T){return(T=K())&&1===J.eval(T.createScript("1"))?function(t){return T.createScript(t)}:function(t){return""+t}}(d)(Array(7824Math.random()\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var JV=function(J,T){return[function(){return J},(T(function(t){t(J)}),function(){})]},P=function(J,T,t){T[X(t,J,T),TA]=2796},tV=function(J,T){return T[J]<<24\|T[(J\|0)+1]<<16\|T[(J\|0)+2]<<8\|T[(J\|0)+3]},Mm=function(J,T){return k[J](k.prototype,{call:T,document:T,prototype:T,console:T,pop:T,length:T,replace:T,floor:T,parent:T,splice:T,stack:T,propertyIsEnumerable:T})},x=function(J,T){if(J.P)return dK(J,J.

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.87377555746297
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKeHZQx66FTEVgWaee:PLKdXNQKOyo6FIVgL
MD5:	701C50FE2F9D8CFCA61542DEE7684552
SHA1:	952A04F81A291E11F5D4ECD7364A3840412BA65E
SHA-256:	9FC5DFC54DE18E9C98733BBEA6EBDCBC1F01C0B23F985556F24684EE96DC0582
SHA-512:	5CA3C342F4BE563EE68235F32BCB8B25B62215A961B903B3568C496FCAD4508B9408FBDE00C6592085A819826630462863630F888FE73348F13FC037A9AB2C99
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js');

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	https://www.nurse-jobs-in-us-19058.com/ls.php?t=661e84b2&token=919606b8901427ba59aa0a659a23183739e6c9f8
Preview:	{"success":true}

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 16, 2024 16:01:12.795336008 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 16, 2024 16:01:20.704894066 CEST	49735	80	192.168.2.4	18.160.78.67
Apr 16, 2024 16:01:20.705219030 CEST	49736	80	192.168.2.4	18.160.78.67
Apr 16, 2024 16:01:20.808913946 CEST	80	49735	18.160.78.67	192.168.2.4
Apr 16, 2024 16:01:20.808948040 CEST	80	49736	18.160.78.67	192.168.2.4
Apr 16, 2024 16:01:20.809077978 CEST	49736	80	192.168.2.4	18.160.78.67
Apr 16, 2024 16:01:20.809089899 CEST	49735	80	192.168.2.4	18.160.78.67
Apr 16, 2024 16:01:20.809340000 CEST	49736	80	192.168.2.4	18.160.78.67
Apr 16, 2024 16:01:20.913211107 CEST	80	49736	18.160.78.67	192.168.2.4
Apr 16, 2024 16:01:20.914053917 CEST	80	49736	18.160.78.67	192.168.2.4
Apr 16, 2024 16:01:20.916475058 CEST	49736	80	192.168.2.4	18.160.78.67
Apr 16, 2024 16:01:21.066279888 CEST	80	49736	18.160.78.67	192.168.2.4
Apr 16, 2024 16:01:21.119513035 CEST	80	49736	18.160.78.67	192.168.2.4
Apr 16, 2024 16:01:21.119537115 CEST	80	49736	18.160.78.67	192.168.2.4
Apr 16, 2024 16:01:21.119548082 CEST	80	49736	18.160.78.67	192.168.2.4
Apr 16, 2024 16:01:21.119560003 CEST	80	49736	18.160.78.67	192.168.2.4
Apr 16, 2024 16:01:21.119571924 CEST	80	49736	18.160.78.67	192.168.2.4
Apr 16, 2024 16:01:21.119582891 CEST	80	49736	18.160.78.67	192.168.2.4
Apr 16, 2024 16:01:21.119595051 CEST	80	49736	18.160.78.67	192.168.2.4
Apr 16, 2024 16:01:21.119606018 CEST	80	49736	18.160.78.67	192.168.2.4
Apr 16, 2024 16:01:21.119627953 CEST	49736	80	192.168.2.4	18.160.78.67
Apr 16, 2024 16:01:21.119657040 CEST	49736	80	192.168.2.4	18.160.78.67
Apr 16, 2024 16:01:21.300631046 CEST	49737	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:21.300652981 CEST	443	49737	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:21.300820112 CEST	49737	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:21.300980091 CEST	49737	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:21.300985098 CEST	443	49737	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:21.968828917 CEST	443	49737	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:21.969161987 CEST	49737	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:21.969191074 CEST	443	49737	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:21.970184088 CEST	443	49737	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:21.970247984 CEST	49737	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:21.971339941 CEST	49737	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:21.971415043 CEST	443	49737	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:21.971637964 CEST	49737	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:21.971654892 CEST	443	49737	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:22.016294956 CEST	49737	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:22.306893110 CEST	443	49737	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:22.307044029 CEST	443	49737	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:22.307076931 CEST	443	49737	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:22.307095051 CEST	49737	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:22.307118893 CEST	443	49737	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:22.307182074 CEST	49737	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:22.307364941 CEST	443	49737	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:22.307435989 CEST	49737	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:22.399077892 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 16, 2024 16:01:22.455864906 CEST	49740	443	192.168.2.4	18.160.37.59
Apr 16, 2024 16:01:22.455915928 CEST	443	49740	18.160.37.59	192.168.2.4
Apr 16, 2024 16:01:22.455981970 CEST	49740	443	192.168.2.4	18.160.37.59
Apr 16, 2024 16:01:22.456202030 CEST	49740	443	192.168.2.4	18.160.37.59
Apr 16, 2024 16:01:22.456223011 CEST	443	49740	18.160.37.59	192.168.2.4
Apr 16, 2024 16:01:22.461106062 CEST	443	49737	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:22.461158037 CEST	443	49737	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:22.461193085 CEST	49737	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:22.461210966 CEST	443	49737	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:22.461236000 CEST	443	49737	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:22.461241961 CEST	49737	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:22.461302996 CEST	49737	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:22.461647987 CEST	49737	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:22.461667061 CEST	443	49737	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:22.466408968 CEST	49741	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:22.466437101 CEST	443	49741	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:22.466495991 CEST	49741	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:22.466676950 CEST	49741	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:22.466686010 CEST	443	49741	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:22.684603930 CEST	49742	443	192.168.2.4	74.125.138.147
Apr 16, 2024 16:01:22.684657097 CEST	443	49742	74.125.138.147	192.168.2.4
Apr 16, 2024 16:01:22.684727907 CEST	49742	443	192.168.2.4	74.125.138.147
Apr 16, 2024 16:01:22.685340881 CEST	49742	443	192.168.2.4	74.125.138.147
Apr 16, 2024 16:01:22.685358047 CEST	443	49742	74.125.138.147	192.168.2.4
Apr 16, 2024 16:01:22.706018925 CEST	443	49740	18.160.37.59	192.168.2.4
Apr 16, 2024 16:01:22.706315994 CEST	49740	443	192.168.2.4	18.160.37.59
Apr 16, 2024 16:01:22.706350088 CEST	443	49740	18.160.37.59	192.168.2.4
Apr 16, 2024 16:01:22.707856894 CEST	443	49740	18.160.37.59	192.168.2.4
Apr 16, 2024 16:01:22.707928896 CEST	49740	443	192.168.2.4	18.160.37.59
Apr 16, 2024 16:01:22.709376097 CEST	49740	443	192.168.2.4	18.160.37.59
Apr 16, 2024 16:01:22.709461927 CEST	443	49740	18.160.37.59	192.168.2.4
Apr 16, 2024 16:01:22.709841013 CEST	49740	443	192.168.2.4	18.160.37.59
Apr 16, 2024 16:01:22.709851027 CEST	443	49740	18.160.37.59	192.168.2.4
Apr 16, 2024 16:01:22.750412941 CEST	49740	443	192.168.2.4	18.160.37.59
Apr 16, 2024 16:01:22.914064884 CEST	443	49742	74.125.138.147	192.168.2.4
Apr 16, 2024 16:01:22.917757988 CEST	49742	443	192.168.2.4	74.125.138.147
Apr 16, 2024 16:01:22.917792082 CEST	443	49742	74.125.138.147	192.168.2.4
Apr 16, 2024 16:01:22.919457912 CEST	443	49742	74.125.138.147	192.168.2.4
Apr 16, 2024 16:01:22.919540882 CEST	49742	443	192.168.2.4	74.125.138.147
Apr 16, 2024 16:01:22.924180984 CEST	49742	443	192.168.2.4	74.125.138.147
Apr 16, 2024 16:01:22.924276114 CEST	443	49742	74.125.138.147	192.168.2.4
Apr 16, 2024 16:01:22.970724106 CEST	49742	443	192.168.2.4	74.125.138.147
Apr 16, 2024 16:01:22.970755100 CEST	443	49742	74.125.138.147	192.168.2.4
Apr 16, 2024 16:01:23.025759935 CEST	49742	443	192.168.2.4	74.125.138.147
Apr 16, 2024 16:01:23.119223118 CEST	443	49741	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:23.123217106 CEST	49741	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:23.123228073 CEST	443	49741	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:23.123811007 CEST	443	49741	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:23.131201029 CEST	49741	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:23.131303072 CEST	443	49741	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:23.143956900 CEST	49741	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:23.184129000 CEST	443	49741	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:23.456584930 CEST	443	49740	18.160.37.59	192.168.2.4
Apr 16, 2024 16:01:23.456603050 CEST	443	49740	18.160.37.59	192.168.2.4
Apr 16, 2024 16:01:23.456758976 CEST	49740	443	192.168.2.4	18.160.37.59
Apr 16, 2024 16:01:23.456794024 CEST	443	49740	18.160.37.59	192.168.2.4
Apr 16, 2024 16:01:23.464329004 CEST	443	49740	18.160.37.59	192.168.2.4
Apr 16, 2024 16:01:23.464396954 CEST	443	49740	18.160.37.59	192.168.2.4
Apr 16, 2024 16:01:23.464402914 CEST	49740	443	192.168.2.4	18.160.37.59
Apr 16, 2024 16:01:23.464437962 CEST	49740	443	192.168.2.4	18.160.37.59
Apr 16, 2024 16:01:23.464699984 CEST	49740	443	192.168.2.4	18.160.37.59
Apr 16, 2024 16:01:23.464720011 CEST	443	49740	18.160.37.59	192.168.2.4
Apr 16, 2024 16:01:23.466906071 CEST	443	49741	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:23.467081070 CEST	443	49741	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:23.467148066 CEST	49741	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:23.468460083 CEST	49741	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:23.468489885 CEST	443	49741	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:23.487858057 CEST	49743	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:23.487898111 CEST	443	49743	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:23.488034010 CEST	49743	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:23.488753080 CEST	49743	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:23.488763094 CEST	443	49743	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:23.591263056 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:23.591352940 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:23.591435909 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:23.591675997 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:23.591711998 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:23.600393057 CEST	49745	443	192.168.2.4	18.160.37.59
Apr 16, 2024 16:01:23.600420952 CEST	443	49745	18.160.37.59	192.168.2.4
Apr 16, 2024 16:01:23.600493908 CEST	49745	443	192.168.2.4	18.160.37.59
Apr 16, 2024 16:01:23.600662947 CEST	49745	443	192.168.2.4	18.160.37.59
Apr 16, 2024 16:01:23.600676060 CEST	443	49745	18.160.37.59	192.168.2.4
Apr 16, 2024 16:01:23.659518957 CEST	49746	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:23.659554005 CEST	443	49746	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:23.659615993 CEST	49746	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:23.659779072 CEST	49746	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:23.659790039 CEST	443	49746	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:23.833538055 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:23.835913897 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:23.835939884 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:23.836838007 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:23.836896896 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:23.839405060 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:23.839483023 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:23.839571953 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:23.839589119 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:23.849556923 CEST	443	49745	18.160.37.59	192.168.2.4
Apr 16, 2024 16:01:23.850028038 CEST	49745	443	192.168.2.4	18.160.37.59
Apr 16, 2024 16:01:23.850044966 CEST	443	49745	18.160.37.59	192.168.2.4
Apr 16, 2024 16:01:23.851118088 CEST	443	49745	18.160.37.59	192.168.2.4
Apr 16, 2024 16:01:23.851171017 CEST	49745	443	192.168.2.4	18.160.37.59
Apr 16, 2024 16:01:23.851593971 CEST	49745	443	192.168.2.4	18.160.37.59
Apr 16, 2024 16:01:23.851650953 CEST	443	49745	18.160.37.59	192.168.2.4
Apr 16, 2024 16:01:23.851737022 CEST	49745	443	192.168.2.4	18.160.37.59
Apr 16, 2024 16:01:23.851742029 CEST	443	49745	18.160.37.59	192.168.2.4
Apr 16, 2024 16:01:23.894464016 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:23.896210909 CEST	49745	443	192.168.2.4	18.160.37.59
Apr 16, 2024 16:01:24.057374001 CEST	49747	443	192.168.2.4	184.31.62.93
Apr 16, 2024 16:01:24.057410002 CEST	443	49747	184.31.62.93	192.168.2.4
Apr 16, 2024 16:01:24.057553053 CEST	49747	443	192.168.2.4	184.31.62.93
Apr 16, 2024 16:01:24.059961081 CEST	49747	443	192.168.2.4	184.31.62.93
Apr 16, 2024 16:01:24.059988022 CEST	443	49747	184.31.62.93	192.168.2.4
Apr 16, 2024 16:01:24.082547903 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.082590103 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.082631111 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.082665920 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.082665920 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.082689047 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.082742929 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.090903997 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.099184990 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.099230051 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.099239111 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.107568979 CEST	443	49745	18.160.37.59	192.168.2.4
Apr 16, 2024 16:01:24.107592106 CEST	443	49745	18.160.37.59	192.168.2.4
Apr 16, 2024 16:01:24.107599020 CEST	443	49745	18.160.37.59	192.168.2.4
Apr 16, 2024 16:01:24.107647896 CEST	49745	443	192.168.2.4	18.160.37.59
Apr 16, 2024 16:01:24.107661963 CEST	443	49745	18.160.37.59	192.168.2.4
Apr 16, 2024 16:01:24.107706070 CEST	49745	443	192.168.2.4	18.160.37.59
Apr 16, 2024 16:01:24.107729912 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.107732058 CEST	443	49745	18.160.37.59	192.168.2.4
Apr 16, 2024 16:01:24.107744932 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.107769012 CEST	49745	443	192.168.2.4	18.160.37.59
Apr 16, 2024 16:01:24.107852936 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.107868910 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.107918978 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.110737085 CEST	49745	443	192.168.2.4	18.160.37.59
Apr 16, 2024 16:01:24.110745907 CEST	443	49745	18.160.37.59	192.168.2.4
Apr 16, 2024 16:01:24.116087914 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.154393911 CEST	443	49743	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:24.156773090 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.157635927 CEST	49743	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:24.157650948 CEST	443	49743	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:24.157994986 CEST	443	49743	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:24.158329010 CEST	49743	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:24.158386946 CEST	443	49743	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:24.159543037 CEST	49743	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:24.203056097 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.204112053 CEST	443	49743	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:24.207246065 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.207268000 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.207355976 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.207379103 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.207868099 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.214565992 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.222950935 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.222971916 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.223011017 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.223027945 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.223082066 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.231213093 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.239588976 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.239608049 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.239626884 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.239641905 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.239686966 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.242736101 CEST	49748	443	192.168.2.4	142.250.9.101
Apr 16, 2024 16:01:24.242821932 CEST	443	49748	142.250.9.101	192.168.2.4
Apr 16, 2024 16:01:24.242896080 CEST	49748	443	192.168.2.4	142.250.9.101
Apr 16, 2024 16:01:24.243079901 CEST	49748	443	192.168.2.4	142.250.9.101
Apr 16, 2024 16:01:24.243109941 CEST	443	49748	142.250.9.101	192.168.2.4
Apr 16, 2024 16:01:24.248002052 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.255801916 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.255820990 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.255842924 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.255860090 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.255908012 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.263551950 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.271511078 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.271531105 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.271557093 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.271572113 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.271615028 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.279253006 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.282424927 CEST	443	49747	184.31.62.93	192.168.2.4
Apr 16, 2024 16:01:24.282485008 CEST	49747	443	192.168.2.4	184.31.62.93
Apr 16, 2024 16:01:24.287101984 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.287122011 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.287147045 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.287153959 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.287193060 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.290098906 CEST	49747	443	192.168.2.4	184.31.62.93
Apr 16, 2024 16:01:24.290102959 CEST	443	49747	184.31.62.93	192.168.2.4
Apr 16, 2024 16:01:24.290368080 CEST	443	49747	184.31.62.93	192.168.2.4
Apr 16, 2024 16:01:24.294831991 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.302690983 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.302709103 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.302735090 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.302751064 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.302795887 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.322618961 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.325738907 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.325772047 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.325786114 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.325809002 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.325848103 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.331722021 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.337595940 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.337613106 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.337635994 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.337644100 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.337682009 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.341708899 CEST	49747	443	192.168.2.4	184.31.62.93
Apr 16, 2024 16:01:24.343039036 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.348535061 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.348563910 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.348592997 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.348608017 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.349875927 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.350044012 CEST	443	49746	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:24.350290060 CEST	49746	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:24.350311995 CEST	443	49746	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:24.351164103 CEST	443	49746	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:24.351219893 CEST	49746	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:24.351602077 CEST	49746	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:24.351651907 CEST	443	49746	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:24.351754904 CEST	49746	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:24.351761103 CEST	443	49746	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:24.353929996 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.359447002 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.359466076 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.359498978 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.359518051 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.359565020 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.364865065 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.370382071 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.370399952 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.370449066 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.370462894 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.370506048 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.374968052 CEST	49747	443	192.168.2.4	184.31.62.93
Apr 16, 2024 16:01:24.375716925 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.378683090 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.378729105 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.378734112 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.383929968 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.383976936 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.383982897 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.389384031 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.389430046 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.389436007 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.394795895 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.394844055 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.394850969 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.400274038 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.400325060 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.400331020 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.402986050 CEST	49746	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:24.405807018 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.405852079 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.405858994 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.411185980 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.411274910 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.411281109 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.416445971 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.416491032 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.416497946 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.420116901 CEST	443	49747	184.31.62.93	192.168.2.4
Apr 16, 2024 16:01:24.421736002 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.421782970 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.421789885 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.426721096 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.426765919 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.426774025 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.431515932 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.431564093 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.431571007 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.436398983 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.436450958 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.436456919 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.443393946 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.443413019 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.443450928 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.443469048 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.443515062 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.448072910 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.452749014 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.452764988 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.452789068 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.452802896 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.452843904 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.455620050 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.458534956 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.458550930 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.458580017 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.458594084 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.458637953 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.461373091 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.464207888 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.464227915 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.464253902 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.464267969 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.464312077 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.467004061 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.469902039 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.469935894 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.469957113 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.469970942 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.470016003 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.472572088 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.475287914 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.475306988 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.475330114 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.475343943 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.475383043 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.478038073 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.480770111 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.480806112 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.480811119 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.482180119 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.482227087 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.482233047 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.482650995 CEST	443	49747	184.31.62.93	192.168.2.4
Apr 16, 2024 16:01:24.482805014 CEST	443	49747	184.31.62.93	192.168.2.4
Apr 16, 2024 16:01:24.482860088 CEST	49747	443	192.168.2.4	184.31.62.93
Apr 16, 2024 16:01:24.483196020 CEST	49747	443	192.168.2.4	184.31.62.93
Apr 16, 2024 16:01:24.483196020 CEST	49747	443	192.168.2.4	184.31.62.93
Apr 16, 2024 16:01:24.483203888 CEST	443	49747	184.31.62.93	192.168.2.4
Apr 16, 2024 16:01:24.483210087 CEST	443	49747	184.31.62.93	192.168.2.4
Apr 16, 2024 16:01:24.484844923 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.484889030 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.484894991 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.487494946 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.487550974 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.487556934 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.488516092 CEST	443	49748	142.250.9.101	192.168.2.4
Apr 16, 2024 16:01:24.488893032 CEST	49748	443	192.168.2.4	142.250.9.101
Apr 16, 2024 16:01:24.488914967 CEST	443	49748	142.250.9.101	192.168.2.4
Apr 16, 2024 16:01:24.489825964 CEST	443	49748	142.250.9.101	192.168.2.4
Apr 16, 2024 16:01:24.489878893 CEST	49748	443	192.168.2.4	142.250.9.101
Apr 16, 2024 16:01:24.490134954 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.490173101 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.490180016 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.492904902 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.492943048 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.492949963 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.495371103 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.495410919 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.495417118 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.495762110 CEST	49748	443	192.168.2.4	142.250.9.101
Apr 16, 2024 16:01:24.495836973 CEST	443	49748	142.250.9.101	192.168.2.4
Apr 16, 2024 16:01:24.497903109 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.497946024 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.497952938 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.500431061 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.500472069 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.500483990 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.503066063 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.503107071 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.503118992 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.508028984 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.508052111 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.508079052 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.508093119 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.508141994 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.510612011 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.512934923 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.512967110 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.512979984 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.514210939 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.514246941 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.514259100 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.516638041 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.516689062 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.516700983 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.519063950 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.519203901 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.519216061 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.521456957 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.521488905 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.521501064 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.523807049 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.523838043 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.523849964 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.526281118 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.526320934 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.526331902 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.528481960 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.528523922 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.528537035 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.530797958 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.530834913 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.530839920 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.530858040 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.530898094 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.530909061 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.530927896 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.530980110 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.548435926 CEST	49748	443	192.168.2.4	142.250.9.101
Apr 16, 2024 16:01:24.548464060 CEST	443	49748	142.250.9.101	192.168.2.4
Apr 16, 2024 16:01:24.575875998 CEST	49744	443	192.168.2.4	142.250.9.106
Apr 16, 2024 16:01:24.575933933 CEST	443	49744	142.250.9.106	192.168.2.4
Apr 16, 2024 16:01:24.591516018 CEST	49748	443	192.168.2.4	142.250.9.101
Apr 16, 2024 16:01:24.662970066 CEST	443	49746	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:24.663037062 CEST	443	49746	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:24.663111925 CEST	49746	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:24.682843924 CEST	49746	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:24.682889938 CEST	443	49746	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:24.745013952 CEST	49749	443	192.168.2.4	184.31.62.93
Apr 16, 2024 16:01:24.745031118 CEST	443	49749	184.31.62.93	192.168.2.4
Apr 16, 2024 16:01:24.745084047 CEST	49749	443	192.168.2.4	184.31.62.93
Apr 16, 2024 16:01:24.745480061 CEST	49749	443	192.168.2.4	184.31.62.93
Apr 16, 2024 16:01:24.745487928 CEST	443	49749	184.31.62.93	192.168.2.4
Apr 16, 2024 16:01:24.788570881 CEST	49751	443	192.168.2.4	142.250.105.102
Apr 16, 2024 16:01:24.788599968 CEST	443	49751	142.250.105.102	192.168.2.4
Apr 16, 2024 16:01:24.788656950 CEST	49751	443	192.168.2.4	142.250.105.102
Apr 16, 2024 16:01:24.788968086 CEST	49751	443	192.168.2.4	142.250.105.102
Apr 16, 2024 16:01:24.788978100 CEST	443	49751	142.250.105.102	192.168.2.4
Apr 16, 2024 16:01:24.957073927 CEST	443	49749	184.31.62.93	192.168.2.4
Apr 16, 2024 16:01:24.957140923 CEST	49749	443	192.168.2.4	184.31.62.93
Apr 16, 2024 16:01:24.958313942 CEST	49749	443	192.168.2.4	184.31.62.93
Apr 16, 2024 16:01:24.958318949 CEST	443	49749	184.31.62.93	192.168.2.4
Apr 16, 2024 16:01:24.958507061 CEST	443	49749	184.31.62.93	192.168.2.4
Apr 16, 2024 16:01:24.959404945 CEST	49749	443	192.168.2.4	184.31.62.93
Apr 16, 2024 16:01:25.004116058 CEST	443	49749	184.31.62.93	192.168.2.4
Apr 16, 2024 16:01:25.009500980 CEST	443	49743	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:25.009670019 CEST	443	49743	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:25.009742022 CEST	49743	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:25.010487080 CEST	49743	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:25.010514975 CEST	443	49743	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:25.014662027 CEST	443	49751	142.250.105.102	192.168.2.4
Apr 16, 2024 16:01:25.014884949 CEST	49751	443	192.168.2.4	142.250.105.102
Apr 16, 2024 16:01:25.014908075 CEST	443	49751	142.250.105.102	192.168.2.4
Apr 16, 2024 16:01:25.015531063 CEST	443	49751	142.250.105.102	192.168.2.4
Apr 16, 2024 16:01:25.015551090 CEST	443	49751	142.250.105.102	192.168.2.4
Apr 16, 2024 16:01:25.015624046 CEST	49751	443	192.168.2.4	142.250.105.102
Apr 16, 2024 16:01:25.015631914 CEST	443	49751	142.250.105.102	192.168.2.4
Apr 16, 2024 16:01:25.015671968 CEST	49751	443	192.168.2.4	142.250.105.102
Apr 16, 2024 16:01:25.016283035 CEST	443	49751	142.250.105.102	192.168.2.4
Apr 16, 2024 16:01:25.068589926 CEST	49751	443	192.168.2.4	142.250.105.102
Apr 16, 2024 16:01:25.173772097 CEST	443	49749	184.31.62.93	192.168.2.4
Apr 16, 2024 16:01:25.173830986 CEST	443	49749	184.31.62.93	192.168.2.4
Apr 16, 2024 16:01:25.173867941 CEST	49749	443	192.168.2.4	184.31.62.93
Apr 16, 2024 16:01:25.174536943 CEST	49749	443	192.168.2.4	184.31.62.93
Apr 16, 2024 16:01:25.174546003 CEST	443	49749	184.31.62.93	192.168.2.4
Apr 16, 2024 16:01:25.174559116 CEST	49749	443	192.168.2.4	184.31.62.93
Apr 16, 2024 16:01:25.174565077 CEST	443	49749	184.31.62.93	192.168.2.4
Apr 16, 2024 16:01:25.336210012 CEST	49751	443	192.168.2.4	142.250.105.102
Apr 16, 2024 16:01:25.336407900 CEST	49751	443	192.168.2.4	142.250.105.102
Apr 16, 2024 16:01:25.336559057 CEST	443	49751	142.250.105.102	192.168.2.4
Apr 16, 2024 16:01:25.388782978 CEST	49751	443	192.168.2.4	142.250.105.102
Apr 16, 2024 16:01:25.388804913 CEST	443	49751	142.250.105.102	192.168.2.4
Apr 16, 2024 16:01:25.435945988 CEST	49751	443	192.168.2.4	142.250.105.102
Apr 16, 2024 16:01:25.794369936 CEST	443	49751	142.250.105.102	192.168.2.4
Apr 16, 2024 16:01:25.794409990 CEST	443	49751	142.250.105.102	192.168.2.4
Apr 16, 2024 16:01:25.794455051 CEST	49751	443	192.168.2.4	142.250.105.102
Apr 16, 2024 16:01:25.796701908 CEST	49751	443	192.168.2.4	142.250.105.102
Apr 16, 2024 16:01:25.796808958 CEST	443	49751	142.250.105.102	192.168.2.4
Apr 16, 2024 16:01:25.796962023 CEST	49751	443	192.168.2.4	142.250.105.102
Apr 16, 2024 16:01:25.913019896 CEST	49752	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:25.913058996 CEST	443	49752	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:25.913177013 CEST	49752	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:25.913810968 CEST	49752	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:25.913835049 CEST	443	49752	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:26.155069113 CEST	443	49752	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:26.155404091 CEST	49752	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:26.155433893 CEST	443	49752	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:26.156891108 CEST	443	49752	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:26.156948090 CEST	49752	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:26.157618046 CEST	49752	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:26.157702923 CEST	443	49752	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:26.157792091 CEST	49752	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:26.157814026 CEST	443	49752	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:26.206149101 CEST	49752	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:26.398228884 CEST	443	49752	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:26.398281097 CEST	443	49752	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:26.398313046 CEST	443	49752	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:26.398339033 CEST	49752	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:26.398344994 CEST	443	49752	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:26.398360014 CEST	443	49752	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:26.398396015 CEST	49752	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:26.398405075 CEST	443	49752	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:26.398478031 CEST	49752	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:26.398483992 CEST	443	49752	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:26.406162024 CEST	443	49752	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:26.406213999 CEST	49752	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:26.406220913 CEST	443	49752	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:26.406439066 CEST	49752	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:26.406483889 CEST	443	49752	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:26.406539917 CEST	49752	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:26.753300905 CEST	49753	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:26.753392935 CEST	443	49753	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:26.753473997 CEST	49753	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:26.754477978 CEST	49753	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:26.754508972 CEST	443	49753	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:26.993383884 CEST	443	49753	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:27.029412031 CEST	49753	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:27.029439926 CEST	443	49753	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:27.031801939 CEST	443	49753	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:27.031861067 CEST	49753	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:27.032779932 CEST	49753	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:27.032929897 CEST	443	49753	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:27.033113956 CEST	49753	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:27.033132076 CEST	443	49753	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:27.085552931 CEST	49753	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:27.261251926 CEST	443	49753	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:27.261368990 CEST	443	49753	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:27.261428118 CEST	49753	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:27.336245060 CEST	49753	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:27.336270094 CEST	443	49753	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:28.473529100 CEST	49755	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:28.473612070 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:28.473691940 CEST	49755	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:28.473901033 CEST	49755	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:28.473933935 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:28.718329906 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:28.718672991 CEST	49755	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:28.718689919 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:28.718970060 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:28.719305038 CEST	49755	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:28.719357967 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:28.719439030 CEST	49755	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:28.719465017 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:28.985150099 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:28.985177040 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:28.985209942 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:28.985261917 CEST	49755	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:28.985285044 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:28.985332012 CEST	49755	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:28.994005919 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.001991987 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.002005100 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.002037048 CEST	49755	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:29.002053976 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.002106905 CEST	49755	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:29.009905100 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.017982006 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.018083096 CEST	49755	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:29.018095970 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.066766977 CEST	49755	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:29.101917982 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.105720997 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.105786085 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.105803013 CEST	49755	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:29.105868101 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.105915070 CEST	49755	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:29.113898993 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.122112036 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.122191906 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.122251987 CEST	49755	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:29.122267008 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.122540951 CEST	49755	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:29.122551918 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.130321980 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.130512953 CEST	49755	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:29.130523920 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.138370991 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.138416052 CEST	49755	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:29.138427019 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.146591902 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.146644115 CEST	49755	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:29.146656036 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.154769897 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.154808998 CEST	49755	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:29.154819965 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.162246943 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.162295103 CEST	49755	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:29.162306070 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.169708967 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.169751883 CEST	49755	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:29.169763088 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.177176952 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.177217007 CEST	49755	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:29.177222967 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.184628963 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.184669018 CEST	49755	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:29.184673071 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.192397118 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.192413092 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.192434072 CEST	49755	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:29.192436934 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.192473888 CEST	49755	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:29.192476988 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.192502975 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.192595005 CEST	49755	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:29.192636013 CEST	49755	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:29.192647934 CEST	443	49755	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.676759958 CEST	49760	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:29.676784039 CEST	443	49760	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.677779913 CEST	49760	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:29.677779913 CEST	49760	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:29.677809000 CEST	443	49760	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.687289953 CEST	49761	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:29.687311888 CEST	443	49761	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.687975883 CEST	49761	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:29.688167095 CEST	49761	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:29.688182116 CEST	443	49761	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.920821905 CEST	443	49760	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.921278000 CEST	49760	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:29.921292067 CEST	443	49760	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.921741962 CEST	443	49760	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.922095060 CEST	49760	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:29.922095060 CEST	49760	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:29.922106981 CEST	443	49760	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.922168970 CEST	443	49760	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.937629938 CEST	443	49761	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.937860012 CEST	49761	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:29.937880993 CEST	443	49761	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.938344955 CEST	443	49761	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.938698053 CEST	49761	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:29.938698053 CEST	49761	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:29.938719034 CEST	443	49761	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.938780069 CEST	443	49761	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:29.979424000 CEST	49760	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:29.992784023 CEST	49761	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:30.180720091 CEST	443	49760	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:30.180890083 CEST	443	49760	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:30.181015968 CEST	49760	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:30.181679010 CEST	49760	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:30.181698084 CEST	443	49760	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:30.183084965 CEST	443	49761	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:30.183211088 CEST	443	49761	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:30.183280945 CEST	49761	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:30.183296919 CEST	443	49761	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:30.183362007 CEST	443	49761	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:30.183445930 CEST	443	49761	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:30.183482885 CEST	49761	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:30.183490992 CEST	443	49761	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:30.183573008 CEST	49761	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:30.183579922 CEST	443	49761	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:30.191006899 CEST	443	49761	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:30.191257000 CEST	49761	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:30.191263914 CEST	443	49761	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:30.199253082 CEST	443	49761	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:30.199398041 CEST	49761	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:30.199404955 CEST	443	49761	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:30.207664967 CEST	443	49761	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:30.209080935 CEST	49761	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:30.209089994 CEST	443	49761	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:30.264166117 CEST	49761	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:30.264175892 CEST	443	49761	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:30.302505970 CEST	443	49761	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:30.304091930 CEST	49761	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:30.304121971 CEST	443	49761	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:30.306695938 CEST	443	49761	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:30.307284117 CEST	49761	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:30.312133074 CEST	49761	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:30.312146902 CEST	443	49761	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:30.409863949 CEST	49764	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:30.409903049 CEST	443	49764	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:30.409996033 CEST	49764	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:30.412142038 CEST	49764	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:30.412156105 CEST	443	49764	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:30.880251884 CEST	49765	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:30.880337000 CEST	443	49765	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:30.880800009 CEST	49765	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:30.881364107 CEST	49765	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:30.881402016 CEST	443	49765	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:31.046354055 CEST	443	49764	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:31.046541929 CEST	49764	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:31.046555042 CEST	443	49764	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:31.047027111 CEST	443	49764	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:31.047489882 CEST	49764	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:31.047564030 CEST	443	49764	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:31.047761917 CEST	49764	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:31.088155985 CEST	443	49764	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:31.129178047 CEST	443	49765	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:31.172852039 CEST	49765	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:31.329070091 CEST	443	49764	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:31.329169035 CEST	443	49764	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:31.329238892 CEST	49764	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:31.473480940 CEST	49765	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:31.473514080 CEST	443	49765	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:31.473969936 CEST	443	49765	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:31.497329950 CEST	49765	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:31.497596979 CEST	443	49765	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:31.497625113 CEST	49765	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:31.497762918 CEST	443	49765	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:31.502350092 CEST	49764	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:31.502371073 CEST	443	49764	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:31.546545029 CEST	49765	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:31.638106108 CEST	443	49765	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:31.638226032 CEST	443	49765	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:31.638295889 CEST	49765	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:31.638302088 CEST	443	49765	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:31.638367891 CEST	443	49765	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:31.638421059 CEST	49765	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:31.638437033 CEST	443	49765	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:31.638483047 CEST	443	49765	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:31.638523102 CEST	49765	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:31.638534069 CEST	443	49765	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:31.649116039 CEST	443	49765	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:31.649194956 CEST	49765	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:31.748653889 CEST	49765	443	192.168.2.4	142.250.9.147
Apr 16, 2024 16:01:31.748703003 CEST	443	49765	142.250.9.147	192.168.2.4
Apr 16, 2024 16:01:31.869066954 CEST	49767	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:31.869115114 CEST	443	49767	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:31.869180918 CEST	49767	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:31.869811058 CEST	49767	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:31.869827986 CEST	443	49767	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:32.528781891 CEST	443	49767	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:32.529114008 CEST	49767	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:32.529146910 CEST	443	49767	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:32.529454947 CEST	443	49767	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:32.529840946 CEST	49767	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:32.529840946 CEST	49767	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:32.529896021 CEST	443	49767	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:32.577140093 CEST	49767	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:32.835659981 CEST	443	49767	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:32.835836887 CEST	443	49767	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:32.836249113 CEST	49767	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:32.836503983 CEST	49767	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:32.836503983 CEST	49767	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:32.836519003 CEST	443	49767	104.247.82.91	192.168.2.4
Apr 16, 2024 16:01:32.838109016 CEST	49767	443	192.168.2.4	104.247.82.91
Apr 16, 2024 16:01:32.911837101 CEST	443	49742	74.125.138.147	192.168.2.4
Apr 16, 2024 16:01:32.911969900 CEST	443	49742	74.125.138.147	192.168.2.4
Apr 16, 2024 16:01:32.912117958 CEST	49742	443	192.168.2.4	74.125.138.147
Apr 16, 2024 16:01:33.620120049 CEST	49742	443	192.168.2.4	74.125.138.147
Apr 16, 2024 16:01:33.620187044 CEST	443	49742	74.125.138.147	192.168.2.4
Apr 16, 2024 16:01:37.972703934 CEST	49723	80	192.168.2.4	23.47.204.68
Apr 16, 2024 16:01:38.079200983 CEST	80	49723	23.47.204.68	192.168.2.4
Apr 16, 2024 16:01:38.079402924 CEST	49723	80	192.168.2.4	23.47.204.68
Apr 16, 2024 16:01:50.916780949 CEST	80	49735	18.160.78.67	192.168.2.4
Apr 16, 2024 16:01:50.916873932 CEST	49735	80	192.168.2.4	18.160.78.67
Apr 16, 2024 16:01:51.619800091 CEST	49735	80	192.168.2.4	18.160.78.67
Apr 16, 2024 16:01:51.723823071 CEST	80	49735	18.160.78.67	192.168.2.4
Apr 16, 2024 16:02:06.130839109 CEST	49736	80	192.168.2.4	18.160.78.67
Apr 16, 2024 16:02:06.236213923 CEST	80	49736	18.160.78.67	192.168.2.4
Apr 16, 2024 16:02:09.551146984 CEST	49748	443	192.168.2.4	142.250.9.101
Apr 16, 2024 16:02:09.551203966 CEST	443	49748	142.250.9.101	192.168.2.4
Apr 16, 2024 16:02:22.637816906 CEST	49775	443	192.168.2.4	74.125.138.147
Apr 16, 2024 16:02:22.637861967 CEST	443	49775	74.125.138.147	192.168.2.4
Apr 16, 2024 16:02:22.638186932 CEST	49775	443	192.168.2.4	74.125.138.147
Apr 16, 2024 16:02:22.638889074 CEST	49775	443	192.168.2.4	74.125.138.147
Apr 16, 2024 16:02:22.638930082 CEST	443	49775	74.125.138.147	192.168.2.4
Apr 16, 2024 16:02:22.853025913 CEST	443	49775	74.125.138.147	192.168.2.4
Apr 16, 2024 16:02:22.853302956 CEST	49775	443	192.168.2.4	74.125.138.147
Apr 16, 2024 16:02:22.853323936 CEST	443	49775	74.125.138.147	192.168.2.4
Apr 16, 2024 16:02:22.853782892 CEST	443	49775	74.125.138.147	192.168.2.4
Apr 16, 2024 16:02:22.854127884 CEST	49775	443	192.168.2.4	74.125.138.147
Apr 16, 2024 16:02:22.854224920 CEST	443	49775	74.125.138.147	192.168.2.4
Apr 16, 2024 16:02:22.904000998 CEST	49775	443	192.168.2.4	74.125.138.147
Apr 16, 2024 16:02:25.939003944 CEST	49748	443	192.168.2.4	142.250.9.101
Apr 16, 2024 16:02:25.939192057 CEST	443	49748	142.250.9.101	192.168.2.4
Apr 16, 2024 16:02:25.939266920 CEST	49748	443	192.168.2.4	142.250.9.101
Apr 16, 2024 16:02:27.336330891 CEST	49724	80	192.168.2.4	199.232.214.172
Apr 16, 2024 16:02:27.440306902 CEST	80	49724	199.232.214.172	192.168.2.4
Apr 16, 2024 16:02:27.440334082 CEST	80	49724	199.232.214.172	192.168.2.4
Apr 16, 2024 16:02:27.440412045 CEST	49724	80	192.168.2.4	199.232.214.172
Apr 16, 2024 16:02:32.900196075 CEST	443	49775	74.125.138.147	192.168.2.4
Apr 16, 2024 16:02:32.900286913 CEST	443	49775	74.125.138.147	192.168.2.4
Apr 16, 2024 16:02:32.900392056 CEST	49775	443	192.168.2.4	74.125.138.147
Apr 16, 2024 16:02:33.640898943 CEST	49775	443	192.168.2.4	74.125.138.147
Apr 16, 2024 16:02:33.640917063 CEST	443	49775	74.125.138.147	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 16, 2024 16:01:19.166743040 CEST	53	56530	1.1.1.1	192.168.2.4
Apr 16, 2024 16:01:19.189874887 CEST	53	53267	1.1.1.1	192.168.2.4
Apr 16, 2024 16:01:19.883548021 CEST	53	59505	1.1.1.1	192.168.2.4
Apr 16, 2024 16:01:20.574951887 CEST	61432	53	192.168.2.4	1.1.1.1
Apr 16, 2024 16:01:20.575182915 CEST	63224	53	192.168.2.4	1.1.1.1
Apr 16, 2024 16:01:20.688256025 CEST	53	63224	1.1.1.1	192.168.2.4
Apr 16, 2024 16:01:20.704171896 CEST	53	61432	1.1.1.1	192.168.2.4
Apr 16, 2024 16:01:21.122597933 CEST	49890	53	192.168.2.4	1.1.1.1
Apr 16, 2024 16:01:21.122792006 CEST	57055	53	192.168.2.4	1.1.1.1
Apr 16, 2024 16:01:21.268237114 CEST	53	49890	1.1.1.1	192.168.2.4
Apr 16, 2024 16:01:21.300175905 CEST	53	57055	1.1.1.1	192.168.2.4
Apr 16, 2024 16:01:22.347352028 CEST	64833	53	192.168.2.4	1.1.1.1
Apr 16, 2024 16:01:22.347493887 CEST	54041	53	192.168.2.4	1.1.1.1
Apr 16, 2024 16:01:22.452642918 CEST	53	64833	1.1.1.1	192.168.2.4
Apr 16, 2024 16:01:22.455418110 CEST	53	54041	1.1.1.1	192.168.2.4
Apr 16, 2024 16:01:22.578430891 CEST	53113	53	192.168.2.4	1.1.1.1
Apr 16, 2024 16:01:22.578573942 CEST	55343	53	192.168.2.4	1.1.1.1
Apr 16, 2024 16:01:22.682914972 CEST	53	53113	1.1.1.1	192.168.2.4
Apr 16, 2024 16:01:22.683088064 CEST	53	55343	1.1.1.1	192.168.2.4
Apr 16, 2024 16:01:23.486174107 CEST	55021	53	192.168.2.4	1.1.1.1
Apr 16, 2024 16:01:23.486546993 CEST	53271	53	192.168.2.4	1.1.1.1
Apr 16, 2024 16:01:23.492072105 CEST	59442	53	192.168.2.4	1.1.1.1
Apr 16, 2024 16:01:23.492468119 CEST	54489	53	192.168.2.4	1.1.1.1
Apr 16, 2024 16:01:23.494638920 CEST	65148	53	192.168.2.4	1.1.1.1
Apr 16, 2024 16:01:23.494793892 CEST	56305	53	192.168.2.4	1.1.1.1
Apr 16, 2024 16:01:23.590536118 CEST	53	55021	1.1.1.1	192.168.2.4
Apr 16, 2024 16:01:23.590797901 CEST	53	53271	1.1.1.1	192.168.2.4
Apr 16, 2024 16:01:23.598721027 CEST	53	54489	1.1.1.1	192.168.2.4
Apr 16, 2024 16:01:23.599950075 CEST	53	59442	1.1.1.1	192.168.2.4
Apr 16, 2024 16:01:23.618828058 CEST	53	65148	1.1.1.1	192.168.2.4
Apr 16, 2024 16:01:23.671715021 CEST	53	56305	1.1.1.1	192.168.2.4
Apr 16, 2024 16:01:24.086781025 CEST	57299	53	192.168.2.4	1.1.1.1
Apr 16, 2024 16:01:24.087019920 CEST	61235	53	192.168.2.4	1.1.1.1
Apr 16, 2024 16:01:24.192437887 CEST	53	57299	1.1.1.1	192.168.2.4
Apr 16, 2024 16:01:24.192594051 CEST	53	61235	1.1.1.1	192.168.2.4
Apr 16, 2024 16:01:24.681601048 CEST	62486	53	192.168.2.4	1.1.1.1
Apr 16, 2024 16:01:24.682188988 CEST	51794	53	192.168.2.4	1.1.1.1
Apr 16, 2024 16:01:24.786241055 CEST	53	62486	1.1.1.1	192.168.2.4
Apr 16, 2024 16:01:24.787617922 CEST	53	51794	1.1.1.1	192.168.2.4
Apr 16, 2024 16:01:25.807173967 CEST	55613	53	192.168.2.4	1.1.1.1
Apr 16, 2024 16:01:25.807651997 CEST	51669	53	192.168.2.4	1.1.1.1
Apr 16, 2024 16:01:25.911588907 CEST	53	55613	1.1.1.1	192.168.2.4
Apr 16, 2024 16:01:25.911926985 CEST	53	51669	1.1.1.1	192.168.2.4
Apr 16, 2024 16:01:27.446333885 CEST	53	50973	1.1.1.1	192.168.2.4
Apr 16, 2024 16:01:28.685273886 CEST	53	55691	1.1.1.1	192.168.2.4
Apr 16, 2024 16:01:28.791261911 CEST	53	53904	1.1.1.1	192.168.2.4
Apr 16, 2024 16:01:29.791171074 CEST	53	52613	1.1.1.1	192.168.2.4
Apr 16, 2024 16:01:30.208735943 CEST	53	63727	1.1.1.1	192.168.2.4
Apr 16, 2024 16:01:36.823980093 CEST	53	64022	1.1.1.1	192.168.2.4
Apr 16, 2024 16:01:38.926414967 CEST	138	138	192.168.2.4	192.168.2.255
Apr 16, 2024 16:01:55.543780088 CEST	53	55444	1.1.1.1	192.168.2.4
Apr 16, 2024 16:02:18.091625929 CEST	53	55366	1.1.1.1	192.168.2.4
Apr 16, 2024 16:02:18.769077063 CEST	53	56387	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 16, 2024 16:01:23.671767950 CEST	192.168.2.4	1.1.1.1	c1f4	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 16, 2024 16:01:20.574951887 CEST	192.168.2.4	1.1.1.1	0x89e1	Standard query (0)	fr0qzh.ncjfhzfdhcxvxcz.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:20.575182915 CEST	192.168.2.4	1.1.1.1	0xfc7e	Standard query (0)	fr0qzh.ncjfhzfdhcxvxcz.com	65	IN (0x0001)	false
Apr 16, 2024 16:01:21.122597933 CEST	192.168.2.4	1.1.1.1	0x2d27	Standard query (0)	www.nurse-jobs-in-us-19058.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:21.122792006 CEST	192.168.2.4	1.1.1.1	0x4d4b	Standard query (0)	www.nurse-jobs-in-us-19058.com	65	IN (0x0001)	false
Apr 16, 2024 16:01:22.347352028 CEST	192.168.2.4	1.1.1.1	0x60af	Standard query (0)	d1t9jheyiyj1h6.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:22.347493887 CEST	192.168.2.4	1.1.1.1	0x7d6f	Standard query (0)	d1t9jheyiyj1h6.cloudfront.net	65	IN (0x0001)	false
Apr 16, 2024 16:01:22.578430891 CEST	192.168.2.4	1.1.1.1	0x5305	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:22.578573942 CEST	192.168.2.4	1.1.1.1	0xfcbb	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 16, 2024 16:01:23.486174107 CEST	192.168.2.4	1.1.1.1	0x1698	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:23.486546993 CEST	192.168.2.4	1.1.1.1	0x8be7	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 16, 2024 16:01:23.492072105 CEST	192.168.2.4	1.1.1.1	0x1e89	Standard query (0)	d1t9jheyiyj1h6.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:23.492468119 CEST	192.168.2.4	1.1.1.1	0xd2c3	Standard query (0)	d1t9jheyiyj1h6.cloudfront.net	65	IN (0x0001)	false
Apr 16, 2024 16:01:23.494638920 CEST	192.168.2.4	1.1.1.1	0x5248	Standard query (0)	www.nurse-jobs-in-us-19058.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:23.494793892 CEST	192.168.2.4	1.1.1.1	0xf606	Standard query (0)	www.nurse-jobs-in-us-19058.com	65	IN (0x0001)	false
Apr 16, 2024 16:01:24.086781025 CEST	192.168.2.4	1.1.1.1	0xc1f0	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:24.087019920 CEST	192.168.2.4	1.1.1.1	0x130e	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Apr 16, 2024 16:01:24.681601048 CEST	192.168.2.4	1.1.1.1	0x4c99	Standard query (0)	www.adsensecustomsearchads.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:24.682188988 CEST	192.168.2.4	1.1.1.1	0xd30a	Standard query (0)	www.adsensecustomsearchads.com	65	IN (0x0001)	false
Apr 16, 2024 16:01:25.807173967 CEST	192.168.2.4	1.1.1.1	0xd791	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:25.807651997 CEST	192.168.2.4	1.1.1.1	0x587f	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 16, 2024 16:01:20.688256025 CEST	1.1.1.1	192.168.2.4	0xfc7e	No error (0)	fr0qzh.ncjfhzfdhcxvxcz.com	d2hny5gy9445xa.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 16:01:20.704171896 CEST	1.1.1.1	192.168.2.4	0x89e1	No error (0)	fr0qzh.ncjfhzfdhcxvxcz.com	d2hny5gy9445xa.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 16:01:20.704171896 CEST	1.1.1.1	192.168.2.4	0x89e1	No error (0)	d2hny5gy9445xa.cloudfront.net		18.160.78.67	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:20.704171896 CEST	1.1.1.1	192.168.2.4	0x89e1	No error (0)	d2hny5gy9445xa.cloudfront.net		18.160.78.55	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:20.704171896 CEST	1.1.1.1	192.168.2.4	0x89e1	No error (0)	d2hny5gy9445xa.cloudfront.net		18.160.78.38	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:20.704171896 CEST	1.1.1.1	192.168.2.4	0x89e1	No error (0)	d2hny5gy9445xa.cloudfront.net		18.160.78.40	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:21.268237114 CEST	1.1.1.1	192.168.2.4	0x2d27	No error (0)	www.nurse-jobs-in-us-19058.com		104.247.82.91	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:22.452642918 CEST	1.1.1.1	192.168.2.4	0x60af	No error (0)	d1t9jheyiyj1h6.cloudfront.net		18.160.37.59	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:22.452642918 CEST	1.1.1.1	192.168.2.4	0x60af	No error (0)	d1t9jheyiyj1h6.cloudfront.net		18.160.37.112	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:22.452642918 CEST	1.1.1.1	192.168.2.4	0x60af	No error (0)	d1t9jheyiyj1h6.cloudfront.net		18.160.37.109	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:22.452642918 CEST	1.1.1.1	192.168.2.4	0x60af	No error (0)	d1t9jheyiyj1h6.cloudfront.net		18.160.37.231	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:22.682914972 CEST	1.1.1.1	192.168.2.4	0x5305	No error (0)	www.google.com		74.125.138.147	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:22.682914972 CEST	1.1.1.1	192.168.2.4	0x5305	No error (0)	www.google.com		74.125.138.103	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:22.682914972 CEST	1.1.1.1	192.168.2.4	0x5305	No error (0)	www.google.com		74.125.138.104	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:22.682914972 CEST	1.1.1.1	192.168.2.4	0x5305	No error (0)	www.google.com		74.125.138.106	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:22.682914972 CEST	1.1.1.1	192.168.2.4	0x5305	No error (0)	www.google.com		74.125.138.99	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:22.682914972 CEST	1.1.1.1	192.168.2.4	0x5305	No error (0)	www.google.com		74.125.138.105	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:22.683088064 CEST	1.1.1.1	192.168.2.4	0xfcbb	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 16, 2024 16:01:23.590536118 CEST	1.1.1.1	192.168.2.4	0x1698	No error (0)	www.google.com		142.250.9.106	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:23.590536118 CEST	1.1.1.1	192.168.2.4	0x1698	No error (0)	www.google.com		142.250.9.103	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:23.590536118 CEST	1.1.1.1	192.168.2.4	0x1698	No error (0)	www.google.com		142.250.9.99	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:23.590536118 CEST	1.1.1.1	192.168.2.4	0x1698	No error (0)	www.google.com		142.250.9.105	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:23.590536118 CEST	1.1.1.1	192.168.2.4	0x1698	No error (0)	www.google.com		142.250.9.147	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:23.590536118 CEST	1.1.1.1	192.168.2.4	0x1698	No error (0)	www.google.com		142.250.9.104	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:23.590797901 CEST	1.1.1.1	192.168.2.4	0x8be7	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 16, 2024 16:01:23.599950075 CEST	1.1.1.1	192.168.2.4	0x1e89	No error (0)	d1t9jheyiyj1h6.cloudfront.net		18.160.37.59	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:23.599950075 CEST	1.1.1.1	192.168.2.4	0x1e89	No error (0)	d1t9jheyiyj1h6.cloudfront.net		18.160.37.231	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:23.599950075 CEST	1.1.1.1	192.168.2.4	0x1e89	No error (0)	d1t9jheyiyj1h6.cloudfront.net		18.160.37.109	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:23.599950075 CEST	1.1.1.1	192.168.2.4	0x1e89	No error (0)	d1t9jheyiyj1h6.cloudfront.net		18.160.37.112	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:23.618828058 CEST	1.1.1.1	192.168.2.4	0x5248	No error (0)	www.nurse-jobs-in-us-19058.com		104.247.82.91	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:24.192437887 CEST	1.1.1.1	192.168.2.4	0xc1f0	No error (0)	syndicatedsearch.goog		142.250.9.101	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:24.192437887 CEST	1.1.1.1	192.168.2.4	0xc1f0	No error (0)	syndicatedsearch.goog		142.250.9.138	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:24.192437887 CEST	1.1.1.1	192.168.2.4	0xc1f0	No error (0)	syndicatedsearch.goog		142.250.9.100	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:24.192437887 CEST	1.1.1.1	192.168.2.4	0xc1f0	No error (0)	syndicatedsearch.goog		142.250.9.139	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:24.192437887 CEST	1.1.1.1	192.168.2.4	0xc1f0	No error (0)	syndicatedsearch.goog		142.250.9.102	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:24.192437887 CEST	1.1.1.1	192.168.2.4	0xc1f0	No error (0)	syndicatedsearch.goog		142.250.9.113	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:24.786241055 CEST	1.1.1.1	192.168.2.4	0x4c99	No error (0)	www.adsensecustomsearchads.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 16:01:24.786241055 CEST	1.1.1.1	192.168.2.4	0x4c99	No error (0)	www3.l.google.com		142.250.105.102	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:24.786241055 CEST	1.1.1.1	192.168.2.4	0x4c99	No error (0)	www3.l.google.com		142.250.105.113	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:24.786241055 CEST	1.1.1.1	192.168.2.4	0x4c99	No error (0)	www3.l.google.com		142.250.105.100	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:24.786241055 CEST	1.1.1.1	192.168.2.4	0x4c99	No error (0)	www3.l.google.com		142.250.105.138	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:24.786241055 CEST	1.1.1.1	192.168.2.4	0x4c99	No error (0)	www3.l.google.com		142.250.105.139	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:24.786241055 CEST	1.1.1.1	192.168.2.4	0x4c99	No error (0)	www3.l.google.com		142.250.105.101	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:24.787617922 CEST	1.1.1.1	192.168.2.4	0xd30a	No error (0)	www.adsensecustomsearchads.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 16:01:25.911588907 CEST	1.1.1.1	192.168.2.4	0xd791	No error (0)	www.google.com		142.250.9.147	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:25.911588907 CEST	1.1.1.1	192.168.2.4	0xd791	No error (0)	www.google.com		142.250.9.104	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:25.911588907 CEST	1.1.1.1	192.168.2.4	0xd791	No error (0)	www.google.com		142.250.9.103	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:25.911588907 CEST	1.1.1.1	192.168.2.4	0xd791	No error (0)	www.google.com		142.250.9.99	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:25.911588907 CEST	1.1.1.1	192.168.2.4	0xd791	No error (0)	www.google.com		142.250.9.105	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:25.911588907 CEST	1.1.1.1	192.168.2.4	0xd791	No error (0)	www.google.com		142.250.9.106	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:25.911926985 CEST	1.1.1.1	192.168.2.4	0x587f	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 16, 2024 16:01:36.006648064 CEST	1.1.1.1	192.168.2.4	0xb7db	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:36.006648064 CEST	1.1.1.1	192.168.2.4	0xb7db	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:37.146682978 CEST	1.1.1.1	192.168.2.4	0x5fd5	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 16:01:37.146682978 CEST	1.1.1.1	192.168.2.4	0x5fd5	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:01:51.938203096 CEST	1.1.1.1	192.168.2.4	0xbf47	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 16:01:51.938203096 CEST	1.1.1.1	192.168.2.4	0xbf47	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:02:10.618601084 CEST	1.1.1.1	192.168.2.4	0x43d0	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 16:02:10.618601084 CEST	1.1.1.1	192.168.2.4	0x43d0	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 16, 2024 16:02:31.891967058 CEST	1.1.1.1	192.168.2.4	0x22ac	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 16:02:31.891967058 CEST	1.1.1.1	192.168.2.4	0x22ac	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.nurse-jobs-in-us-19058.com

https:

d1t9jheyiyj1h6.cloudfront.net

www.google.com

www.adsensecustomsearchads.com

fs.microsoft.com

fr0qzh.ncjfhzfdhcxvxcz.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	18.160.78.67	80	1352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 16, 2024 16:01:20.809340000 CEST	441	OUT	GET / HTTP/1.1 Host: fr0qzh.ncjfhzfdhcxvxcz.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 16, 2024 16:01:20.914053917 CEST	400	IN	HTTP/1.1 302 Found Server: CloudFront Date: Tue, 16 Apr 2024 14:01:20 GMT Content-Length: 0 Connection: keep-alive Access-Control-Allow-Origin: * Location: /us Max-Age: 60 X-Cache: FunctionGeneratedResponse from cloudfront Via: 1.1 bb8a3038b8c276597157e43f3993a1ea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 X-Amz-Cf-Id: KuBBIJpjdCd-ucWplo_yjRnJGrC-ODEC3zQh7WFuPNmwsEicJvqP7g==
Apr 16, 2024 16:01:20.916475058 CEST	443	OUT	GET /us HTTP/1.1 Host: fr0qzh.ncjfhzfdhcxvxcz.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 16, 2024 16:01:21.119513035 CEST	1289	IN	HTTP/1.1 307 Temporary Redirect Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Date: Tue, 16 Apr 2024 14:01:21 GMT Server: nginx X-Status: OK X-UID: Root=1-661e84b0-0da839ad51e7fbf66c16f4cb Location: https://www.nurse-jobs-in-us-19058.com?backfill=0&lrt=1&KW1=Nurse+Jobs+In+US+Salary&KW2=Rn+Nurse&KW3=Highest+Paying+Travel+Nursing+Jobs&KW4=Nursing+Jobs+Atlanta&KW5=Work+Nurse+In+US&KW6=Nursing+Jobs+US&domainname=0&searchbox=0&subid1=f267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8&track_id=f267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8&kcoptimize=1&theme=DoriPlus&vertical=Jobs+%26+Education&offer=Nurse+Jobs+in+US+PR Referrer-Policy: unsafe-url X-Cache: Miss from cloudfront Via: 1.1 bb8a3038b8c276597157e43f3993a1ea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 X-Amz-Cf-Id: CsaPD8TnKtVH6RnnEvxLa_8NI1_nm4cybhHXpEDiIwfK7ld31_lDrQ== Data Raw: 31 65 34 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 31 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 75 72 73 65 2d 6a 6f 62 73 2d 69 6e 2d 75 73 2d 31 39 30 35 38 2e 63 6f 6d 3f 62 61 63 6b 66 69 6c 6c 3d 30 26 6c 72 74 3d 31 26 4b 57 31 3d 4e 75 72 73 65 2b 4a 6f 62 73 2b 49 6e 2b 55 53 2b 53 61 6c 61 72 79 26 4b 57 32 3d 52 6e 2b 4e 75 72 73 65 26 4b 57 33 3d 48 69 67 68 65 73 74 2b 50 61 79 69 6e 67 2b 54 72 61 76 65 6c 2b 4e 75 72 73 69 6e 67 2b 4a 6f 62 73 26 4b 57 34 3d 4e 75 72 73 69 6e 67 2b 4a 6f 62 73 2b 41 74 6c 61 6e 74 61 26 4b 57 35 3d 57 6f 72 6b 2b 4e 75 72 73 65 2b 49 6e 2b 55 53 26 4b 57 36 3d 4e 75 72 73 69 6e 67 2b 4a 6f 62 73 2b 55 53 26 64 6f 6d 61 69 6e 6e 61 6d 65 3d 30 26 73 65 61 72 63 68 62 6f 78 3d 30 26 73 75 62 69 64 31 3d 66 32 36 37 61 31 66 31 33 34 32 32 66 30 37 33 31 62 32 32 65 39 35 38 35 30 64 38 34 62 31 36 65 61 64 30 61 39 65 Data Ascii: 1e46<!DOCTYPE html><html><head> <meta http-equiv="refresh" content="1;url=https://www.nurse-jobs-in-us-19058.com?backfill=0&lrt=1&KW1=Nurse+Jobs+In+US+Salary&KW2=Rn+Nurse&KW3=Highest+Paying+Travel+Nursing+Jobs&KW4=Nursing+Jobs+Atlanta&KW5=Work+Nurse+In+US&KW6=Nursing+Jobs+US&domainname=0&searchbox=0&subid1=f267a1f13422f0731b22e95850d84b16ead0a9e
Apr 16, 2024 16:01:21.119537115 CEST	1289	IN	Data Raw: 30 39 37 37 64 39 33 35 63 39 32 36 63 34 65 36 32 65 62 64 65 38 34 64 38 26 74 72 61 63 6b 5f 69 64 3d 66 32 36 37 61 31 66 31 33 34 32 32 66 30 37 33 31 62 32 32 65 39 35 38 35 30 64 38 34 62 31 36 65 61 64 30 61 39 65 30 39 37 37 64 39 33 35 Data Ascii: 0977d935c926c4e62ebde84d8&track_id=f267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8&kcoptimize=1&theme=DoriPlus&vertical=Jobs+%26+Education&offer=Nurse+Jobs+in+US+PR"> <style> #content { width: 800px;
Apr 16, 2024 16:01:21.119548082 CEST	1289	IN	Data Raw: 51 6c 5a 6c 45 52 4e 32 51 78 4d 52 63 41 69 54 65 61 47 32 51 78 4a 35 52 6e 41 4f 76 31 45 4f 63 45 64 77 55 4d 5a 44 44 33 42 0a 49 63 4b 7a 4e 71 33 42 4a 63 4a 4c 55 41 42 42 77 53 74 72 4e 42 74 6a 66 33 47 55 47 42 64 4c 66 43 74 61 64 57 Data Ascii: QlZlERN2QxMRcAiTeaG2QxJ5RnAOv1EOcEdwUMZDD3BIcKzNq3BJcJLUABBwStrNBtjf3GUGBdLfCtadWMzUz6cDxN/IZQMCvdTBcAIAsli0jOHSJeSAqmlhNr0awo7RJ19TJORqdAXVEEVZyjyKtE3Bg3oZE2iK8oeiKkFZGiCaggelSTiA2LhxiZLBSjZjBL2siNBOFQ84LxHA+mYEiRJzBO7ZCQIAIfkECQoAAAAsAAAAA
Apr 16, 2024 16:01:21.119560003 CEST	1289	IN	Data Raw: 4f 58 44 51 59 36 56 41 41 55 61 6b 69 68 4e 31 67 53 4c 61 4a 31 49 59 4f 47 43 68 67 58 58 71 45 55 70 51 39 41 53 52 6c 0a 44 59 68 54 30 78 51 34 63 41 43 4a 44 68 71 44 44 35 6d 52 4b 6a 43 41 59 75 41 72 6a 42 6d 56 4b 44 50 39 2b 56 52 6c Data Ascii: OXDQY6VAAUakihN1gSLaJ1IYOGChgXXqEUpQ9ASRlDYhT0xQ4cACJDhqDD5mRKjCAYuArjBmVKDP9+VRljMyMHDwcfuBlBooSCBQwJiqkJAgAh+QQJCgAAACwAAAAAHwAfAAAG/0CAcEgUDAgFA8BQIAwExKh0eEAkrlcA9oo4TKcKwharHScIiu9wwTBn3QnGQg1owBNld+O72N/zZnVzRApteFsODwoQABAKDw5bZQxpQ2J
Apr 16, 2024 16:01:21.119571924 CEST	1289	IN	Data Raw: 4a 4e 79 58 49 41 41 68 2b 51 51 4a 43 67 41 41 41 43 77 41 41 41 41 41 48 77 41 66 41 41 41 47 2f 30 43 41 63 45 68 0a 38 4a 44 41 57 43 73 42 51 49 41 77 45 78 4b 68 55 2b 48 46 77 4b 6c 67 73 49 4d 48 6c 49 67 37 54 71 51 65 54 4c 57 2b 37 58 Data Ascii: JNyXIAAh+QQJCgAAACwAAAAAHwAfAAAG/0CAcEh8JDAWCsBQIAwExKhU+HFwKlgsIMHlIg7TqQeTLW+7XYIiPGSAymY0mrFgA0LwuLzbCC/6eVlnewkADXVECgxcAGUaGRdQEAoPDmhnDGtDBJcVHQYbYRIRhWgEQwd7AB52AGt7YAAIchETrUITpGgIAAJ7ErdDEnsCA3IOwUSWaAOcaA/JQ0amBXKa0QpyBQZyENFCEHIG3
Apr 16, 2024 16:01:21.119582891 CEST	1289	IN	Data Raw: 4e 78 62 47 51 76 62 58 6c 7a 63 57 78 6b 4c 6e 4e 76 59 32 73 6e 49 43 67 79 4b 53 42 70 62 69 41 38 59 6a 34 0a 76 61 47 39 74 5a 53 39 68 61 6d 46 34 62 47 39 68 5a 43 39 33 64 33 63 76 62 47 6c 69 63 6d 46 70 63 6d 6c 6c 63 79 39 6a 62 47 46 Data Ascii: NxbGQvbXlzcWxkLnNvY2snICgyKSBpbiA8Yj4vaG9tZS9hamF4bG9hZC93d3cvbGlicmFpcmllcy9jbGFzcy5teXNxbC5waHA8L2I+IG9uIGxpbmUgPGI+Njg8L2I+PGJyIC8+CjxiciAvPgo8Yj5XYXJuaW5nPC9iPjogIG15c3FsX3F1ZXJ5KCkgWzxhIGhyZWY9J2Z1bmN0aW9uLm15c3FsLXF1ZXJ5Jz5mdW5jdGlvbi5
Apr 16, 2024 16:01:21.119595051 CEST	958	IN	Data Raw: 61 6e 74 61 26 4b 57 35 3d 57 6f 72 6b 2b 4e 75 72 73 65 2b 49 6e 2b 55 53 26 4b 57 36 3d 4e 75 72 73 69 6e 67 2b 4a 6f 62 73 2b 55 53 26 64 6f 6d 61 69 6e 6e 61 6d 65 3d 30 26 73 65 61 72 63 68 62 6f 78 3d 30 26 73 75 62 69 64 31 3d 66 32 36 37 Data Ascii: anta&KW5=Work+Nurse+In+US&KW6=Nursing+Jobs+US&domainname=0&searchbox=0&subid1=f267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8&track_id=f267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8&kcoptimize=1&theme=DoriPlu
Apr 16, 2024 16:01:21.119606018 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Apr 16, 2024 16:02:06.130839109 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49737	104.247.82.91	443	1352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 14:01:21 UTC	1089	OUT	GET /?backfill=0&lrt=1&KW1=Nurse+Jobs+In+US+Salary&KW2=Rn+Nurse&KW3=Highest+Paying+Travel+Nursing+Jobs&KW4=Nursing+Jobs+Atlanta&KW5=Work+Nurse+In+US&KW6=Nursing+Jobs+US&domainname=0&searchbox=0&subid1=f267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8&track_id=f267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8&kcoptimize=1&theme=DoriPlus&vertical=Jobs+%26+Education&offer=Nurse+Jobs+in+US+PR HTTP/1.1 Host: www.nurse-jobs-in-us-19058.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 14:01:22 UTC	857	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Content-Type: text/html; charset=UTF-8 Date: Tue, 16 Apr 2024 14:01:22 GMT Server: nginx Vary: Accept-Encoding X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_B7jLp9LWlX3r7QfpjH3gpNyj3EPlze2UCK5MUX7pot7VBTnfuTk5K/SPez6cJrihpcGoBJNsZ/3H6exx+c3dgA== X-Buckets: bucket077 X-Domain: nurse-jobs-in-us-19058.com X-Language: english X-Subdomain: www X-Template: tpl_DoriPlus_twoclick Connection: close Transfer-Encoding: chunked
2024-04-16 14:01:22 UTC	329	IN	Data Raw: 33 63 39 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4c 71 75 44 46 45 54 58 52 6e 30 48 72 30 35 66 55 50 37 45 4a 54 37 37 78 59 6e 50 6d 52 62 70 4d 79 34 76 6b 38 4b 59 69 48 6e 6b 4e 70 65 64 6e 6a 4f 41 4e 4a 63 61 58 44 58 63 4b 51 4a 4e 30 6e 58 4b 5a 4a 4c 37 54 63 69 4a 44 38 41 6f 48 58 4b 31 35 38 43 41 77 45 41 41 51 3d 3d 5f 42 37 6a 4c 70 39 4c 57 6c 58 33 72 37 51 66 70 6a 48 33 67 70 4e 79 6a 33 45 50 6c 7a 65 32 55 43 4b 35 4d 55 58 37 70 6f 74 37 56 42 54 6e 66 75 54 6b 35 4b 2f 53 50 65 7a 36 63 4a 72 69 68 70 63 47 6f 42 4a 4e 73 5a 2f 33 48 36 65 78 78 2b Data Ascii: 3c92<!DOCTYPE html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_B7jLp9LWlX3r7QfpjH3gpNyj3EPlze2UCK5MUX7pot7VBTnfuTk5K/SPez6cJrihpcGoBJNsZ/3H6exx+
2024-04-16 14:01:22 UTC	2372	IN	Data Raw: 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 6e 75 72 73 65 2d 6a 6f 62 73 2d 69 6e 2d 75 73 2d 31 39 30 35 38 2e 63 6f 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0a 2e 61 73 73 65 74 5f 73 74 61 72 30 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a Data Ascii: http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/> <title>nurse-jobs-in-us-19058.com</title> <style media="screen">.asset_star0 {background:
2024-04-16 14:01:22 UTC	538	IN	Data Raw: 39 35 25 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 35 30 30 70 78 3b 0a 7d 0a 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 30 70 78 29 20 7b 0a 0a 20 20 20 20 2e 77 72 61 70 70 65 72 31 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 31 35 30 30 70 78 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 77 72 61 70 70 65 72 32 20 7b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 27 2f 2f 64 31 74 39 6a 68 65 79 69 79 6a 31 68 36 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 64 6f 72 69 70 Data Ascii: 95%; max-width: 500px;}@media screen and (min-width:600px) { .wrapper1 { max-width:1500px; margin-left:auto; margin-right:auto; } .wrapper2 { background:url('//d1t9jheyiyj1h6.cloudfront.net/themes/dorip
2024-04-16 14:01:22 UTC	4744	IN	Data Raw: 72 61 76 65 6c 20 4e 75 72 73 69 6e 67 20 4a 6f 62 73 2c 4e 75 72 73 69 6e 67 20 4a 6f 62 73 20 41 74 6c 61 6e 74 61 2c 57 6f 72 6b 20 4e 75 72 73 65 20 49 6e 20 55 53 2c 4e 75 72 73 69 6e 67 20 4a 6f 62 73 20 55 53 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 30 30 70 78 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 63 48 6f 6c 64 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 72 65 6d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a Data Ascii: ravel Nursing Jobs,Nursing Jobs Atlanta,Work Nurse In US,Nursing Jobs US" /> <style> @media (min-width: 600px) { .tcHolder { margin-top: 3rem } } </style>
2024-04-16 14:01:22 UTC	5930	IN	Data Raw: 3d 3d 3d 20 74 72 75 65 20 7c 7c 20 73 74 61 74 75 73 2e 62 6c 6f 63 6b 65 64 20 3d 3d 20 22 74 72 75 65 22 20 29 20 26 26 20 73 74 61 74 75 73 2e 65 72 72 6f 72 5f 63 6f 64 65 20 21 3d 20 32 35 29 20 7b 61 6a 61 78 51 75 65 72 79 28 73 63 72 69 70 74 50 61 74 68 20 2b 20 22 2f 74 72 61 63 6b 2e 70 68 70 3f 64 6f 6d 61 69 6e 3d 22 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 6f 6d 61 69 6e 29 20 2b 20 22 26 63 61 66 3d 31 26 74 6f 67 67 6c 65 3d 62 6c 6f 63 6b 26 72 65 61 73 6f 6e 3d 6f 74 68 65 72 26 75 69 64 3d 22 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 75 6e 69 71 75 65 54 72 61 63 6b 69 6e 67 49 44 29 29 3b 7d 69 66 20 28 73 74 61 74 75 73 2e 65 72 72 6f 72 63 6f 64 65 20 26 26 20 21 73 74 61 74 75 73 Data Ascii: === true \|\| status.blocked == "true" ) && status.error_code != 25) {ajaxQuery(scriptPath + "/track.php?domain=" + encodeURIComponent(domain) + "&caf=1&toggle=block&reason=other&uid=" + encodeURIComponent(uniqueTrackingID));}if (status.errorcode && !status
2024-04-16 14:01:22 UTC	1599	IN	Data Raw: 63 28 61 5b 30 5d 2c 20 61 5b 31 5d 2c 20 61 5b 32 5d 2c 20 61 5b 33 5d 29 3b 63 61 73 65 20 35 3a 72 65 74 75 72 6e 20 6e 65 77 20 63 28 61 5b 30 5d 2c 20 61 5b 31 5d 2c 20 61 5b 32 5d 2c 20 61 5b 33 5d 2c 20 61 5b 34 5d 29 3b 7d 72 65 74 75 72 6e 20 63 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 20 61 29 3b 7d 3b 7d 66 75 6e 63 74 69 6f 6e 20 72 65 6c 61 74 65 64 43 61 6c 6c 62 61 63 6b 28 6f 70 74 69 6f 6e 73 29 20 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 7d 66 75 6e 63 74 69 6f 6e 20 72 65 6c 61 74 65 64 46 61 6c 6c 62 61 63 6b 28 63 61 6c 6c 62 61 63 6b 29 20 7b 72 65 74 75 72 6e 20 63 61 6c 6c 62 61 63 6b 28 29 3b 7d 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 6c 73 Data Ascii: c(a[0], a[1], a[2], a[3]);case 5:return new c(a[0], a[1], a[2], a[3], a[4]);}return c.apply(null, a);};}function relatedCallback(options) {return false;}function relatedFallback(callback) {return callback();}</script><script type="text/javascript">var ls
2024-04-16 14:01:22 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49740	18.160.37.59	443	1352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 14:01:22 UTC	642	OUT	GET /themes/doriplus_40a0ff4d/img/arrows.png HTTP/1.1 Host: d1t9jheyiyj1h6.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nurse-jobs-in-us-19058.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 14:01:23 UTC	447	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11375 Connection: close Server: nginx Date: Tue, 16 Apr 2024 14:01:23 GMT Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT ETag: "65fc1e7b-2c6f" Accept-Ranges: bytes Front_End_Https: on X-Cache: Miss from cloudfront Via: 1.1 1063d14b5dde23a7d5dd1293e6ceb59c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P1 X-Amz-Cf-Id: 6cyJdzlt97lBMADYJ6cYLMWcah3H-gb_1lbeePUnPDTKq09G4NVBlg==
2024-04-16 14:01:23 UTC	5501	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 58 08 03 00 00 00 4f 6d d4 16 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 00 50 4c 54 45 00 00 00 ff ff ff 63 64 74 49 4b 5e 49 4b 5d 49 4b 5c 30 33 49 48 4b 5f 61 63 73 63 65 75 62 64 74 63 65 74 15 19 30 3d 40 53 48 4b 5d 49 4c 5d 48 4b 5c 4d 50 62 4e 51 62 4f 52 63 12 17 2e 14 19 30 22 26 3b 28 2c 40 2b 2f 42 30 34 49 2e 32 46 2f 33 47 2d 31 44 30 34 48 2e 32 45 30 34 47 31 35 48 32 36 49 35 39 4c 38 3c 50 36 3a 4d 39 3d 51 37 3b 4e 3a 3e 52 3a 3e 51 3b 3f 52 3c 40 53 49 4c 5c 62 65 75 61 64 74 62 65 74 63 66 74 62 65 73 13 18 2d 15 1a 30 1b 20 35 1c 21 36 1d 22 37 1e 23 38 1d 22 36 1f 24 39 20 25 3a 21 26 3b Data Ascii: PNGIHDRXOmtEXtSoftwareAdobe ImageReadyqe<PLTEcdtIK^IK]IK\03IHK_acsceubdtcet0=@SHK]IL]HK\MPbNQbORc.0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes-0 5!6"7#8"6$9 %:!&;
2024-04-16 14:01:23 UTC	5874	IN	Data Raw: af d0 de 6b f1 59 81 b4 cf 8a c6 fd 61 56 35 91 e4 ef f6 2e ee b3 02 79 bf 4a 7b 43 de 9d 0f ed e2 78 5f a6 5d 36 ee 7c bb 13 89 fe 6e 5f c6 bd 93 28 de d7 d1 de 88 77 e7 47 bb 28 de af d0 2e 1d 77 74 27 6c d7 80 bb 20 de fb 68 6f c0 7b 2d dc 5f 3f 57 9d 08 de 57 69 17 8f 3b ba 13 b6 ab c0 5d 08 ef 95 b4 d7 e6 dd f9 d3 2e 82 f7 b5 b4 cb c7 9d 7d 77 2a ba ed 7a 70 17 c0 fb 40 da 6b f2 3e 0a f7 a5 b3 e7 86 97 95 f7 f5 b4 cb c7 9d 6f 77 e2 bb 5d 0b ee 99 79 7f 76 71 04 bd af b7 c3 7d 24 ed 59 79 df fa dc ec 86 e4 e3 8e ee 84 ed 5a 70 cf c8 fb 48 da 6b f0 ee da d2 9e 8d f7 7e da 55 e0 8e ee 84 ed 6a 70 cf c4 7b 2d da 47 f2 ee da d3 9e 85 f7 2a da 75 e0 ce c6 3b 95 d8 c3 27 75 e2 9e 81 f7 da b4 77 3b bb d4 18 f7 46 b4 27 e7 bd 9a 76 25 b8 9f fc 1f 56 3a 95 d6 Data Ascii: kYaV5.yJ{Cx_]6\|n_(wG(.wt'l ho{-_?WWi;].}wzp@k>ow]yvq}$YyZpHk~Ujp{-Gu;'uw;F'v%V:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	104.247.82.91	443	1352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 14:01:23 UTC	1237	OUT	GET /track.php?domain=nurse-jobs-in-us-19058.com&toggle=browserjs&uid=MTcxMzI3NjA4Mi4xOTM4OjNmNjcyNmE2NTk3ZjdmNjgwZjJkYTkxNDI2ZTQ1YjZhZTBkY2YyMDY1OGU1MjExY2NhYjY2NDkzZTM5YzNjNWM6NjYxZTg0YjIyZjUwNA%3D%3D HTTP/1.1 Host: www.nurse-jobs-in-us-19058.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" device-memory: 8 rtt: 200 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 dpr: 1 downlink: 1.55 ect: 4g sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nurse-jobs-in-us-19058.com/?backfill=0&lrt=1&KW1=Nurse+Jobs+In+US+Salary&KW2=Rn+Nurse&KW3=Highest+Paying+Travel+Nursing+Jobs&KW4=Nursing+Jobs+Atlanta&KW5=Work+Nurse+In+US&KW6=Nursing+Jobs+US&domainname=0&searchbox=0&subid1=f267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8&track_id=f267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8&kcoptimize=1&theme=DoriPlus&vertical=Jobs+%26+Education&offer=Nurse+Jobs+in+US+PR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 14:01:23 UTC	539	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 Date: Tue, 16 Apr 2024 14:01:23 GMT Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49744	142.250.9.106	443	1352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 14:01:23 UTC	653	OUT	GET /adsense/domains/caf.js?abp=1 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nurse-jobs-in-us-19058.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 14:01:24 UTC	845	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 191034 Date: Tue, 16 Apr 2024 14:01:24 GMT Expires: Tue, 16 Apr 2024 14:01:24 GMT Cache-Control: private, max-age=3600 ETag: "13454177467236278012" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 14:01:24 UTC	410	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 31 30 37 33 34 33 38 39 38 34 37 33 37 32 35 30 39 36 39 38 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 33 2c 31 37 33 30 31 34 33 37 2c 31 37 33 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"10734389847372509698",packages:"domains",module:"ads",version:"1",m:{cei:"17300003,17301437,173
2024-04-16 14:01:24 UTC	1255	IN	Data Raw: 65 67 79 22 3a 74 72 75 65 2c 22 5f 65 6e 61 62 6c 65 4e 65 77 43 6f 6e 73 65 6e 74 53 74 72 61 74 65 67 79 22 3a 74 72 75 65 2c 22 5f 66 69 78 43 74 63 4c 69 6e 6b 73 4f 6e 49 6f 73 22 3a 74 72 75 65 2c 22 5f 67 6f 6f 67 45 6e 61 62 6c 65 51 75 70 22 3a 74 72 75 65 2c 22 5f 73 77 69 74 63 68 47 77 73 52 65 71 75 65 73 74 54 6f 55 73 65 41 64 73 65 6e 73 65 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 75 73 65 53 65 72 76 65 72 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f Data Ascii: egy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblo
2024-04-16 14:01:24 UTC	1255	IN	Data Raw: 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 65 2b 2b 2c 66 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 66 2c 67 29 7b 74 68 69 73 2e 62 65 3d 66 3b 65 61 28 74 68 69 73 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 67 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 62 65 7d Data Ascii: {if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.be=f;ea(this,"description",{configurable:!0,writable:!0,value:g})}if(a)return a;c.prototype.toString=function(){return this.be}
2024-04-16 14:01:24 UTC	1255	IN	Data Raw: 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 2c 6e 61 3b 0a 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 29 6e 61 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 65 6c 73 65 7b 76 61 72 20 6f 61 3b 61 3a 7b 76 61 72 20 70 61 3d 7b 61 3a 21 30 7d 2c 71 61 3d 7b 7d 3b 74 72 79 7b 71 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 70 61 3b 6f 61 3d 71 61 2e 61 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 61 29 7b 7d 6f 61 3d 21 31 7d 6e 61 3d 6f 61 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e Data Ascii: return new b},na;if("function"==typeof Object.setPrototypeOf)na=Object.setPrototypeOf;else{var oa;a:{var pa={a:!0},qa={};try{qa.__proto__=pa;oa=qa.a;break a}catch(a){}oa=!1}na=oa?function(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is n
2024-04-16 14:01:24 UTC	1255	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 28 74 68 69 73 2e 43 29 3b 69 66 28 74 68 69 73 2e 43 2e 66 61 29 72 65 74 75 72 6e 20 78 61 28 74 68 69 73 2c 74 68 69 73 2e 43 2e 66 61 5b 22 74 68 72 6f 77 22 5d 2c 61 2c 74 68 69 73 2e 43 2e 53 61 29 3b 74 68 69 73 2e 43 2e 58 61 28 61 29 3b 72 65 74 75 72 6e 20 79 61 28 74 68 69 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 78 61 28 61 2c 62 2c 63 2c 64 29 7b 74 72 79 7b 76 61 72 20 65 3d 62 2e 63 61 6c 6c 28 61 2e 43 2e 66 61 2c 63 29 3b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 74 65 72 61 74 6f 72 20 72 65 73 75 6c 74 20 22 2b 65 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 3b 69 66 28 21 65 2e 64 Data Ascii: unction(a){va(this.C);if(this.C.fa)return xa(this,this.C.fa["throw"],a,this.C.Sa);this.C.Xa(a);return ya(this)};function xa(a,b,c,d){try{var e=b.call(a.C.fa,c);if(!(e instanceof Object))throw new TypeError("Iterator result "+e+" is not an object");if(!e.d
2024-04-16 14:01:24 UTC	1255	IN	Data Raw: 63 74 69 6f 6e 20 63 28 29 7b 74 68 69 73 2e 63 61 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 64 28 67 29 7b 72 65 74 75 72 6e 20 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 3f 67 3a 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 28 67 29 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 2e 63 61 29 7b 74 68 69 73 2e 63 61 3d 5b 5d 3b 76 61 72 20 68 3d 74 68 69 73 3b 74 68 69 73 2e 6e 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 2e 56 65 28 29 7d 29 7d 74 68 69 73 2e 63 61 2e 70 75 73 68 28 67 29 7d 3b 76 61 72 20 65 3d 68 61 2e 73 65 74 54 69 6d 65 6f 75 74 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 64 3d 66 75 6e 63 74 69 6f 6e Data Ascii: ction c(){this.ca=null}function d(g){return g instanceof b?g:new b(function(h){h(g)})}if(a)return a;c.prototype.md=function(g){if(null==this.ca){this.ca=[];var h=this;this.nd(function(){h.Ve()})}this.ca.push(g)};var e=ha.setTimeout;c.prototype.nd=function
2024-04-16 14:01:24 UTC	1255	IN	Data Raw: 2e 57 61 3d 68 3b 32 3d 3d 3d 74 68 69 73 2e 47 26 26 74 68 69 73 2e 54 66 28 29 3b 74 68 69 73 2e 57 65 28 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 54 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 74 68 69 73 3b 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 67 2e 43 66 28 29 29 7b 76 61 72 20 68 3d 68 61 2e 63 6f 6e 73 6f 6c 65 3b 0a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 68 26 26 68 2e 65 72 72 6f 72 28 67 2e 57 61 29 7d 7d 2c 31 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 43 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 42 64 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 67 3d 68 61 2e 43 75 73 74 6f 6d 45 76 65 6e 74 2c 68 3d 68 61 2e 45 76 65 6e 74 2c 6b 3d 68 61 2e 64 69 73 70 61 74 63 68 45 76 Data Ascii: .Wa=h;2===this.G&&this.Tf();this.We()};b.prototype.Tf=function(){var g=this;e(function(){if(g.Cf()){var h=ha.console;"undefined"!==typeof h&&h.error(g.Wa)}},1)};b.prototype.Cf=function(){if(this.Bd)return!1;var g=ha.CustomEvent,h=ha.Event,k=ha.dispatchEv
2024-04-16 14:01:24 UTC	1255	IN	Data Raw: 3d 74 68 69 73 3b 6e 75 6c 6c 3d 3d 74 68 69 73 2e 42 61 3f 66 2e 6d 64 28 6b 29 3a 74 68 69 73 2e 42 61 2e 70 75 73 68 28 6b 29 3b 74 68 69 73 2e 42 64 3d 21 30 7d 3b 62 2e 72 65 73 6f 6c 76 65 3d 64 3b 62 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 6b 28 67 29 7d 29 7d 3b 62 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 77 28 67 29 2c 6e 3d 6c 2e 6e 65 78 74 28 29 3b 21 6e 2e 64 6f 6e 65 3b 6e 3d 6c 2e 6e 65 78 74 28 29 29 64 28 6e 2e 76 61 6c 75 65 29 2e 6a 62 28 68 2c 6b 29 7d 29 7d 3b 62 2e 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b Data Ascii: =this;null==this.Ba?f.md(k):this.Ba.push(k);this.Bd=!0};b.resolve=d;b.reject=function(g){return new b(function(h,k){k(g)})};b.race=function(g){return new b(function(h,k){for(var l=w(g),n=l.next();!n.done;n=l.next())d(n.value).jb(h,k)})};b.all=function(g){
2024-04-16 14:01:24 UTC	1255	IN	Data Raw: 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 30 3b 66 3c 65 3b 66 2b 2b 29 7b 76 61 72 20 67 3d 64 5b 66 5d 3b 69 66 28 62 2e 63 61 6c 6c 28 63 2c 67 2c 66 2c 64 29 29 7b 62 3d 67 3b 62 72 65 61 6b 20 61 7d 7d 62 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 6e 20 62 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 46 61 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 2b 3d 22 22 29 3b 76 61 72 20 63 3d 30 2c 64 3d 21 31 2c 65 3d 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f Data Ascii: nction(a){return a?a:function(b,c){a:{var d=this;d instanceof String&&(d=String(d));for(var e=d.length,f=0;f<e;f++){var g=d[f];if(b.call(c,g,f,d)){b=g;break a}}b=void 0}return b}});function Fa(a,b){a instanceof String&&(a+="");var c=0,d=!1,e={next:functio
2024-04-16 14:01:24 UTC	1255	IN	Data Raw: 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 62 3d 3d 3d 63 3f 30 21 3d 3d 62 7c 7c 31 2f 62 3d 3d 3d 31 2f 63 3a 62 21 3d 3d 62 26 26 63 21 3d 3d 63 7d 7d 29 3b 0a 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 3b 63 3d 63 7c 7c 30 3b 66 6f 72 28 30 3e 63 26 26 28 63 3d 4d 61 74 68 2e 6d 61 78 28 63 2b 65 2c 30 29 29 3b 63 3c 65 3b 63 2b 2b 29 7b 76 61 72 20 66 3d 64 5b 63 5d 3b 69 66 28 66 Data Ascii: rn a?a:function(b,c){return b===c?0!==b\|\|1/b===1/c:b!==b&&c!==c}});q("Array.prototype.includes",function(a){return a?a:function(b,c){var d=this;d instanceof String&&(d=String(d));var e=d.length;c=c\|\|0;for(0>c&&(c=Math.max(c+e,0));c<e;c++){var f=d[c];if(f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49745	18.160.37.59	443	1352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 14:01:23 UTC	392	OUT	GET /themes/doriplus_40a0ff4d/img/arrows.png HTTP/1.1 Host: d1t9jheyiyj1h6.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 14:01:24 UTC	454	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11375 Connection: close Server: nginx Date: Tue, 16 Apr 2024 14:01:23 GMT Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT ETag: "65fc1e7b-2c6f" Accept-Ranges: bytes Front_End_Https: on X-Cache: Hit from cloudfront Via: 1.1 d2e1e0faea045dae6d3b3de4549846ee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P1 X-Amz-Cf-Id: MtkRLhXRyVF-eHBFix8FDIhckq4GvlHcfN20JS1UF8qDIqlGfBuwOg== Age: 1
2024-04-16 14:01:24 UTC	11375	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 58 08 03 00 00 00 4f 6d d4 16 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 00 50 4c 54 45 00 00 00 ff ff ff 63 64 74 49 4b 5e 49 4b 5d 49 4b 5c 30 33 49 48 4b 5f 61 63 73 63 65 75 62 64 74 63 65 74 15 19 30 3d 40 53 48 4b 5d 49 4c 5d 48 4b 5c 4d 50 62 4e 51 62 4f 52 63 12 17 2e 14 19 30 22 26 3b 28 2c 40 2b 2f 42 30 34 49 2e 32 46 2f 33 47 2d 31 44 30 34 48 2e 32 45 30 34 47 31 35 48 32 36 49 35 39 4c 38 3c 50 36 3a 4d 39 3d 51 37 3b 4e 3a 3e 52 3a 3e 51 3b 3f 52 3c 40 53 49 4c 5c 62 65 75 61 64 74 62 65 74 63 66 74 62 65 73 13 18 2d 15 1a 30 1b 20 35 1c 21 36 1d 22 37 1e 23 38 1d 22 36 1f 24 39 20 25 3a 21 26 3b Data Ascii: PNGIHDRXOmtEXtSoftwareAdobe ImageReadyqe<PLTEcdtIK^IK]IK\03IHK_acsceubdtcet0=@SHK]IL]HK\MPbNQbORc.0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes-0 5!6"7#8"6$9 %:!&;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49743	104.247.82.91	443	1352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 14:01:24 UTC	1104	OUT	GET /ls.php?t=661e84b2&token=919606b8901427ba59aa0a659a23183739e6c9f8 HTTP/1.1 Host: www.nurse-jobs-in-us-19058.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" device-memory: 8 rtt: 200 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 dpr: 1 downlink: 1.55 ect: 4g sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nurse-jobs-in-us-19058.com/?backfill=0&lrt=1&KW1=Nurse+Jobs+In+US+Salary&KW2=Rn+Nurse&KW3=Highest+Paying+Travel+Nursing+Jobs&KW4=Nursing+Jobs+Atlanta&KW5=Work+Nurse+In+US&KW6=Nursing+Jobs+US&domainname=0&searchbox=0&subid1=f267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8&track_id=f267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8&kcoptimize=1&theme=DoriPlus&vertical=Jobs+%26+Education&offer=Nurse+Jobs+in+US+PR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 14:01:25 UTC	866	IN	HTTP/1.1 201 Created Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Origin: Access-Control-Max-Age: 86400 Charset: utf-8 Content-Type: text/javascript;charset=UTF-8 Date: Tue, 16 Apr 2024 14:01:24 GMT Server: nginx X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_U0nLfgyb3HowlW4tViFBVk/uFfQeZQT+J83ycQ2JOpzAephL8PGfwCe0NM60eTcKRtwNI6s47sMjh0JrITmYYw== X-Log-Success: 661e84b49dfbe095120f0f18 Content-Length: 16 Connection: close
2024-04-16 14:01:25 UTC	16	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d Data Ascii: {"success":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49746	104.247.82.91	443	1352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 14:01:24 UTC	551	OUT	GET /track.php?domain=nurse-jobs-in-us-19058.com&toggle=browserjs&uid=MTcxMzI3NjA4Mi4xOTM4OjNmNjcyNmE2NTk3ZjdmNjgwZjJkYTkxNDI2ZTQ1YjZhZTBkY2YyMDY1OGU1MjExY2NhYjY2NDkzZTM5YzNjNWM6NjYxZTg0YjIyZjUwNA%3D%3D HTTP/1.1 Host: www.nurse-jobs-in-us-19058.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 14:01:24 UTC	539	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 Date: Tue, 16 Apr 2024 14:01:24 GMT Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49747	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 14:01:24 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-16 14:01:24 UTC	468	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/079C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=147775 Date: Tue, 16 Apr 2024 14:01:24 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49749	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 14:01:24 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-16 14:01:25 UTC	805	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 52EA27DBDE0C4533B819423583F6692E Ref B: CH1AA2040902052 Ref C: 2023-07-09T23:10:08Z X-MSEdge-Ref: Ref A: 528BB8D443C042AA9AEA4EC3F75C7762 Ref B: CHI30EDGE0111 Ref C: 2023-07-09T23:11:11Z Content-Type: application/octet-stream X-Azure-Ref: 01uvbYwAAAACkqWtaEMjWQL/4cpisZkorTUVNMzBFREdFMDgxMQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=147711 Date: Tue, 16 Apr 2024 14:01:25 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-16 14:01:25 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49751	142.250.105.102	443	1352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 14:01:25 UTC	2686	OUT	GET /afs/ads?adtest=off&psid=9614410000&pcsa=false&channel=000002%2C000004%2Cbucket077&client=dp-teaminternet08_3ph&r=m&hl=en&rpbu=https%3A%2F%2Fwww.nurse-jobs-in-us-19058.com%2F%3Fts%3DfERvcmlQbHVzfHxlODY4N3xidWNrZXQwNzd8fHx8fHw2NjFlODRiMjJmNGM1fHx8MTcxMzI3NjA4Mi4yMTU4fGZmNjExYTJkZjlhZjhhOTI3YzYxNjVhMzA3MjAzMDlmMjFhNDIzOTR8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDB8ZXlKemRXSnBaREVpT2lKbU1qWTNZVEZtTVRNME1qSm1NRGN6TVdJeU1tVTVOVGcxTUdRNE5HSXhObVZoWkRCaE9XVXdPVGMzWkRrek5XTTVNalpqTkdVMk1tVmlaR1U0TkdRNElpd2lkSEpoWTJ0ZmFXUWlPaUptTWpZM1lURm1NVE0wTWpKbU1EY3pNV0l5TW1VNU5UZzFNR1E0TkdJeE5tVmhaREJoT1dVd09UYzNaRGt6TldNNU1qWmpOR1UyTW1WaVpHVTROR1E0SW4wPXw5MTk2MDZiODkwMTQyN2JhNTlhYTBhNjU5YTIzMTgzNzM5ZTZjOWY4fDB8ZHAtdGVhbWludGVybmV0MDhfM3BofDF8MHx8&terms=Nurse%20Jobs%20In%20US%20Salary%2CRn%20Nurse%2CHighest%20Paying%20Travel%20Nursing%20Jobs%2CNursing%20Jobs%20Atlanta%2CWork%20Nurse%20In%20US%2CNursing%20Jobs%20US&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2351657781676576&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301444%2C17301450%2C17301465%2C17301266&client_gdprApplies=0&format=r6%7Cs&nocache=2971713276083896&num=0&output=afd_ads&domain_name=www.nurse-jobs-in-us-19058.com&v=3&bsl=8&pac=0&u_his=1&u_tz=120&dt=1713276083898&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=754&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=623135625&rurl=https%3A%2F%2Fwww.nurse-jobs-in-us-19058.com%2F%3Fbackfill%3D0%26lrt%3D1%26KW1%3DNurse%2BJobs%2BIn%2BUS%2BSalary%26KW2%3DRn%2BNurse%26KW3%3DHighest%2BPaying%2BTravel%2BNursing%2BJobs%26KW4%3DNursing%2BJobs%2BAtlanta%26KW5%3DWork%2BNurse%2BIn%2BUS%26KW6%3DNursing%2BJobs%2BUS%26domainname%3D0%26searchbox%3D0%26subid1%3Df267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8%26track_id%3Df267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8%26kcoptimize%3D1%26theme%3DDoriPlus%26vertical%3DJobs%2B%2526%2BEducation%26offer%3DNurse%2BJobs%2Bin%2BUS%2BPR HTTP/1.1 Host: www.adsensecustomsearchads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.nurse-jobs-in-us-19058.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 14:01:25 UTC	3308	IN	HTTP/1.1 302 Found Location: https://www.google.com/sorry/index?continue=https://www.adsensecustomsearchads.com/afs/ads%3Fadtest%3Doff%26psid%3D9614410000%26pcsa%3Dfalse%26channel%3D000002%252C000004%252Cbucket077%26client%3Ddp-teaminternet08_3ph%26r%3Dm%26hl%3Den%26rpbu%3Dhttps%253A%252F%252Fwww.nurse-jobs-in-us-19058.com%252F%253Fts%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%26terms%3DNurse%2520Jobs%2520In%2520US%2520Salary%252CRn%2520Nurse%252CHighest%2520Paying%2520Travel%2520Nursing%2520Jobs%252CNursing%2520Jobs%2520Atlanta%252CWork%2520Nurse%2520In%2520US%252CNursing%2520Jobs%2520US%26max_radlink_len%3D40%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-2351657781676576%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%252C17300003%252C17301437%252C17301439%252C17301442%252C17301444%252C17301450%252C17301465%252C17301266%26client_gdprApplies%3D0%26format%3Dr6%257Cs%26nocache%3D2971713276083896%26num%3D0%26output%3Dafd_ads%26domain_name%3Dwww.nurse-jobs-in-us-19058.com%26v%3D3%26bsl%3D8%26pac%3D0%26u_his%3D1%26u_tz%3D120%26dt%3D1713276083898%26u_w%3D1280%26u_h%3D1024%26biw%3D1280%26bih%3D907%26psw%3D1280%26psh%3D754%26frm%3D0%26uio%3D--%26cont%3Dtc%26drt%3D0%26jsid%3Dcaf%26nfp%3D1%26jsv%3D623135625%26rurl%3Dhttps%253A%252F%252Fwww.nurse-jobs-in-us-19058.com%252F%253Fbackfill%253D0%2526lrt%253D1%2526KW1%253DNurse%252BJobs%252BIn%252BUS%252BSalary%2526KW2%253DRn%252BNurse%2526KW3%253DHighest%252BPaying%252BTravel%252BNursing%252BJobs%2526KW4%253DNursing%252BJobs%252BAtlanta%2526KW5%253DWork%252BNurse%252BIn%252BUS%2526KW6%253DNursing%252BJobs%252BUS%2526domainname%253D0%2526searchbox%253D0%2526subid1%253Df267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8%2526track_id%253Df267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8%2526kcoptimize%253D1%2526theme%253DDoriPlus%2526vertical%253DJobs%252B%252526%252BEducation%2526offer%253DNurse%252BJobs%252Bin%252BUS%252BPR&hl=en&q=EgRRtTk0GLWJ-rAGIjDaGBoxEH2Ax5Av90Fv-fzT-D7tnLqg2aFIPN4Fu4kjQkBZ5hs3U4uumsui1VkfXHIyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM x-hallmonitor-challenge: CgwItYn6sAYQ-6vq1wISBFG1OTQ Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-jhtxl1MtqKYvI2psbAdcTQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Date: Tue, 16 Apr 2024 14:01:25 GMT Server: gws Content-Length: 2765 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49752	142.250.9.147	443	1352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 14:01:26 UTC	3228	OUT	GET /sorry/index?continue=https://www.adsensecustomsearchads.com/afs/ads%3Fadtest%3Doff%26psid%3D9614410000%26pcsa%3Dfalse%26channel%3D000002%252C000004%252Cbucket077%26client%3Ddp-teaminternet08_3ph%26r%3Dm%26hl%3Den%26rpbu%3Dhttps%253A%252F%252Fwww.nurse-jobs-in-us-19058.com%252F%253Fts%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%26terms%3DNurse%2520Jobs%2520In%2520US%2520Salary%252CRn%2520Nurse%252CHighest%2520Paying%2520Travel%2520Nursing%2520Jobs%252CNursing%2520Jobs%2520Atlanta%252CWork%2520Nurse%2520In%2520US%252CNursing%2520Jobs%2520US%26max_radlink_len%3D40%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-2351657781676576%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%252C17300003%252C17301437%252C17301439%252C17301442%252C17301444%252C17301450%252C17301465%252C17301266%26client_gdprApplies%3D0%26format%3Dr6%257Cs%26nocache%3D2971713276083896%26num%3D0%26output%3Dafd_ads%26domain_name%3Dwww.nurse-jobs-in-us-19058.com%26v%3D3%26bsl%3D8%26pac%3D0%26u_his%3D1%26u_tz%3D120%26dt%3D1713276083898%26u_w%3D1280%26u_h%3D1024%26biw%3D1280%26bih%3D907%26psw%3D1280%26psh%3D754%26frm%3D0%26uio%3D--%26cont%3Dtc%26drt%3D0%26jsid%3Dcaf%26nfp%3D1%26jsv%3D623135625%26rurl%3Dhttps%253A%252F%252Fwww.nurse-jobs-in-us-19058.com%252F%253Fbackfill%253D0%2526lrt%253D1%2526KW1%253DNurse%252BJobs%252BIn%252BUS%252BSalary%2526KW2%253DRn%252BNurse%2526KW3%253DHighest%252BPaying%252BTravel%252BNursing%252BJobs%2526KW4%253DNursing%252BJobs%252BAtlanta%2526KW5%253DWork%252BNurse%252BIn%252BUS%2526KW6%253DNursing%252BJobs%252BUS%2526domainname%253D0%2526searchbox%253D0%2526subid1%253Df267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8%2526track_id%253Df267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8%2526kcoptimize%253D1%2526theme%253DDoriPlus%2526vertical%253DJobs%252B%252526%252BEducation%2526offer%253DNurse%252BJobs%252Bin%252BUS%252BPR&hl=en&q=EgRRtTk0GLWJ-rAGIjDaGBoxEH2Ax5Av90Fv-fzT-D7tnLqg2aFIPN4Fu4kjQkBZ5hs3U4uumsui1VkfXHIyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1 Host: www.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.nurse-jobs-in-us-19058.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 14:01:26 UTC	356	IN	HTTP/1.1 429 Too Many Requests Date: Tue, 16 Apr 2024 14:01:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html Server: HTTP server (unknown) Content-Length: 9531 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 14:01:26 UTC	899	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 64 73 65 6e 73 65 63 75 73 74 6f 6d 73 65 61 72 63 68 61 64 73 2e 63 6f 6d 2f 61 66 73 2f 61 64 73 3f 61 64 74 65 73 74 3d 6f 66 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><meta name="viewport" content="initial-scale=1"><title>https://www.adsensecustomsearchads.com/afs/ads?adtest=of
2024-04-16 14:01:26 UTC	1255	IN	Data Raw: 54 6c 64 4e 4e 55 31 71 57 6d 70 4f 52 31 55 79 54 57 31 57 61 56 70 48 56 54 52 4f 52 31 45 30 53 57 34 77 50 58 77 35 4d 54 6b 32 4d 44 5a 69 4f 44 6b 77 4d 54 51 79 4e 32 4a 68 4e 54 6c 68 59 54 42 68 4e 6a 55 35 59 54 49 7a 4d 54 67 7a 4e 7a 4d 35 5a 54 5a 6a 4f 57 59 34 66 44 42 38 5a 48 41 74 64 47 56 68 62 57 6c 75 64 47 56 79 62 6d 56 30 4d 44 68 66 4d 33 42 6f 66 44 46 38 4d 48 78 38 26 61 6d 70 3b 74 65 72 6d 73 3d 4e 75 72 73 65 25 32 30 4a 6f 62 73 25 32 30 49 6e 25 32 30 55 53 25 32 30 53 61 6c 61 72 79 25 32 43 52 6e 25 32 30 4e 75 72 73 65 25 32 43 48 69 67 68 65 73 74 25 32 30 50 61 79 69 6e 67 25 32 30 54 72 61 76 65 6c 25 32 30 4e 75 72 73 69 6e 67 25 32 30 4a 6f 62 73 25 32 43 4e 75 72 73 69 6e 67 25 32 30 4a 6f 62 73 25 32 30 41 74 6c Data Ascii: TldNNU1qWmpOR1UyTW1WaVpHVTROR1E0SW4wPXw5MTk2MDZiODkwMTQyN2JhNTlhYTBhNjU5YTIzMTgzNzM5ZTZjOWY4fDB8ZHAtdGVhbWludGVybmV0MDhfM3BofDF8MHx8&terms=Nurse%20Jobs%20In%20US%20Salary%2CRn%20Nurse%2CHighest%20Paying%20Travel%20Nursing%20Jobs%2CNursing%20Jobs%20Atl
2024-04-16 14:01:26 UTC	1255	IN	Data Raw: 38 34 62 31 36 65 61 64 30 61 39 65 30 39 37 37 64 39 33 35 63 39 32 36 63 34 65 36 32 65 62 64 65 38 34 64 38 25 32 36 74 72 61 63 6b 5f 69 64 25 33 44 66 32 36 37 61 31 66 31 33 34 32 32 66 30 37 33 31 62 32 32 65 39 35 38 35 30 64 38 34 62 31 36 65 61 64 30 61 39 65 30 39 37 37 64 39 33 35 63 39 32 36 63 34 65 36 32 65 62 64 65 38 34 64 38 25 32 36 6b 63 6f 70 74 69 6d 69 7a 65 25 33 44 31 25 32 36 74 68 65 6d 65 25 33 44 44 6f 72 69 50 6c 75 73 25 32 36 76 65 72 74 69 63 61 6c 25 33 44 4a 6f 62 73 25 32 42 25 32 35 32 36 25 32 42 45 64 75 63 61 74 69 6f 6e 25 32 36 6f 66 66 65 72 25 33 44 4e 75 72 73 65 25 32 42 4a 6f 62 73 25 32 42 69 6e 25 32 42 55 53 25 32 42 50 52 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d Data Ascii: 84b16ead0a9e0977d935c926c4e62ebde84d8%26track_id%3Df267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8%26kcoptimize%3D1%26theme%3DDoriPlus%26vertical%3DJobs%2B%2526%2BEducation%26offer%3DNurse%2BJobs%2Bin%2BUS%2BPR</title></head><body style=
2024-04-16 14:01:26 UTC	1255	IN	Data Raw: 69 47 33 69 6a 49 61 54 59 4b 6b 4c 32 43 4f 6b 79 65 59 69 58 63 75 36 6c 49 4d 67 4a 37 43 61 67 4f 62 70 35 79 5a 70 62 65 76 4d 4c 67 47 79 4b 79 33 2d 50 66 79 79 35 52 64 78 4a 49 35 50 53 7a 33 63 4b 35 77 55 35 56 6e 69 33 43 41 39 67 30 41 4d 4f 42 2d 76 38 32 4f 6d 30 74 42 66 53 7a 46 5a 69 78 70 78 61 6b 73 49 49 36 50 66 55 43 55 42 73 54 54 41 30 78 39 4f 45 5a 42 6c 51 59 46 68 79 6c 37 48 52 36 49 22 3e 3c 2f 64 69 76 3e 0a 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 27 68 69 64 64 65 6e 27 20 6e 61 6d 65 3d 27 71 27 20 76 61 6c 75 65 3d 27 45 67 52 52 74 54 6b 30 47 4c 57 4a 2d 72 41 47 49 6a 44 61 47 42 6f 78 45 48 32 41 78 35 41 76 39 30 46 76 2d 66 7a 54 2d 44 37 74 6e 4c 71 67 32 61 46 49 50 4e 34 46 75 34 6b 6a 51 6b 42 5a 35 68 73 33 55 Data Ascii: iG3ijIaTYKkL2COkyeYiXcu6lIMgJ7CagObp5yZpbevMLgGyKy3-Pfyy5RdxJI5PSz3cK5wU5Vni3CA9g0AMOB-v82Om0tBfSzFZixpxaksII6PfUCUBsTTA0x9OEZBlQYFhyl7HR6I"></div><input type='hidden' name='q' value='EgRRtTk0GLWJ-rAGIjDaGBoxEH2Ax5Av90Fv-fzT-D7tnLqg2aFIPN4Fu4kjQkBZ5hs3U
2024-04-16 14:01:26 UTC	1255	IN	Data Raw: 74 25 32 30 50 61 79 69 6e 67 25 32 30 54 72 61 76 65 6c 25 32 30 4e 75 72 73 69 6e 67 25 32 30 4a 6f 62 73 25 32 43 4e 75 72 73 69 6e 67 25 32 30 4a 6f 62 73 25 32 30 41 74 6c 61 6e 74 61 25 32 43 57 6f 72 6b 25 32 30 4e 75 72 73 65 25 32 30 49 6e 25 32 30 55 53 25 32 43 4e 75 72 73 69 6e 67 25 32 30 4a 6f 62 73 25 32 30 55 53 26 61 6d 70 3b 6d 61 78 5f 72 61 64 6c 69 6e 6b 5f 6c 65 6e 3d 34 30 26 61 6d 70 3b 74 79 70 65 3d 33 26 61 6d 70 3b 75 69 6f 70 74 3d 74 72 75 65 26 61 6d 70 3b 73 77 70 3d 61 73 2d 64 72 69 64 2d 32 33 35 31 36 35 37 37 38 31 36 37 36 35 37 36 26 61 6d 70 3b 6f 65 3d 55 54 46 2d 38 26 61 6d 70 3b 69 65 3d 55 54 46 2d 38 26 61 6d 70 3b 66 65 78 70 3d 32 31 34 30 34 25 32 43 31 37 33 30 30 30 30 33 25 32 43 31 37 33 30 31 34 33 37 Data Ascii: t%20Paying%20Travel%20Nursing%20Jobs%2CNursing%20Jobs%20Atlanta%2CWork%20Nurse%20In%20US%2CNursing%20Jobs%20US&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2351657781676576&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301437
2024-04-16 14:01:26 UTC	1255	IN	Data Raw: 72 25 33 44 4e 75 72 73 65 25 32 42 4a 6f 62 73 25 32 42 69 6e 25 32 42 55 53 25 32 42 50 52 22 3e 0a 3c 2f 66 6f 72 6d 3e 0a 3c 68 72 20 6e 6f 73 68 61 64 65 20 73 69 7a 65 3d 22 31 22 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 63 63 63 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 63 63 3b 22 3e 0a 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 22 3e 0a 3c 62 3e 41 62 6f 75 74 20 74 68 69 73 20 70 61 67 65 3c 2f 62 3e 3c 62 72 3e 3c 62 72 3e 0a 54 68 69 73 20 6e 65 74 77 6f 72 6b 20 69 73 20 62 6c 6f 63 6b 65 64 20 64 75 65 20 74 6f 20 75 6e 61 64 64 72 65 73 73 65 64 20 61 62 75 73 65 20 63 6f 6d 70 6c 61 69 6e 74 73 20 61 62 6f 75 74 20 6d 61 6c 69 63 69 6f 75 73 20 62 65 68 61 76 69 6f 72 2e 20 Data Ascii: r%3DNurse%2BJobs%2Bin%2BUS%2BPR"></form><hr noshade size="1" style="color:#ccc; background-color:#ccc;"><div style="font-size:13px;"><b>About this page</b><br><br>This network is blocked due to unaddressed abuse complaints about malicious behavior.
2024-04-16 14:01:26 UTC	1255	IN	Data Raw: 65 72 6d 73 20 74 68 61 74 20 72 6f 62 6f 74 73 20 61 72 65 20 6b 6e 6f 77 6e 20 74 6f 20 75 73 65 2c 20 6f 72 20 73 65 6e 64 69 6e 67 20 72 65 71 75 65 73 74 73 20 76 65 72 79 20 71 75 69 63 6b 6c 79 2e 0a 3c 2f 64 69 76 3e 0a 0a 49 50 20 61 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 37 2e 35 32 3c 62 72 3e 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 36 54 31 34 3a 30 31 3a 32 36 5a 3c 62 72 3e 55 52 4c 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 64 73 65 6e 73 65 63 75 73 74 6f 6d 73 65 61 72 63 68 61 64 73 2e 63 6f 6d 2f 61 66 73 2f 61 64 73 3f 61 64 74 65 73 74 3d 6f 66 66 26 61 6d 70 3b 70 73 69 64 3d 39 36 31 34 34 31 30 30 30 30 26 61 6d 70 3b 70 63 73 61 3d 66 61 6c 73 65 26 61 6d 70 3b 63 68 61 6e 6e 65 6c 3d 30 30 30 30 30 32 25 32 43 30 Data Ascii: erms that robots are known to use, or sending requests very quickly.</div>IP address: 81.181.57.52<br>Time: 2024-04-16T14:01:26Z<br>URL: https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=9614410000&pcsa=false&channel=000002%2C0
2024-04-16 14:01:26 UTC	1102	IN	Data Raw: 61 6d 70 3b 66 65 78 70 3d 32 31 34 30 34 25 32 43 31 37 33 30 30 30 30 33 25 32 43 31 37 33 30 31 34 33 37 25 32 43 31 37 33 30 31 34 33 39 25 32 43 31 37 33 30 31 34 34 32 25 32 43 31 37 33 30 31 34 34 34 25 32 43 31 37 33 30 31 34 35 30 25 32 43 31 37 33 30 31 34 36 35 25 32 43 31 37 33 30 31 32 36 36 26 61 6d 70 3b 63 6c 69 65 6e 74 5f 67 64 70 72 41 70 70 6c 69 65 73 3d 30 26 61 6d 70 3b 66 6f 72 6d 61 74 3d 72 36 25 37 43 73 26 61 6d 70 3b 6e 6f 63 61 63 68 65 3d 32 39 37 31 37 31 33 32 37 36 30 38 33 38 39 36 26 61 6d 70 3b 6e 75 6d 3d 30 26 61 6d 70 3b 6f 75 74 70 75 74 3d 61 66 64 5f 61 64 73 26 61 6d 70 3b 64 6f 6d 61 69 6e 5f 6e 61 6d 65 3d 77 77 77 2e 6e 75 72 73 65 2d 6a 6f 62 73 2d 69 6e 2d 75 73 2d 31 39 30 35 38 2e 63 6f 6d 26 61 6d 70 3b Data Ascii: amp;fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301444%2C17301450%2C17301465%2C17301266&client_gdprApplies=0&format=r6%7Cs&nocache=2971713276083896&num=0&output=afd_ads&domain_name=www.nurse-jobs-in-us-19058.com&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49753	142.250.9.147	443	1352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 14:01:27 UTC	3163	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/sorry/index?continue=https://www.adsensecustomsearchads.com/afs/ads%3Fadtest%3Doff%26psid%3D9614410000%26pcsa%3Dfalse%26channel%3D000002%252C000004%252Cbucket077%26client%3Ddp-teaminternet08_3ph%26r%3Dm%26hl%3Den%26rpbu%3Dhttps%253A%252F%252Fwww.nurse-jobs-in-us-19058.com%252F%253Fts%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%26terms%3DNurse%2520Jobs%2520In%2520US%2520Salary%252CRn%2520Nurse%252CHighest%2520Paying%2520Travel%2520Nursing%2520Jobs%252CNursing%2520Jobs%2520Atlanta%252CWork%2520Nurse%2520In%2520US%252CNursing%2520Jobs%2520US%26max_radlink_len%3D40%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-2351657781676576%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%252C17300003%252C17301437%252C17301439%252C17301442%252C17301444%252C17301450%252C17301465%252C17301266%26client_gdprApplies%3D0%26format%3Dr6%257Cs%26nocache%3D2971713276083896%26num%3D0%26output%3Dafd_ads%26domain_name%3Dwww.nurse-jobs-in-us-19058.com%26v%3D3%26bsl%3D8%26pac%3D0%26u_his%3D1%26u_tz%3D120%26dt%3D1713276083898%26u_w%3D1280%26u_h%3D1024%26biw%3D1280%26bih%3D907%26psw%3D1280%26psh%3D754%26frm%3D0%26uio%3D--%26cont%3Dtc%26drt%3D0%26jsid%3Dcaf%26nfp%3D1%26jsv%3D623135625%26rurl%3Dhttps%253A%252F%252Fwww.nurse-jobs-in-us-19058.com%252F%253Fbackfill%253D0%2526lrt%253D1%2526KW1%253DNurse%252BJobs%252BIn%252BUS%252BSalary%2526KW2%253DRn%252BNurse%2526KW3%253DHighest%252BPaying%252BTravel%252BNursing%252BJobs%2526KW4%253DNursing%252BJobs%252BAtlanta%2526KW5%253DWork%252BNurse%252BIn%252BUS%2526KW6%253DNursing%252BJobs%252BUS%2526domainname%253D0%2526searchbox%253D0%2526subid1%253Df267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8%2526track_id%253Df267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8%2526kcoptimize%253D1%2526theme%253DDoriPlus%2526vertical%253DJobs%252B%252526%252BEducation%2526offer%253DNurse%252BJobs%252Bin%252BUS%252BPR&hl=en&q=EgRRtTk0GLWJ-rAGIjDaGBoxEH2Ax5Av90Fv-fzT-D7tnLqg2aFIPN4Fu4kjQkBZ5hs3U4uumsui1VkfXHIyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 14:01:27 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Tue, 16 Apr 2024 14:01:27 GMT Date: Tue, 16 Apr 2024 14:01:27 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-16 14:01:27 UTC	727	IN	Data Raw: 34 63 36 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 4c6/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-04-16 14:01:27 UTC	502	IN	Data Raw: 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 27 61 6e 6f 6e 79 6d 6f 75 73 27 3b 70 6f 2e 69 6e 74 65 67 72 69 74 79 3d 27 73 68 61 33 38 34 2d 65 5a 47 38 65 34 6e 52 70 30 67 45 70 52 42 37 35 Data Ascii: cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-eZG8e4nRp0gEpRB75
2024-04-16 14:01:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49755	142.250.9.147	443	1352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 14:01:28 UTC	3770	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&s=pu_3HDiEyM9TCcxupFbFCoi_K-yaLzWD2BeE7tP97G-lOlfLQaxX054vMbvAfYJgw-JY5UiIFMvK5FMCLgfceoJGpfHl_e7v4LQh8Ff1IpUxVNe1bfeYdHdTRNYu43d2JlAs4Rzhgc-MHhz904JxiG3ijIaTYKkL2COkyeYiXcu6lIMgJ7CagObp5yZpbevMLgGyKy3-Pfyy5RdxJI5PSz3cK5wU5Vni3CA9g0AMOB-v82Om0tBfSzFZixpxaksII6PfUCUBsTTA0x9OEZBlQYFhyl7HR6I&cb=ouhijxfz7tdw HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.google.com/sorry/index?continue=https://www.adsensecustomsearchads.com/afs/ads%3Fadtest%3Doff%26psid%3D9614410000%26pcsa%3Dfalse%26channel%3D000002%252C000004%252Cbucket077%26client%3Ddp-teaminternet08_3ph%26r%3Dm%26hl%3Den%26rpbu%3Dhttps%253A%252F%252Fwww.nurse-jobs-in-us-19058.com%252F%253Fts%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%26terms%3DNurse%2520Jobs%2520In%2520US%2520Salary%252CRn%2520Nurse%252CHighest%2520Paying%2520Travel%2520Nursing%2520Jobs%252CNursing%2520Jobs%2520Atlanta%252CWork%2520Nurse%2520In%2520US%252CNursing%2520Jobs%2520US%26max_radlink_len%3D40%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-2351657781676576%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%252C17300003%252C17301437%252C17301439%252C17301442%252C17301444%252C17301450%252C17301465%252C17301266%26client_gdprApplies%3D0%26format%3Dr6%257Cs%26nocache%3D2971713276083896%26num%3D0%26output%3Dafd_ads%26domain_name%3Dwww.nurse-jobs-in-us-19058.com%26v%3D3%26bsl%3D8%26pac%3D0%26u_his%3D1%26u_tz%3D120%26dt%3D1713276083898%26u_w%3D1280%26u_h%3D1024%26biw%3D1280%26bih%3D907%26psw%3D1280%26psh%3D754%26frm%3D0%26uio%3D--%26cont%3Dtc%26drt%3D0%26jsid%3Dcaf%26nfp%3D1%26jsv%3D623135625%26rurl%3Dhttps%253A%252F%252Fwww.nurse-jobs-in-us-19058.com%252F%253Fbackfill%253D0%2526lrt%253D1%2526KW1%253DNurse%252BJobs%252BIn%252BUS%252BSalary%2526KW2%253DRn%252BNurse%2526KW3%253DHighest%252BPaying%252BTravel%252BNursing%252BJobs%2526KW4%253DNursing%252BJobs%252BAtlanta%2526KW5%253DWork%252BNurse%252BIn%252BUS%2526KW6%253DNursing%252BJobs%252BUS%2526domainname%253D0%2526searchbox%253D0%2526subid1%253Df267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8%2526track_id%253Df267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8%2526kcoptimize%253D1%2526theme%253DDoriPlus%2526vertical%253DJobs%252B%252526%252BEducation%2526offer%253DNurse%252BJobs%252Bin%252BUS%252BPR&hl=en&q=EgRRtTk0GLWJ-rAGIjDaGBoxEH2Ax5Av90Fv-fzT-D7tnLqg2aFIPN4Fu4kjQkBZ5hs3U4uumsui1VkfXHIyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 14:01:28 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 16 Apr 2024 14:01:28 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-I7hdOMjFXN8fq-aaKCdw3w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-16 14:01:28 UTC	364	IN	Data Raw: 35 37 37 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 5777<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-16 14:01:28 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-16 14:01:28 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-16 14:01:28 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-16 14:01:28 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-16 14:01:28 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-16 14:01:28 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 49 37 68 64 4f 4d 6a 46 58 4e 38 66 71 2d 61 61 4b 43 64 77 33 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/styles__ltr.css"><script nonce="I7hdOMjFXN8fq-aaKCdw3w" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-16 14:01:28 UTC	1255	IN	Data Raw: 48 70 73 48 34 72 63 4d 75 57 52 51 51 33 68 34 50 77 79 57 66 37 6e 36 77 5f 63 68 6f 67 52 7a 6e 41 37 57 35 41 4a 6e 4e 44 77 57 35 6f 37 4c 30 31 63 45 65 45 6e 31 41 33 48 34 73 69 5f 53 4f 58 42 4c 2d 73 31 30 4f 4b 63 75 5a 52 44 42 71 37 76 4a 6e 50 50 41 45 34 48 4e 49 6f 50 43 38 74 44 4f 4b 43 48 76 75 37 57 38 74 45 44 37 7a 62 32 2d 72 66 4f 76 34 41 5a 69 30 71 33 4f 6a 46 55 4f 4d 48 42 39 31 47 30 55 49 78 63 65 38 69 68 6f 56 35 51 7a 41 6d 5a 75 35 49 6a 57 76 41 6f 75 31 6f 5f 36 7a 54 35 50 41 6b 44 4f 65 4d 54 4b 42 4a 42 48 5a 6c 2d 4e 32 4e 4e 70 6d 42 6b 6c 66 39 46 73 67 65 37 4f 4f 35 68 5f 6b 48 6b 76 56 4f 4d 45 35 58 6b 53 6f 74 63 68 63 65 50 49 57 4c 32 78 37 48 69 50 50 54 2d 39 36 45 61 65 32 6a 32 72 54 51 4c 51 66 35 70 Data Ascii: HpsH4rcMuWRQQ3h4PwyWf7n6w_chogRznA7W5AJnNDwW5o7L01cEeEn1A3H4si_SOXBL-s10OKcuZRDBq7vJnPPAE4HNIoPC8tDOKCHvu7W8tED7zb2-rfOv4AZi0q3OjFUOMHB91G0UIxce8ihoV5QzAmZu5IjWvAou1o_6zT5PAkDOeMTKBJBHZl-N2NNpmBklf9Fsge7OO5h_kHkvVOME5XkSotchcePIWL2x7HiPPT-96Eae2j2rTQLQf5p
2024-04-16 14:01:28 UTC	1255	IN	Data Raw: 4f 5a 41 50 7a 65 54 54 46 4c 4d 41 2d 4a 44 6c 67 61 6f 4d 74 5f 33 58 78 51 66 46 36 59 77 57 69 4d 75 35 44 62 78 49 6c 54 59 75 59 65 4c 74 4f 4d 65 7a 36 67 71 4d 62 74 6b 49 55 53 50 79 7a 56 41 6d 5a 46 78 6d 39 33 52 4c 30 5f 58 74 74 45 4e 75 6f 70 58 62 33 6e 4d 31 4b 37 53 49 30 32 68 33 63 7a 48 54 38 68 34 49 61 71 67 58 6e 6e 78 53 6e 4a 2d 6a 47 68 73 62 70 45 31 37 61 74 30 46 35 4a 4c 47 78 5f 48 6f 65 34 32 4f 73 73 52 44 6a 4b 35 30 55 31 6a 36 6d 63 70 52 47 2d 37 5f 4b 43 6e 52 37 73 39 6f 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 49 37 68 64 4f 4d 6a 46 58 4e 38 66 71 2d 61 61 4b 43 64 77 33 77 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 Data Ascii: OZAPzeTTFLMA-JDlgaoMt_3XxQfF6YwWiMu5DbxIlTYuYeLtOMez6gqMbtkIUSPyzVAmZFxm93RL0_XttENuopXb3nM1K7SI02h3czHT8h4IaqgXnnxSnJ-jGhsbpE17at0F5JLGx_Hoe42OssRDjK50U1j6mcpRG-7_KCnR7s9o"><script type="text/javascript" nonce="I7hdOMjFXN8fq-aaKCdw3w"> recaptcha.a
2024-04-16 14:01:28 UTC	1255	IN	Data Raw: 44 52 71 54 69 74 69 51 32 5a 78 57 57 46 74 59 56 68 43 53 56 4a 79 54 55 31 73 54 44 68 32 57 6d 52 49 56 6e 63 78 52 47 31 4c 52 33 6c 55 57 58 70 76 62 44 64 53 55 57 49 34 5a 56 56 51 56 55 46 48 59 31 4e 59 63 30 4a 71 55 6d 4d 31 54 6b 78 34 62 30 35 72 61 6b 49 76 61 56 70 57 52 55 46 72 54 6b 56 56 4d 45 6c 56 61 44 52 61 62 55 31 46 5a 58 6c 54 64 31 52 78 4e 31 46 52 56 6e 51 35 62 69 39 44 53 45 6f 33 54 43 38 34 57 58 5a 70 52 6b 38 35 54 44 41 7a 52 79 74 4a 62 30 31 30 56 33 4d 32 4e 7a 64 4f 64 46 5a 55 55 47 56 6f 4f 47 52 4b 53 7a 5a 61 64 33 68 36 5a 46 4e 6b 54 57 68 50 51 58 52 51 55 6b 31 6c 62 6d 52 78 61 47 4e 50 52 43 73 34 4f 57 68 32 65 58 64 69 63 46 42 53 65 6b 56 59 5a 56 70 6a 5a 30 6c 72 5a 46 5a 4b 57 56 42 47 64 32 30 77 Data Ascii: DRqTitiQ2ZxWWFtYVhCSVJyTU1sTDh2WmRIVncxRG1LR3lUWXpvbDdSUWI4ZVVQVUFHY1NYc0JqUmM1Tkx4b05rakIvaVpWRUFrTkVVMElVaDRabU1FZXlTd1RxN1FRVnQ5bi9DSEo3TC84WXZpRk85TDAzRytJb010V3M2NzdOdFZUUGVoOGRKSzZad3h6ZFNkTWhPQXRQUk1lbmRxaGNPRCs4OWh2eXdicFBSekVYZVpjZ0lrZFZKWVBGd20w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49760	142.250.9.147	443	1352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 14:01:29 UTC	1134	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm- HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&s=pu_3HDiEyM9TCcxupFbFCoi_K-yaLzWD2BeE7tP97G-lOlfLQaxX054vMbvAfYJgw-JY5UiIFMvK5FMCLgfceoJGpfHl_e7v4LQh8Ff1IpUxVNe1bfeYdHdTRNYu43d2JlAs4Rzhgc-MHhz904JxiG3ijIaTYKkL2COkyeYiXcu6lIMgJ7CagObp5yZpbevMLgGyKy3-Pfyy5RdxJI5PSz3cK5wU5Vni3CA9g0AMOB-v82Om0tBfSzFZixpxaksII6PfUCUBsTTA0x9OEZBlQYFhyl7HR6I&cb=ouhijxfz7tdw Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 14:01:30 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Tue, 16 Apr 2024 14:01:30 GMT Date: Tue, 16 Apr 2024 14:01:30 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-16 14:01:30 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js');
2024-04-16 14:01:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49761	142.250.9.147	443	1352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 14:01:29 UTC	1122	OUT	GET /js/bg/KTA1qoE7ZDz05UuzGBms7CVmuC34sZ4nnXwNjg065Po.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&s=pu_3HDiEyM9TCcxupFbFCoi_K-yaLzWD2BeE7tP97G-lOlfLQaxX054vMbvAfYJgw-JY5UiIFMvK5FMCLgfceoJGpfHl_e7v4LQh8Ff1IpUxVNe1bfeYdHdTRNYu43d2JlAs4Rzhgc-MHhz904JxiG3ijIaTYKkL2COkyeYiXcu6lIMgJ7CagObp5yZpbevMLgGyKy3-Pfyy5RdxJI5PSz3cK5wU5Vni3CA9g0AMOB-v82Om0tBfSzFZixpxaksII6PfUCUBsTTA0x9OEZBlQYFhyl7HR6I&cb=ouhijxfz7tdw Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 14:01:30 UTC	812	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18274 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sun, 14 Apr 2024 23:13:04 GMT Expires: Mon, 14 Apr 2025 23:13:04 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 04 Apr 2024 18:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 139706 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 14:01:30 UTC	443	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 4d 3d 66 75 6e 63 74 69 6f 6e 28 4a 29 7b 72 65 74 75 72 6e 20 4a 7d 2c 64 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 4b 3d 66 75 6e 63 74 69 6f 6e 28 4a 2c 54 29 7b 69 66 28 28 4a 3d 28 54 3d 64 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 6e 75 6c 6c 29 2c 21 54 29 7c 7c 21 54 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 4a 3b 74 72 79 7b 4a 3d 54 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var M=function(J){return J},d=this\|\|self,K=function(J,T){if((J=(T=d.trustedTypes,null),!T)\|\|!T.createPolicy)return J;try{J=T.createPolicy("bg",{createHTM
2024-04-16 14:01:30 UTC	1255	IN	Data Raw: 72 65 61 74 65 53 63 72 69 70 74 28 74 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 22 2b 74 7d 7d 28 64 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 5b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 27 2c 0a 27 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 4a 56 3d 66 75 6e 63 74 69 6f 6e 28 4a 2c 54 29 7b 72 65 74 75 72 6e 5b 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 7d 2c 28 54 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 28 4a 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 5d 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 4a 2c 54 2c Data Ascii: reateScript(t)}:function(t){return""+t}}(d)(Array(7824Math.random()\|0).join("\n")+['(function(){/','',' SPDX-License-Identifier: Apache-2.0','*/','var JV=function(J,T){return[function(){return J},(T(function(t){t(J)}),function(){})]},P=function(J,T,
2024-04-16 14:01:30 UTC	1255	IN	Data Raw: 2e 6e 3d 30 2c 5b 5d 29 7d 72 65 74 75 72 6e 5b 66 75 6e 63 74 69 6f 6e 28 64 29 7b 28 54 2e 51 6e 28 64 29 2c 4a 29 2e 51 6e 28 64 29 7d 2c 28 4a 3d 28 54 3d 28 28 74 2e 70 72 6f 74 6f 74 79 70 65 2e 51 6e 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 57 29 7b 35 30 3e 28 74 68 69 73 2e 6e 2b 2b 2c 74 68 69 73 29 2e 6a 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 6a 2e 70 75 73 68 28 64 29 3a 28 57 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 74 68 69 73 2e 6e 29 2c 35 30 3e 57 26 26 28 74 68 69 73 2e 6a 5b 57 5d 3d 64 29 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 29 2e 4f 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 30 3d 3d 3d 74 68 69 73 2e 6e 29 72 65 74 75 72 6e 5b 30 2c 30 5d 3b 72 65 74 75 72 6e 5b 28 74 68 69 73 2e 6a 2e 73 6f Data Ascii: .n=0,[])}return[function(d){(T.Qn(d),J).Qn(d)},(J=(T=((t.prototype.Qn=function(d,W){50>(this.n++,this).j.length?this.j.push(d):(W=Math.floor(Math.random()*this.n),50>W&&(this.j[W]=d))},t.prototype).OC=function(){if(0===this.n)return[0,0];return[(this.j.so
2024-04-16 14:01:30 UTC	1255	IN	Data Raw: 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 4a 29 2c 54 29 29 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3b 69 66 28 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 54 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 4a 2e 6c 65 6e 67 74 68 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 4a 2e 73 70 6c 69 63 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 4a 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 26 26 21 4a 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 28 22 73 70 6c 69 63 65 22 29 29 72 65 74 75 72 6e 22 61 72 72 61 79 22 3b 69 66 28 22 5b 6f 62 6a 65 63 74 20 46 75 6e 63 74 69 6f 6e 5d 22 3d 3d 54 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 Data Ascii: type.toString.call(J),T))return"object";if("[object Array]"==T\|\|"number"==typeof J.length&&"undefined"!=typeof J.splice&&"undefined"!=typeof J.propertyIsEnumerable&&!J.propertyIsEnumerable("splice"))return"array";if("[object Function]"==T\|\|"undefined"!=ty
2024-04-16 14:01:30 UTC	1255	IN	Data Raw: 29 7b 74 3d 54 5b 4a 2e 54 3d 74 72 75 65 2c 31 5d 3b 74 72 79 7b 64 3d 4a 2e 4f 7c 7c 4a 2e 4e 28 54 29 7d 63 61 74 63 68 28 71 29 7b 6d 28 71 2c 4a 29 2c 64 3d 4a 2e 4f 7d 74 28 64 29 7d 65 6c 73 65 20 69 66 28 57 3d 3d 45 69 29 54 5b 33 5d 26 26 28 4a 2e 44 3d 74 72 75 65 29 2c 54 5b 34 5d 26 26 28 4a 2e 67 3d 74 72 75 65 29 2c 54 5b 35 5d 26 26 28 4a 2e 55 3d 74 72 75 65 29 2c 54 5b 36 5d 26 26 28 4a 2e 54 3d 74 72 75 65 29 2c 4a 2e 4e 28 54 29 3b 65 6c 73 65 20 69 66 28 57 3d 3d 46 49 29 4a 2e 44 3d 74 72 75 65 2c 4a 2e 4e 28 54 29 3b 65 6c 73 65 20 69 66 28 57 3d 3d 47 41 29 7b 4a 2e 55 3d 74 72 75 65 3b 74 72 79 7b 66 6f 72 28 64 3d 30 3b 64 3c 4a 2e 69 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 74 72 79 7b 74 3d 4a 2e 69 5b 64 5d 2c 74 5b 30 5d 5b 74 5b Data Ascii: ){t=T[J.T=true,1];try{d=J.O\|\|J.N(T)}catch(q){m(q,J),d=J.O}t(d)}else if(W==Ei)T[3]&&(J.D=true),T[4]&&(J.g=true),T[5]&&(J.U=true),T[6]&&(J.T=true),J.N(T);else if(W==FI)J.D=true,J.N(T);else if(W==GA){J.U=true;try{for(d=0;d<J.i.length;d++)try{t=J.i[d],t[0][t[
2024-04-16 14:01:30 UTC	1255	IN	Data Raw: 2c 4d 2c 4b 2c 75 2c 79 2c 44 2c 52 2c 49 29 7b 69 66 28 52 3d 67 28 74 2c 33 36 35 29 2c 52 3e 3d 74 2e 76 29 74 68 72 6f 77 5b 65 2c 33 31 5d 3b 66 6f 72 28 49 3d 28 75 3d 28 64 3d 28 4d 3d 54 2c 74 2e 61 39 2e 6c 65 6e 67 74 68 29 2c 52 29 2c 30 29 3b 30 3c 4d 3b 29 71 3d 75 25 38 2c 57 3d 75 3e 3e 33 2c 63 3d 38 2d 28 71 7c 30 29 2c 4b 3d 74 2e 48 5b 57 5d 2c 63 3d 63 3c 4d 3f 63 3a 4d 2c 4a 26 26 28 44 3d 74 2c 79 3d 75 2c 44 2e 59 21 3d 79 3e 3e 36 26 26 28 44 2e 59 3d 79 3e 3e 36 2c 79 3d 67 28 44 2c 38 31 29 2c 44 2e 66 69 3d 73 69 28 44 2e 59 2c 44 2e 53 2c 5b 30 2c 30 2c 79 5b 31 5d 2c 79 5b 32 5d 5d 29 29 2c 4b 5e 3d 74 2e 66 69 5b 57 26 64 5d 29 2c 49 7c 3d 28 4b 3e 3e 38 2d 28 71 7c 30 29 2d 28 63 7c 30 29 26 28 31 3c 3c 63 29 2d 31 29 3c 3c Data Ascii: ,M,K,u,y,D,R,I){if(R=g(t,365),R>=t.v)throw[e,31];for(I=(u=(d=(M=T,t.a9.length),R),0);0<M;)q=u%8,W=u>>3,c=8-(q\|0),K=t.H[W],c=c<M?c:M,J&&(D=t,y=u,D.Y!=y>>6&&(D.Y=y>>6,y=g(D,81),D.fi=si(D.Y,D.S,[0,0,y[1],y[2]])),K^=t.fi[W&d]),I\|=(K>>8-(q\|0)-(c\|0)&(1<<c)-1)<<
2024-04-16 14:01:30 UTC	1255	IN	Data Raw: 63 65 28 30 2c 32 30 34 38 29 7d 2c 24 67 3d 66 75 6e 63 74 69 6f 6e 28 4a 2c 54 2c 74 2c 64 2c 57 2c 71 2c 63 29 7b 66 6f 72 28 28 74 2e 7a 48 3d 4d 6d 28 74 2e 57 2c 28 74 2e 61 39 3d 28 74 2e 48 77 3d 65 38 2c 74 5b 74 2e 5a 64 3d 5a 41 2c 56 5d 29 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 63 61 74 28 29 7d 7d 29 29 2c 74 29 2e 79 6e 3d 6b 5b 74 2e 57 5d 28 74 2e 7a 48 2c 7b 76 61 6c 75 65 3a 7b 76 61 6c 75 65 3a 7b 7d 7d 7d 29 2c 63 3d 30 2c 71 3d 5b 5d 3b 32 38 38 3e 63 3b 63 2b 2b 29 71 5b 63 5d 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 63 29 3b 6c 28 74 72 75 65 2c 74 2c 28 76 28 74 2c 28 28 76 28 28 50 28 31 32 39 2c 66 75 6e 63 74 69 6f 6e 28 4d 2c 4b 2c 75 2c 79 2c 44 2c Data Ascii: ce(0,2048)},$g=function(J,T,t,d,W,q,c){for((t.zH=Mm(t.W,(t.a9=(t.Hw=e8,t[t.Zd=ZA,V]),{get:function(){return this.concat()}})),t).yn=k[t.W](t.zH,{value:{value:{}}}),c=0,q=[];288>c;c++)q[c]=String.fromCharCode(c);l(true,t,(v(t,((v((P(129,function(M,K,u,y,D,
2024-04-16 14:01:30 UTC	1255	IN	Data Raw: 33 30 39 2c 28 58 28 28 74 2e 4e 4b 3d 28 58 28 74 2c 34 32 38 2c 28 28 58 28 74 2c 33 36 35 2c 28 74 2e 46 46 3d 28 28 74 2e 4f 3d 76 6f 69 64 20 30 2c 74 2e 4c 3d 5b 5d 2c 74 2e 58 46 3d 64 2c 74 2e 45 43 3d 28 74 2e 66 69 3d 76 6f 69 64 20 30 2c 32 35 29 2c 74 2e 70 69 3d 54 2c 74 2e 42 3d 28 74 2e 68 6b 3d 30 2c 74 2e 44 3d 66 61 6c 73 65 2c 30 29 2c 74 29 2e 5a 3d 28 28 74 2e 6c 4e 3d 30 2c 74 29 2e 68 3d 30 2c 74 2e 54 3d 66 61 6c 73 65 2c 28 74 2e 4a 3d 28 74 2e 53 73 3d 28 28 74 2e 41 3d 5b 5d 2c 74 29 2e 47 3d 30 2c 66 75 6e 63 74 69 6f 6e 28 4d 29 7b 74 68 69 73 2e 6c 3d 4d 7d 29 2c 76 6f 69 64 20 30 29 2c 28 28 74 2e 46 3d 76 6f 69 64 20 30 2c 74 29 2e 58 3d 66 61 6c 73 65 2c 74 2e 56 3d 5b 5d 2c 74 2e 6f 3d 6e 75 6c 6c 2c 74 29 2e 48 3d 5b 5d Data Ascii: 309,(X((t.NK=(X(t,428,((X(t,365,(t.FF=((t.O=void 0,t.L=[],t.XF=d,t.EC=(t.fi=void 0,25),t.pi=T,t.B=(t.hk=0,t.D=false,0),t).Z=((t.lN=0,t).h=0,t.T=false,(t.J=(t.Ss=((t.A=[],t).G=0,function(M){this.l=M}),void 0),((t.F=void 0,t).X=false,t.V=[],t.o=null,t).H=[]
2024-04-16 14:01:30 UTC	1255	IN	Data Raw: 28 34 29 29 2c 74 29 29 2c 31 31 38 29 2c 66 75 6e 63 74 69 6f 6e 28 4d 29 7b 53 38 28 4d 2c 34 29 7d 2c 74 29 2c 50 28 32 33 39 2c 66 75 6e 63 74 69 6f 6e 28 4d 2c 4b 2c 75 2c 79 29 7b 21 4c 28 74 72 75 65 2c 4d 2c 66 61 6c 73 65 2c 4b 29 26 26 28 4b 3d 63 43 28 4d 29 2c 79 3d 4b 2e 57 77 2c 75 3d 4b 2e 56 6e 2c 4d 2e 6c 3d 3d 4d 7c 7c 75 3d 3d 4d 2e 53 73 26 26 79 3d 3d 4d 29 26 26 28 58 28 4d 2c 4b 2e 76 77 2c 75 2e 61 70 70 6c 79 28 79 2c 4b 2e 73 29 29 2c 4d 2e 5a 3d 4d 2e 4b 28 29 29 7d 2c 74 29 2c 66 75 6e 63 74 69 6f 6e 28 4d 2c 4b 2c 75 2c 79 2c 44 2c 52 2c 49 2c 45 2c 61 2c 42 2c 59 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 48 28 46 2c 72 29 7b 66 6f 72 28 3b 62 3c 46 3b 29 4b 7c 3d 47 28 4d 29 3c 3c 62 2c 62 2b 3d 38 3b 72 65 74 75 72 6e 20 72 3d Data Ascii: (4)),t)),118),function(M){S8(M,4)},t),P(239,function(M,K,u,y){!L(true,M,false,K)&&(K=cC(M),y=K.Ww,u=K.Vn,M.l==M\|\|u==M.Ss&&y==M)&&(X(M,K.vw,u.apply(y,K.s)),M.Z=M.K())},t),function(M,K,u,y,D,R,I,E,a,B,Y,b){function H(F,r){for(;b<F;)K\|=G(M)<<b,b+=8;return r=
2024-04-16 14:01:30 UTC	1255	IN	Data Raw: 29 29 2c 78 29 28 4d 29 2c 4d 29 29 2c 44 3d 67 28 4d 2c 44 29 2c 67 28 4d 2c 79 29 29 2c 67 29 28 4d 2c 75 29 2c 67 28 4d 2e 6c 2c 4b 29 29 2c 30 21 3d 3d 4b 29 26 26 28 44 3d 42 43 28 31 2c 4d 2c 44 2c 79 2c 4b 2c 75 29 2c 4b 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 75 2c 44 2c 6e 29 2c 58 28 4d 2c 32 31 39 2c 5b 4b 2c 75 2c 44 5d 29 29 7d 29 2c 74 29 2c 74 29 29 2c 66 75 6e 63 74 69 6f 6e 28 4d 29 7b 53 38 28 4d 2c 33 29 7d 29 2c 74 29 2c 74 29 29 2c 33 31 29 2c 74 29 2c 4f 28 34 29 29 29 2c 50 29 28 32 38 30 2c 66 75 6e 63 74 69 6f 6e 28 4d 29 7b 44 41 28 31 2c 4d 29 7d 2c 74 29 2c 66 75 6e 63 74 69 6f 6e 28 4d 2c 4b 2c 75 29 7b 4b 3d 78 28 28 75 3d 78 28 4d 29 2c 4d 29 29 2c 4b 3d 67 28 4d 2c 4b 29 2c 30 21 3d 67 28 4d 2c 75 29 26 26 58 Data Ascii: )),x)(M),M)),D=g(M,D),g(M,y)),g)(M,u),g(M.l,K)),0!==K)&&(D=BC(1,M,D,y,K,u),K.addEventListener(u,D,n),X(M,219,[K,u,D]))}),t),t)),function(M){S8(M,3)}),t),t)),31),t),O(4))),P)(280,function(M){DA(1,M)},t),function(M,K,u){K=x((u=x(M),M)),K=g(M,K),0!=g(M,u)&&X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49764	104.247.82.91	443	1352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 14:01:31 UTC	1215	OUT	GET /favicon.ico HTTP/1.1 Host: www.nurse-jobs-in-us-19058.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" device-memory: 8 rtt: 200 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 dpr: 1 downlink: 1.55 ect: 4g sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nurse-jobs-in-us-19058.com/?backfill=0&lrt=1&KW1=Nurse+Jobs+In+US+Salary&KW2=Rn+Nurse&KW3=Highest+Paying+Travel+Nursing+Jobs&KW4=Nursing+Jobs+Atlanta&KW5=Work+Nurse+In+US&KW6=Nursing+Jobs+US&domainname=0&searchbox=0&subid1=f267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8&track_id=f267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8&kcoptimize=1&theme=DoriPlus&vertical=Jobs+%26+Education&offer=Nurse+Jobs+in+US+PR Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=0d8188d52b2490d8:T=1713276085:RT=1713276085:S=ALNI_MY_YCGmJHgGj1ClMiXTzAnbgHwuxw
2024-04-16 14:01:31 UTC	225	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 0 Content-Type: image/x-icon Date: Tue, 16 Apr 2024 14:01:31 GMT Etag: "661e4acc-0" Last-Modified: Tue, 16 Apr 2024 09:54:20 GMT Server: nginx Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49765	142.250.9.147	443	1352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 14:01:31 UTC	3407	OUT	GET /recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.google.com/sorry/index?continue=https://www.adsensecustomsearchads.com/afs/ads%3Fadtest%3Doff%26psid%3D9614410000%26pcsa%3Dfalse%26channel%3D000002%252C000004%252Cbucket077%26client%3Ddp-teaminternet08_3ph%26r%3Dm%26hl%3Den%26rpbu%3Dhttps%253A%252F%252Fwww.nurse-jobs-in-us-19058.com%252F%253Fts%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%26terms%3DNurse%2520Jobs%2520In%2520US%2520Salary%252CRn%2520Nurse%252CHighest%2520Paying%2520Travel%2520Nursing%2520Jobs%252CNursing%2520Jobs%2520Atlanta%252CWork%2520Nurse%2520In%2520US%252CNursing%2520Jobs%2520US%26max_radlink_len%3D40%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-2351657781676576%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%252C17300003%252C17301437%252C17301439%252C17301442%252C17301444%252C17301450%252C17301465%252C17301266%26client_gdprApplies%3D0%26format%3Dr6%257Cs%26nocache%3D2971713276083896%26num%3D0%26output%3Dafd_ads%26domain_name%3Dwww.nurse-jobs-in-us-19058.com%26v%3D3%26bsl%3D8%26pac%3D0%26u_his%3D1%26u_tz%3D120%26dt%3D1713276083898%26u_w%3D1280%26u_h%3D1024%26biw%3D1280%26bih%3D907%26psw%3D1280%26psh%3D754%26frm%3D0%26uio%3D--%26cont%3Dtc%26drt%3D0%26jsid%3Dcaf%26nfp%3D1%26jsv%3D623135625%26rurl%3Dhttps%253A%252F%252Fwww.nurse-jobs-in-us-19058.com%252F%253Fbackfill%253D0%2526lrt%253D1%2526KW1%253DNurse%252BJobs%252BIn%252BUS%252BSalary%2526KW2%253DRn%252BNurse%2526KW3%253DHighest%252BPaying%252BTravel%252BNursing%252BJobs%2526KW4%253DNursing%252BJobs%252BAtlanta%2526KW5%253DWork%252BNurse%252BIn%252BUS%2526KW6%253DNursing%252BJobs%252BUS%2526domainname%253D0%2526searchbox%253D0%2526subid1%253Df267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8%2526track_id%253Df267a1f13422f0731b22e95850d84b16ead0a9e0977d935c926c4e62ebde84d8%2526kcoptimize%253D1%2526theme%253DDoriPlus%2526vertical%253DJobs%252B%252526%252BEducation%2526offer%253DNurse%252BJobs%252Bin%252BUS%252BPR&hl=en&q=EgRRtTk0GLWJ-rAGIjDaGBoxEH2Ax5Av90Fv-fzT-D7tnLqg2aFIPN4Fu4kjQkBZ5hs3U4uumsui1VkfXHIyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 14:01:31 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 16 Apr 2024 14:01:31 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-kal9KtYWZtQoX-oye-VUkw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-16 14:01:31 UTC	364	IN	Data Raw: 31 64 31 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1d14<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-04-16 14:01:31 UTC	1255	IN	Data Raw: 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e Data Ascii: v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fon
2024-04-16 14:01:31 UTC	1255	IN	Data Raw: 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 Data Ascii: 20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E0
2024-04-16 14:01:31 UTC	1255	IN	Data Raw: 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b Data Ascii: U+04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-16 14:01:31 UTC	1255	IN	Data Raw: 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b Data Ascii: ce { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+
2024-04-16 14:01:31 UTC	1255	IN	Data Raw: 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 Data Ascii: tic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight
2024-04-16 14:01:31 UTC	813	IN	Data Raw: 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 6b 61 6c 39 4b 74 59 57 5a 74 51 6f 58 2d 6f 79 65 2d 56 55 6b 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f Data Ascii: }</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/styles__ltr.css"><script nonce="kal9KtYWZtQoX-oye-VUkw" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.co
2024-04-16 14:01:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49767	104.247.82.91	443	1352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 14:01:32 UTC	465	OUT	GET /favicon.ico HTTP/1.1 Host: www.nurse-jobs-in-us-19058.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=0d8188d52b2490d8:T=1713276085:RT=1713276085:S=ALNI_MY_YCGmJHgGj1ClMiXTzAnbgHwuxw
2024-04-16 14:01:32 UTC	225	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 0 Content-Type: image/x-icon Date: Tue, 16 Apr 2024 14:01:32 GMT Etag: "661e4acc-0" Last-Modified: Tue, 16 Apr 2024 09:54:20 GMT Server: nginx Connection: close

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 5232, Parent PID: 3164

General

Target ID:	0
Start time:	16:01:15
Start date:	16/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 1352, Parent PID: 5232

General

Target ID:	2
Start time:	16:01:17
Start date:	16/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 --field-trial-handle=2228,i,14099771991237491365,1493214966627256411,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6408, Parent PID: 3164

General

Target ID:	3
Start time:	16:01:19
Start date:	16/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://fr0qzh.ncjfhzfdhcxvxcz.com"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://fr0qzh.ncjfhzfdhcxvxcz.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 49

Chrome Cache Entry: 50

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Windows Analysis Report
http://fr0qzh.ncjfhzfdhcxvxcz.com