Edit tour

Windows Analysis Report
http://makeupenumerate.com

Overview

General Information

Sample URL:	http://makeupenumerate.com
Analysis ID:	1427690
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 1132 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://makeupenumerate.com/ MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6008 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1964,i,11828674635919050381,7814478135417287115,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://www.google.com/sorry/index?continue=https://google.com/&q=EgRRtTk0GJGcgbEGIjB9gZIilngADswQwHXor1YLbOOeBYuAYH92knL1CCi8WEjYnI0WU-XARvX0oE6qvSUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	HTTP Parser: No favicon
Source: https://www.google.com/sorry/index?continue=https://google.com/&q=EgRRtTk0GJGcgbEGIjB9gZIilngADswQwHXor1YLbOOeBYuAYH92knL1CCi8WEjYnI0WU-XARvX0oE6qvSUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=normal&s=3iQmOoQxl6JGnSd4KT0HW9rTgUfcmwOmiSmaDHxAmGKs_DNRWrxFo6YwPbDyhgnRHj2BTCkySoHbyw-yJRfqRSqmhn6oG_ysK_kejghKuZCMyNyV_bYgrJ5XBClKeOsCfET5sLT20Qm7rEBZz2Xw57s8bc9BxWL9ydupkHoZx_tribj7aqktjbn73eSj6ABDxwRFszyvWkQeJRL38VzK-X6sbZ3xWEMDvfKlQS58Z804KT6MvHuUPaLAk3ZmmiyUQB3KZLmgnSQyLt4r9hPMJzGKgNzE5vQ&cb=b7ivx7j11it0	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	HTTP Parser: No favicon
Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://ogs.google.com/widget/callout?prid=19037050&pgid=19037049&puid=9ceb59a7585b55bd&cce=1&dc=1&origin=https%3A%2F%2Fwww.google.com&cn=callout&pid=1&spid=538&hl=en	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.16:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.16:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.16:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.16:49729 version: TLS 1.2

Source:	Binary string: oHb=function(){var a,b,c,d,e,f,g,h,k;return _.hh(function(l){if(1==l.ka){a=(0,_.$b.cast)(window.google.aipf,_.XGa);window.google.aipf={push:function(){_.nd(Error("rf"))}};_.mHb={};b=_.Ta(a);for(c=b.next();!c.done;c=b.next())d=c.value,_.mHb[d.id]=d;var p=l.yield;nHb\|\|(_.PDb?nHb=Promise.resolve(_.ODb.Jg()):(_.QDb=new _.Cg,nHb=_.QDb.promise));return p.call(l,nHb,2)}e=l.oa;f=(0,_.$b.zd)(e.ykd,"Registered RequestFactory implementation does not support hydrating inline prefetches.");g=_.Ta(a);for(h=g.next();!h.done;h= source: chromecache_136.1.dr
Source:	Binary string: _.odb=function(a){this.Ea=_.n(a)};_.C(_.odb,_.q);_.pdb=function(a){this.Ea=_.n(a)};_.C(_.pdb,_.q);_.pdb.prototype.getName=function(){return _.z(this,1)};_.pdb.prototype.Kf=function(a){return _.Oe(this,1,a)};_.pdb.prototype.Ug=function(){return _.df(this,1)};_.qdb=function(a){this.Ea=_.n(a)};_.C(_.qdb,_.q);_.Nr=function(a){this.Ea=_.n(a)};_.C(_.Nr,_.q);_.Nr.prototype.Vh=function(){return _.r(this,_.Er,9)};_.Nr.prototype.Zd=function(){return _.r(this,_.qdb,1)};_.Nr.prototype.setLabel=function(a,b){return _.bi(this,7,_.pdb,a,b)};_.Nr.ob=[7,10,15,16];_.Nr.prototype.nb="DWh76e"; source: chromecache_136.1.dr
Source:	Binary string: 5);case 5:e=g=h.oa;case 4:if(e&&!c){var k=e,l=d&&d.has("ved")?d.get("ved"):"";k=_.z(k.header,1);k=_.un(k).Kc("sqi","17");l&&k.Kc("refv",l);k.log()}case 2:return h.return({JBa:f,Ava:e})}})};var UHb=function(a,b,c){a=Error.call(this,a);this.message=a.message;"stack"in a&&(this.stack=a.stack);a={};this.details=(a.req=b,a.res=c,a)};_.C(UHb,Error);var WHb=!1,$Hb=0;var hIb=function(a){this.Ea=_.n(a)};_.C(hIb,_.q);_.PDb=!0; source: chromecache_136.1.dr
Source:	Binary string: _.$Cb=!!(_.lh[24]&8192);_.aDb=!!(_.lh[24]>>14&1);_.bDb=!!(_.lh[24]>>17&1);_.cDb=!!(_.lh[24]>>18&1);_.dDb=!!(_.lh[24]>>21&1);_.eDb=!!(_.lh[24]>>25&1);_.fDb=!!(_.lh[25]&1);_.gDb=!!(_.lh[25]&128);_.hDb=!!(_.lh[25]&256);_.iDb=!!(_.lh[25]&512);_.jDb=!!(_.lh[25]&1024);_.kDb=!!(_.lh[24]>>15&1);_.lDb=!!(_.lh[24]>>19&1);_.mDb=!!(_.lh[25]&64);_.nDb=!!(_.lh[24]>>23&1);_.oDb=!!(_.lh[24]>>24&1);_.pDb=!!(_.lh[24]>>29&1);_.qDb=!!(_.lh[24]>>27&1);_.rDb=!!(_.lh[25]&16);_.sDb=!!(_.lh[25]&8);_.tDb=!!(_.lh[24]>>16&1); source: chromecache_136.1.dr
Source:	Binary string: _.ODb=new _.nn;_.ODb.oa=!0;_.PDb=!1; source: chromecache_136.1.dr

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sorry/index?continue=https://google.com/&q=EgRRtTk0GJGcgbEGIjB9gZIilngADswQwHXor1YLbOOeBYuAYH92knL1CCi8WEjYnI0WU-XARvX0oE6qvSUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/sorry/index?continue=https://google.com/&q=EgRRtTk0GJGcgbEGIjB9gZIilngADswQwHXor1YLbOOeBYuAYH92knL1CCi8WEjYnI0WU-XARvX0oE6qvSUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=normal&s=3iQmOoQxl6JGnSd4KT0HW9rTgUfcmwOmiSmaDHxAmGKs_DNRWrxFo6YwPbDyhgnRHj2BTCkySoHbyw-yJRfqRSqmhn6oG_ysK_kejghKuZCMyNyV_bYgrJ5XBClKeOsCfET5sLT20Qm7rEBZz2Xw57s8bc9BxWL9ydupkHoZx_tribj7aqktjbn73eSj6ABDxwRFszyvWkQeJRL38VzK-X6sbZ3xWEMDvfKlQS58Z804KT6MvHuUPaLAk3ZmmiyUQB3KZLmgnSQyLt4r9hPMJzGKgNzE5vQ&cb=b7ivx7j11it0 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.google.com/sorry/index?continue=https://google.com/&q=EgRRtTk0GJGcgbEGIjB9gZIilngADswQwHXor1YLbOOeBYuAYH92knL1CCi8WEjYnI0WU-XARvX0oE6qvSUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
Source: global traffic	HTTP traffic detected: GET /js/bg/rIjZlM8ZNfOeVQTojtt5OPuY9YnE0CAT82tG0V-YUX0.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=normal&s=3iQmOoQxl6JGnSd4KT0HW9rTgUfcmwOmiSmaDHxAmGKs_DNRWrxFo6YwPbDyhgnRHj2BTCkySoHbyw-yJRfqRSqmhn6oG_ysK_kejghKuZCMyNyV_bYgrJ5XBClKeOsCfET5sLT20Qm7rEBZz2Xw57s8bc9BxWL9ydupkHoZx_tribj7aqktjbn73eSj6ABDxwRFszyvWkQeJRL38VzK-X6sbZ3xWEMDvfKlQS58Z804KT6MvHuUPaLAk3ZmmiyUQB3KZLmgnSQyLt4r9hPMJzGKgNzE5vQ&cb=b7ivx7j11it0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=normal&s=3iQmOoQxl6JGnSd4KT0HW9rTgUfcmwOmiSmaDHxAmGKs_DNRWrxFo6YwPbDyhgnRHj2BTCkySoHbyw-yJRfqRSqmhn6oG_ysK_kejghKuZCMyNyV_bYgrJ5XBClKeOsCfET5sLT20Qm7rEBZz2Xw57s8bc9BxWL9ydupkHoZx_tribj7aqktjbn73eSj6ABDxwRFszyvWkQeJRL38VzK-X6sbZ3xWEMDvfKlQS58Z804KT6MvHuUPaLAk3ZmmiyUQB3KZLmgnSQyLt4r9hPMJzGKgNzE5vQ&cb=b7ivx7j11it0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/sorry/index?continue=https://google.com/&q=EgRRtTk0GJGcgbEGIjB9gZIilngADswQwHXor1YLbOOeBYuAYH92knL1CCi8WEjYnI0WU-XARvX0oE6qvSUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.google.com/sorry/index?continue=https://google.com/&q=EgRRtTk0GJGcgbEGIjB9gZIilngADswQwHXor1YLbOOeBYuAYH92knL1CCi8WEjYnI0WU-XARvX0oE6qvSUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=1ddwsw5A7NX36h3&MD=dTM7w9l7 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=1ddwsw5A7NX36h3&MD=dTM7w9l7 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AH0dGfTDjo_6lo3yKf_fGIOK96eTV7k8EIGuODrjGz3yWFhwKVrzS5C5ULq1AFMLv0u6vTtvIzg_xSdPlfvX168; 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA6390MQ8DygnJXJAL-TvHzhHeRJJhWSF1gDG6WF7wqk1KcpTF_O5TM7dY_ThYz9TWd7mUeaisqz6LyOJPlXda1gbp1HXHQkcHszzImEvsCk8rLwcyaY5fSuP6b9rSkVMKBjIXAQFm8iKh306ouedLCgZGwd6w6vlO7CNRI4MAsuO7XLnDkONHVnTZhpyAC0UVFJpXAl&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AH0dGfTDjo_6lo3yKf_fGIOK96eTV7k8EIGuODrjGz3yWFhwKVrzS5C5ULq1AFMLv0u6vTtvIzg_xSdPlfvX168; 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA6390MQ8DygnJXJAL-TvHzhHeRJJhWSF1gDG6WF7wqk1KcpTF_O5TM7dY_ThYz9TWd7mUeaisqz6LyOJPlXda1gbp1HXHQkcHszzImEvsCk8rLwcyaY5fSuP6b9rSkVMKBjIXAQFm8iKh306ouedLCgZGwd6w6vlO7CNRI4MAsuO7XLnDkONHVnTZhpyAC0UVFJpXAl&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AH0dGfTDjo_6lo3yKf_fGIOK96eTV7k8EIGuODrjGz3yWFhwKVrzS5C5ULq1AFMLv0u6vTtvIzg_xSdPlfvX168; 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA6390MQ8DygnJXJAL-TvHzhHeRJJhWSF1gDG6WF7wqk1KcpTF_O5TM7dY_ThYz9TWd7mUeaisqz6LyOJPlXda1gbp1HXHQkcHszzImEvsCk8rLwcyaY5fSuP6b9rSkVMKBjIXAQFm8iKh306ouedLCgZGwd6w6vlO7CNRI4MAsuO7XLnDkONHVnTZhpyAC0UVFJpXAl&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=2 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AH0dGfTDjo_6lo3yKf_fGIOK96eTV7k8EIGuODrjGz3yWFhwKVrzS5C5ULq1AFMLv0u6vTtvIzg_xSdPlfvX168; 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/replaceimage?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AH0dGfTDjo_6lo3yKf_fGIOK96eTV7k8EIGuODrjGz3yWFhwKVrzS5C5ULq1AFMLv0u6vTtvIzg_xSdPlfvX168; 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA6390MQ8DygnJXJAL-TvHzhHeRJJhWSF1gDG6WF7wqk1KcpTF_O5TM7dY_ThYz9TWd7mUeaisqz6LyOJPlXda1gbp1HXHQkcHszzImEvsCk8rLwcyaY5fSuP6b9rSkVMKBjIXAQFm8iKh306ouedLCgZGwd6w6vlO7CNRI4MAsuO7XLnDkONHVnTZhpyAC0UVFJpXAl&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=2 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AH0dGfTDjo_6lo3yKf_fGIOK96eTV7k8EIGuODrjGz3yWFhwKVrzS5C5ULq1AFMLv0u6vTtvIzg_xSdPlfvX168; 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA68w0rIJIN9BGY7n5rDbONWq8suRkCkTB8x0nuU7wHapp0Fq-EaeuqoJw7uXBzitihUTEK094EYrTFRTL2btZIG1h9fWZhFwrNp0wyrn82bpnjVIXP5IsMiY1qe9SKYtSL7n76VA5Z8zc5oJ3xhkcDD4qNewW6MJj6VPnLHQi8If8lIBKoW8dSukkBxDuFIwFWdOS5B&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AH0dGfTDjo_6lo3yKf_fGIOK96eTV7k8EIGuODrjGz3yWFhwKVrzS5C5ULq1AFMLv0u6vTtvIzg_xSdPlfvX168; 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/userverify?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AH0dGfTDjo_6lo3yKf_fGIOK96eTV7k8EIGuODrjGz3yWFhwKVrzS5C5ULq1AFMLv0u6vTtvIzg_xSdPlfvX168; 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA68w0rIJIN9BGY7n5rDbONWq8suRkCkTB8x0nuU7wHapp0Fq-EaeuqoJw7uXBzitihUTEK094EYrTFRTL2btZIG1h9fWZhFwrNp0wyrn82bpnjVIXP5IsMiY1qe9SKYtSL7n76VA5Z8zc5oJ3xhkcDD4qNewW6MJj6VPnLHQi8If8lIBKoW8dSukkBxDuFIwFWdOS5B&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AH0dGfTDjo_6lo3yKf_fGIOK96eTV7k8EIGuODrjGz3yWFhwKVrzS5C5ULq1AFMLv0u6vTtvIzg_xSdPlfvX168; 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/userverify?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AH0dGfTDjo_6lo3yKf_fGIOK96eTV7k8EIGuODrjGz3yWFhwKVrzS5C5ULq1AFMLv0u6vTtvIzg_xSdPlfvX168; 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
Source: global traffic	HTTP traffic detected: GET /?google_abuse=GOOGLE_ABUSE_EXEMPTION%3DID%3Df6cbabc468d23ca7:TM%3D1713393272:C%3Dr:IP%3D81.181.57.52-:S%3DiVHo9U4tubQjOCbzM2Vqao0%3B+path%3D/%3B+domain%3Dgoogle.com%3B+expires%3DThu,+18-Apr-2024+01:34:32+GMT HTTP/1.1Host: google.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: google.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.google.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0
Source: global traffic	HTTP traffic detected: GET /xjs/_/ss/k=xjs.hd.Lo9lRXsykaQ.L.W.O/am=cAEAAAAAAMAAAAAAAAAAAAAAAAAAgAAAAgAAAAAgAHzCAQLAhgAAAEAAAIAAAEAAAAAEAQAAACAIABgAABAAAAAAgRAACIAACSAJQQYCAIhgggFSAYABAAAAIAEAAAACAhAwAAHAQwQAAAQ6AQEkAADIACEAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAEAAAACgAAAAAAAAAAAAAAAAAAAE/d=1/ed=1/br=1/rs=ACT90oF2S7JtbOzl7PcgP8AWv8-OdLvQhA/m=cdos,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU
Source: global traffic	HTTP traffic detected: GET /images/branding/googlelogo/1x/googlelogo_color_272x92dp.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.hd.en.Gos8NmADZ0A.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAkgAIAAAoAACAAAAAAgMAQAEAAQAAWAZAICCAIABgAQhCAhzIBgIAJAAAACAAIAQgCAIAAAABAAQAAAAAAAAAAgAECBAAAAAAAAAAAAAA6AQAIAADBACEAAAEAAADIAxAcgEEKAgAAAAAAAAAAAAAEIEEwFySgIAACAAAAAAAAAAAAACCVTiyMAQ/d=1/ed=1/dg=2/br=1/rs=ACT90oHjHvDG23MtVpqokFyaqpDqKHsdQA/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;Afksuc:wMx0R;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DM55c:imLrKe;DULqB:RKfG5c;Dkk6ge:wJqrrd;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;Erl4fe:FloWmf,FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HqeXPd:cmbnH;IBADCc:RYquRb;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KeeMUb:HiPxjc;KpRAue:Tia57b;LBgRLc:XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;Oj465e:KG2eXe,KG2eXe;OohIYe:mpEAQb;Pjplud:EEDORb,PoEs9b;Q1Ow7b:x5CSu;Q6C5kf:pfdZCe;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;RDNBlf:zPRCJb;SLtqO:Kh1xYe;SMDL4c:fTfGO,fTfGO;SNUn3:ZwDk9d,x8cHvb;ShpF6e:N0pvGc;TxfV6d:YORN0b;U96pRd:FsR04;UDrY1c:eps46d;UVmjEd:EesRsb;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VsAqSb:PGf2Re;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;YV5bee:IvPZ6d;YkQtAf:rx8ur;ZMvdv:PHFPjb;ZWEUA:afR4Cf;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;bDXwRe:UsyOtc;bFZ6gf:RsDQqe;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:VruDBd;eHDfl:ofjVkb;eO3lse:nFClrf;fWLTFc:TVBJbf;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:cEt90b;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;hsLsYc:Vl118;iFQyKf:QIhFr,vfuNJf;imqimf:jKGL2e;io8t5d:sgY6Zb;jY0zg:Q6tNgc;k2Qxcb:XY51pe;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kbAm9d:MkHyGd;lkq0A:JyBE3e;nAFL3:NTMZac,s39S4;oGtAuc:sOXFj;oSUNyd:fTfGO,fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;p2tIDb:tp1Cx;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:mg5CW;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:d7YSfd,x4FYXe;rQSrae:C6D5Fc;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;tH4IIe:Ymry6;tosKvd:ZCqP3;trZL0b:qY8PFe;uY49fb:COQbmf;uuQkY:u2V3ud;vGrMZ:lPJJ0c;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:TtcOte;wV5Pjc:L8KGxe;whEZac:F4AmNb;xBbsrc:NEW1Qc;yGxLoc:FmAr0c;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zaIgPb:Qtpxbd/m=cdos,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-u
Source: global traffic	HTTP traffic detected: GET /images/branding/googlelogo/1x/googlelogo_color_272x92dp.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU
Source: global traffic	HTTP traffic detected: GET /images/searchbox/desktop_searchbox_sprites318_hr.webp HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU
Source: global traffic	HTTP traffic detected: GET /images/searchbox/desktop_searchbox_sprites318_hr.webp HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU
Source: global traffic	HTTP traffic detected: GET /complete/search?q&cp=0&client=gws-wiz&xssi=t&gs_pcrt=2&hl=en&authuser=0&psi=eU4gZpbFNNqWkPIPhcWVmAg.1713393275186&dpr=1&nolsbt=1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/md=3/k=xjs.hd.en.Gos8NmADZ0A.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAkgAIAAAoAACAAAAAAgMAQAEAAQAAWAZAICCAIABgAQhCAhzIBgIAJAAAACAAIAQgCAIAAAABAAQAAAAAAAAAAgAECBAAAAAAAAAAAAAA6AQAIAADBACEAAAEAAADIAxAcgEEKAgAAAAAAAAAAAAAEIEEwFySgIAACAAAAAAAAAAAAACCVTiyMAQ/rs=ACT90oHjHvDG23MtVpqokFyaqpDqKHsdQA HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.hd.en.Gos8NmADZ0A.O/ck=xjs.hd.Lo9lRXsykaQ.L.W.O/am=cAEAAAAAAMAAAAAAAAAAAAAAAAAAgAAAAgAAAAAkgH7CAQrAhiAAAEAAgMAQAEAAQAAWAZAICCAIABgAQhCAhzIBgZAJCIAACSAJQQ4CAIhgggFSAYABAAAAIAEAgAECBhAwAAHAQwQAAAQ6AQEsAADJACEAAAEAAADIAxAcgEEKAgAAAAAAAAAAAAAEIEEwFySgIAACAAAAAAAAAAAAACCVTiyMAQ/d=1/exm=SNUn3,cEt90b,cdos,csi,d,dtl0hd,eHDfl,hsm,jsa,mb4ZUb,qddgKe,sTsDMc/ed=1/dg=2/br=1/ujg=1/rs=ACT90oH5-nqU-fkpcukkJFXUbfQh-hjsyg/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;Afksuc:wMx0R;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DM55c:imLrKe;DULqB:RKfG5c;Dkk6ge:wJqrrd;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;Erl4fe:FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HqeXPd:cmbnH;IBADCc:RYquRb;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KeeMUb:HiPxjc;KpRAue:Tia57b;LBgRLc:XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;Oj465e:KG2eXe;OohIYe:mpEAQb;Pjplud:EEDORb,PoEs9b;Q1Ow7b:x5CSu;Q6C5kf:pfdZCe;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;RDNBlf:zPRCJb;SLtqO:Kh1xYe;SMDL4c:fTfGO;SNUn3:ZwDk9d,x8cHvb;ShpF6e:N0pvGc;TxfV6d:YORN0b;U96pRd:FsR04;UDrY1c:eps46d;UVmjEd:EesRsb;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VsAqSb:PGf2Re;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;YV5bee:IvPZ6d;YkQtAf:rx8ur;ZMvdv:PHFPjb;ZWEUA:afR4Cf;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;bDXwRe:UsyOtc;bFZ6gf:RsDQqe;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:VruDBd;eHDfl:ofjVkb;eO3lse:nFClrf;fWLTFc:TVBJbf;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:cEt90b;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;hsLsYc:Vl118;iFQyKf:QIhFr,vfuNJf;imqimf:jKGL2e;io8t5d:sgY6Zb;jY0zg:Q6tNgc;k2Qxcb:XY51pe;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kbAm9d:MkHyGd;lkq0A:JyBE3e;nAFL3:NTMZac,s39S4;oGtAuc:sOXFj;oSUNyd:fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;p2tIDb:tp1Cx;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:mg5CW;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:d7YSfd,x4FYXe;rQSrae:C6D5Fc;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;tH4IIe:Ymry6;tosKvd:ZCqP3;trZL0b:qY8PFe;uY49fb:COQbmf;uuQkY:u2V3ud;vGrMZ:lPJJ0c;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:TtcOte;wV5Pjc:L8KGxe;whEZac:F4AmNb;xBbsrc:NEW1Qc;yGxLoc:FmAr0c;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zaIgPb:Qtpxbd/m=B2qlPe,DhPYme,GU4Gab,MpJwZc,NzU6V,UUJqVe,Wo3n8,aa,abd,async,epYOx,ifl,ms4mZb,mu,pHXghd,q0xTif,s39S4,sOXFj,sb_wiz,sf,sonic,spch?xjs=s1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-vers
Source: global traffic	HTTP traffic detected: GET /client_204?atyp=i&biw=1280&bih=907&ei=eU4gZpbFNNqWkPIPhcWVmAg&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU
Source: global traffic	HTTP traffic detected: GET /widget/callout?prid=19037050&pgid=19037049&puid=9ceb59a7585b55bd&cce=1&dc=1&origin=https%3A%2F%2Fwww.google.com&cn=callout&pid=1&spid=538&hl=en HTTP/1.1Host: ogs.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.dCBC8e6ENbg.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo8oB7UmguRctpg6togRivSNxNKjzQ/cb=gapi.loaded_0 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU
Source: global traffic	HTTP traffic detected: GET /complete/search?q&cp=0&client=gws-wiz&xssi=t&gs_pcrt=2&hl=en&authuser=0&psi=eU4gZpbFNNqWkPIPhcWVmAg.1713393275186&dpr=1&nolsbt=1 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU
Source: global traffic	HTTP traffic detected: GET /images/hpp/ic_wahlberg_product_core_48.png8.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ogs.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/md=3/k=xjs.hd.en.Gos8NmADZ0A.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAkgAIAAAoAACAAAAAAgMAQAEAAQAAWAZAICCAIABgAQhCAhzIBgIAJAAAACAAIAQgCAIAAAABAAQAAAAAAAAAAgAECBAAAAAAAAAAAAAA6AQAIAADBACEAAAEAAADIAxAcgEEKAgAAAAAAAAAAAAAEIEEwFySgIAACAAAAAAAAAAAAACCVTiyMAQ/rs=ACT90oHjHvDG23MtVpqokFyaqpDqKHsdQA HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU; OGPC=19037049-1:
Source: global traffic	HTTP traffic detected: GET /xjs/_/ss/k=xjs.hd.Lo9lRXsykaQ.L.W.O/am=cAEAAAAAAMAAAAAAAAAAAAAAAAAAgAAAAgAAAAAgAHzCAQLAhgAAAEAAAIAAAEAAAAAEAQAAACAIABgAABAAAAAAgRAACIAACSAJQQYCAIhgggFSAYABAAAAIAEAAAACAhAwAAHAQwQAAAQ6AQEkAADIACEAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAEAAAACgAAAAAAAAAAAAAAAAAAAE/d=0/dg=2/br=1/rs=ACT90oF2S7JtbOzl7PcgP8AWv8-OdLvQhA/m=syk1?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU; OGPC=19037049-1:
Source: global traffic	HTTP traffic detected: GET /images/hpp/ic_wahlberg_product_core_48.png8.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU; OGPC=19037049-1:
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.hd.en.Gos8NmADZ0A.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAkgAIAAAoAACAAAAAAgMAQAEAAQAAWAZAICCAIABgAQhCAhzIBgIAJAAAACAAIAQgCAIAAAABAAQAAAAAAAAAAgAECBAAAAAAAAAAAAAA6AQAIAADBACEAAAEAAADIAxAcgEEKAgAAAAAAAAAAAAAEIEEwFySgIAACAAAAAAAAAAAAACCVTiyMAQ/d=0/dg=2/br=1/rs=ACT90oHjHvDG23MtVpqokFyaqpDqKHsdQA/m=sy18x,P10Owf,syo5,sy17j,sy17l,gSZvdb,sytk,sytq,sytr,WlNQGd,syo3,syu8,syua,nabPbb,syo4,syo6,syo7,syo8,syoa,DPreE,syk1,sytj,sytl,CnSW2d,kQvlef,syu9,fXO0xe?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU; OGPC=19037049-1:
Source: global traffic	HTTP traffic detected: GET /client_204?cs=1&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU; OGPC=19037049-1:
Source: global traffic	HTTP traffic detected: GET /async/hpba?vet=10ahUKEwjW5curp8qFAxVaC0QIHYViBYMQj-0KCB0..i&ei=eU4gZpbFNNqWkPIPhcWVmAg&opi=89978449&yv=3&cs=0&async=isImageHp:false,_ck:xjs.hd.Lo9lRXsykaQ.L.W.O,_k:xjs.hd.en.Gos8NmADZ0A.O,_am:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAkgAIAAAoAACAAAAAAgMAQAEAAQAAWAZAICCAIABgAQhCAhzIBgIAJAAAACAAIAQgCAIAAAABAAQAAAAAAAAAAgAECBAAAAAAAAAAAAAA6AQAIAADBACEAAAEAAADIAxAcgEEKAgAAAAAAAAAAAAAEIEEwFySgIAACAAAAAAAAAAAAACCVTiyMAQ,_cssam:cAEAAAAAAMAAAAAAAAAAAAAAAAAAgAAAAgAAAAAgAHzCAQLAhgAAAEAAAIAAAEAAAAAEAQAAACAIABgAABAAAAAAgRAACIAACSAJQQYCAIhgggFSAYABAAAAIAEAAAACAhAwAAHAQwQAAAQ6AQEkAADIACEAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAEAAAACgAAAAAAAAAAAAAAAAAAAE,_csss:ACT90oF2S7JtbOzl7PcgP8AWv8-OdLvQhA,_fmt:prog,_id:a3JU5b HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU; OGPC=19037049-1:
Source: global traffic	HTTP traffic detected: GET /xjs/_/ss/k=xjs.hd.Lo9lRXsykaQ.L.W.O/am=cAEAAAAAAMAAAAAAAAAAAAAAAAAAgAAAAgAAAAAgAHzCAQLAhgAAAEAAAIAAAEAAAAAEAQAAACAIABgAABAAAAAAgRAACIAACSAJQQYCAIhgggFSAYABAAAAIAEAAAACAhAwAAHAQwQAAAQ6AQEkAADIACEAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAEAAAACgAAAAAAAAAAAAAAAAAAAE/d=0/dg=2/br=1/rs=ACT90oF2S7JtbOzl7PcgP8AWv8-OdLvQhA/m=syk1?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU; OGPC=19037049-1:
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; OGPC=19037049-1:; NID=513=W5yCzMT05Sv_9SmhCPFD4YomQcTLqx6qQ3jjGL6k3A7jAhYzX-y8zw1aSlsp7op7l1UJQAsPOnLEPoVQCpYTeUPRyviJZSs6kBZUURyMzCs3bKOFSEJEib1nfjXwC_4gAmf4jXhuxWCAJVO78O-wlIgUFbPq3-78pdmQf7DXhiqzGdRvYGSKk74qiA_J
Source: global traffic	HTTP traffic detected: GET /async/hpba?vet=10ahUKEwjW5curp8qFAxVaC0QIHYViBYMQj-0KCB0..i&ei=eU4gZpbFNNqWkPIPhcWVmAg&opi=89978449&yv=3&cs=0&async=isImageHp:false,_ck:xjs.hd.Lo9lRXsykaQ.L.W.O,_k:xjs.hd.en.Gos8NmADZ0A.O,_am:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAkgAIAAAoAACAAAAAAgMAQAEAAQAAWAZAICCAIABgAQhCAhzIBgIAJAAAACAAIAQgCAIAAAABAAQAAAAAAAAAAgAECBAAAAAAAAAAAAAA6AQAIAADBACEAAAEAAADIAxAcgEEKAgAAAAAAAAAAAAAEIEEwFySgIAACAAAAAAAAAAAAACCVTiyMAQ,_cssam:cAEAAAAAAMAAAAAAAAAAAAAAAAAAgAAAAgAAAAAgAHzCAQLAhgAAAEAAAIAAAEAAAAAEAQAAACAIABgAABAAAAAAgRAACIAACSAJQQYCAIhgggFSAYABAAAAIAEAAAACAhAwAAHAQwQAAAQ6AQEkAADIACEAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAEAAAACgAAAAAAAAAAAAAAAAAAAE,_csss:ACT90oF2S7JtbOzl7PcgP8AWv8-OdLvQhA,_fmt:prog,_id:a3JU5b HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; OGPC=19037049-1:; NID=513=YOyhOEA-rVSIBR9SawfTVYUzEw0R9DjMddwqqytPkoSkXKP5CwIoweOYvFcUasxUSzmgwHmsn6HfyVprCcJalmvaMFbEHrjiDz1fAXKUBzvjvy5qCLMd-eRyzxg6s27oPd4Mgq1sJvX69FbF6RVNO4FZZeL33WWje9SmqIU3eAOR4Zt8X5b7pQ33
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.hd.en.Gos8NmADZ0A.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAkgAIAAAoAACAAAAAAgMAQAEAAQAAWAZAICCAIABgAQhCAhzIBgIAJAAAACAAIAQgCAIAAAABAAQAAAAAAAAAAgAECBAAAAAAAAAAAAAA6AQAIAADBACEAAAEAAADIAxAcgEEKAgAAAAAAAAAAAAAEIEEwFySgIAACAAAAAAAAAAAAACCVTiyMAQ/d=0/dg=2/br=1/rs=ACT90oHjHvDG23MtVpqokFyaqpDqKHsdQA/m=syev,aLUfP?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; OGPC=19037049-1:; NID=513=YOyhOEA-rVSIBR9SawfTVYUzEw0R9DjMddwqqytPkoSkXKP5CwIoweOYvFcUasxUSzmgwHmsn6HfyVprCcJalmvaMFbEHrjiDz1fAXKUBzvjvy5qCLMd-eRyzxg6s27oPd4Mgq1sJvX69FbF6RVNO4FZZeL33WWje9SmqIU3eAOR4Zt8X5b7pQ33
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.hd.en.Gos8NmADZ0A.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAkgAIAAAoAACAAAAAAgMAQAEAAQAAWAZAICCAIABgAQhCAhzIBgIAJAAAACAAIAQgCAIAAAABAAQAAAAAAAAAAgAECBAAAAAAAAAAAAAA6AQAIAADBACEAAAEAAADIAxAcgEEKAgAAAAAAAAAAAAAEIEEwFySgIAACAAAAAAAAAAAAACCVTiyMAQ/d=0/dg=2/br=1/rs=ACT90oHjHvDG23MtVpqokFyaqpDqKHsdQA/m=kMFpHd,sy8l,bm51tf?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; OGPC=19037049-1:; NID=513=YOyhOEA-rVSIBR9SawfTVYUzEw0R9DjMddwqqytPkoSkXKP5CwIoweOYvFcUasxUSzmgwHmsn6HfyVprCcJalmvaMFbEHrjiDz1fAXKUBzvjvy5qCLMd-eRyzxg6s27oPd4Mgq1sJvX69FbF6RVNO4FZZeL33WWje9SmqIU3eAOR4Zt8X5b7pQ33
Source: global traffic	HTTP traffic detected: GET /gen_204?atyp=i&ct=psnt&cad=&nt=navigate&ei=eU4gZpbFNNqWkPIPhcWVmAg&zx=1713393278214&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; OGPC=19037049-1:; NID=513=YOyhOEA-rVSIBR9SawfTVYUzEw0R9DjMddwqqytPkoSkXKP5CwIoweOYvFcUasxUSzmgwHmsn6HfyVprCcJalmvaMFbEHrjiDz1fAXKUBzvjvy5qCLMd-eRyzxg6s27oPd4Mgq1sJvX69FbF6RVNO4FZZeL33WWje9SmqIU3eAOR4Zt8X5b7pQ33
Source: global traffic	HTTP traffic detected: GET /adsid/google/ui HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; OGPC=19037049-1:; NID=513=YOyhOEA-rVSIBR9SawfTVYUzEw0R9DjMddwqqytPkoSkXKP5CwIoweOYvFcUasxUSzmgwHmsn6HfyVprCcJalmvaMFbEHrjiDz1fAXKUBzvjvy5qCLMd-eRyzxg6s27oPd4Mgq1sJvX69FbF6RVNO4FZZeL33WWje9SmqIU3eAOR4Zt8X5b7pQ33
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; OGPC=19037049-1:; NID=513=SPfeMcrZWCeKTY7Ps4VGmUPgmzJtr2sHk1u1kY5o7iw7DktQiP5TdP5a3X6wyEZJjuVhAFCBYmbSHOVqOhWy87wcIp9Wt_TxiUbfmTshiCclORY6pOFJLZ2Z9hm6DoiWYpjxwzKABlo9AEcetQUjScGijdCtJ98zl9rz7vPINNGPXa1-h4_EdtrPYKDMVHJ7kKq45Rs
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: makeupenumerate.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: unknown

DNS traffic detected: queries for: makeupenumerate.com

Source: unknown

HTTP traffic detected: POST /recaptcha/api2/reload?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 7356sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-protobufferAccept: */*Origin: https://www.google.comX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY

Source: chromecache_103.1.dr	String found in binary or memory: http://schema.org/WebPage
Source: chromecache_108.1.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_95.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_95.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_86.1.dr	String found in binary or memory: https://accounts.google.com/signin/v2/identifier%3Fec%3Dfutura_hpp_co_si_001_p%26continue%3Dhttps%25
Source: chromecache_103.1.dr, chromecache_108.1.dr, chromecache_95.1.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_117.1.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_95.1.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_115.1.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_115.1.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_136.1.dr	String found in binary or memory: https://content-push.googleapis.com/upload/
Source: chromecache_95.1.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_95.1.dr	String found in binary or memory: https://csp.withgoogle.com/csp/lcreport/
Source: chromecache_115.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_115.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_115.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_95.1.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_136.1.dr	String found in binary or memory: https://embeddedassistant-webchannel.googleapis.com/google.assistant.embedded.v1.EmbeddedAssistant/A
Source: chromecache_108.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_108.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_108.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_108.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: chromecache_88.1.dr	String found in binary or memory: https://lens.google.com
Source: chromecache_136.1.dr	String found in binary or memory: https://lens.google.com/gen204
Source: chromecache_86.1.dr	String found in binary or memory: https://ogs.google.com/
Source: chromecache_103.1.dr	String found in binary or memory: https://ogs.google.com/widget/app/so?awwd=1
Source: chromecache_86.1.dr	String found in binary or memory: https://ogs.google.com/widget/callout
Source: chromecache_103.1.dr	String found in binary or memory: https://ogs.google.com/widget/callout?prid=19037050
Source: chromecache_88.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_95.1.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_95.1.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_136.1.dr	String found in binary or memory: https://push.clients6.google.com/upload/
Source: chromecache_115.1.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_86.1.dr	String found in binary or memory: https://ssl.gstatic.com
Source: chromecache_111.1.dr, chromecache_143.1.dr	String found in binary or memory: https://ssl.gstatic.com/images/icons/material/system/1x/done_black_16dp.png)
Source: chromecache_111.1.dr, chromecache_143.1.dr	String found in binary or memory: https://ssl.gstatic.com/ui/v1/menu/checkmark2.png)
Source: chromecache_136.1.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_115.1.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_115.1.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_115.1.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_115.1.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_88.1.dr	String found in binary or memory: https://support.google.com/websearch/answer/106230
Source: chromecache_117.1.dr, chromecache_88.1.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_95.1.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_115.1.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_86.1.dr, chromecache_108.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_86.1.dr	String found in binary or memory: https://www.google.com"
Source: chromecache_103.1.dr	String found in binary or memory: https://www.google.com/_/og/promos/
Source: chromecache_86.1.dr	String found in binary or memory: https://www.google.com/images/hpp/ic_wahlberg_product_core_48.png8.png
Source: chromecache_103.1.dr	String found in binary or memory: https://www.google.com/intl/en/about/products
Source: chromecache_117.1.dr, chromecache_88.1.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: chromecache_109.1.dr, chromecache_115.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_136.1.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_86.1.dr	String found in binary or memory: https://www.google.com/url?q
Source: chromecache_103.1.dr	String found in binary or memory: https://www.google.com/url?q=https://accounts.google.com/signin/v2/identifier%3Fec%3Dfutura_hpp_co_s
Source: chromecache_95.1.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_95.1.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_115.1.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__.
Source: chromecache_86.1.dr	String found in binary or memory: https://www.gstatic.com
Source: chromecache_86.1.dr	String found in binary or memory: https://www.gstatic.com/_/mss/boq-one-google/_/js/k=boq-one-google.OneGoogleWidgetUi.en.kIS1Dzh9gxA.
Source: chromecache_108.1.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_108.1.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_108.1.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: chromecache_108.1.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/broken_image_grey600_18dp.png
Source: chromecache_108.1.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/2x/broken_image_grey600_18dp.png
Source: chromecache_103.1.dr	String found in binary or memory: https://www.gstatic.com/og/_/js/k=og.qtm.en_US.oT1FwJRCVC4.2019.O/rt=j/m=qabr
Source: chromecache_103.1.dr	String found in binary or memory: https://www.gstatic.com/og/_/ss/k=og.qtm.T5bVtXo12IQ.L.W.O/m=qcwid/excm=qaaw
Source: chromecache_109.1.dr, chromecache_87.1.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js
Source: chromecache_136.1.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.16:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.16:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.16:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.16:49729 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@15/109@20/12

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://makeupenumerate.com/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1964,i,11828674635919050381,7814478135417287115,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1964,i,11828674635919050381,7814478135417287115,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:	Binary string: oHb=function(){var a,b,c,d,e,f,g,h,k;return _.hh(function(l){if(1==l.ka){a=(0,_.$b.cast)(window.google.aipf,_.XGa);window.google.aipf={push:function(){_.nd(Error("rf"))}};_.mHb={};b=_.Ta(a);for(c=b.next();!c.done;c=b.next())d=c.value,_.mHb[d.id]=d;var p=l.yield;nHb\|\|(_.PDb?nHb=Promise.resolve(_.ODb.Jg()):(_.QDb=new _.Cg,nHb=_.QDb.promise));return p.call(l,nHb,2)}e=l.oa;f=(0,_.$b.zd)(e.ykd,"Registered RequestFactory implementation does not support hydrating inline prefetches.");g=_.Ta(a);for(h=g.next();!h.done;h= source: chromecache_136.1.dr
Source:	Binary string: _.odb=function(a){this.Ea=_.n(a)};_.C(_.odb,_.q);_.pdb=function(a){this.Ea=_.n(a)};_.C(_.pdb,_.q);_.pdb.prototype.getName=function(){return _.z(this,1)};_.pdb.prototype.Kf=function(a){return _.Oe(this,1,a)};_.pdb.prototype.Ug=function(){return _.df(this,1)};_.qdb=function(a){this.Ea=_.n(a)};_.C(_.qdb,_.q);_.Nr=function(a){this.Ea=_.n(a)};_.C(_.Nr,_.q);_.Nr.prototype.Vh=function(){return _.r(this,_.Er,9)};_.Nr.prototype.Zd=function(){return _.r(this,_.qdb,1)};_.Nr.prototype.setLabel=function(a,b){return _.bi(this,7,_.pdb,a,b)};_.Nr.ob=[7,10,15,16];_.Nr.prototype.nb="DWh76e"; source: chromecache_136.1.dr
Source:	Binary string: 5);case 5:e=g=h.oa;case 4:if(e&&!c){var k=e,l=d&&d.has("ved")?d.get("ved"):"";k=_.z(k.header,1);k=_.un(k).Kc("sqi","17");l&&k.Kc("refv",l);k.log()}case 2:return h.return({JBa:f,Ava:e})}})};var UHb=function(a,b,c){a=Error.call(this,a);this.message=a.message;"stack"in a&&(this.stack=a.stack);a={};this.details=(a.req=b,a.res=c,a)};_.C(UHb,Error);var WHb=!1,$Hb=0;var hIb=function(a){this.Ea=_.n(a)};_.C(hIb,_.q);_.PDb=!0; source: chromecache_136.1.dr
Source:	Binary string: _.$Cb=!!(_.lh[24]&8192);_.aDb=!!(_.lh[24]>>14&1);_.bDb=!!(_.lh[24]>>17&1);_.cDb=!!(_.lh[24]>>18&1);_.dDb=!!(_.lh[24]>>21&1);_.eDb=!!(_.lh[24]>>25&1);_.fDb=!!(_.lh[25]&1);_.gDb=!!(_.lh[25]&128);_.hDb=!!(_.lh[25]&256);_.iDb=!!(_.lh[25]&512);_.jDb=!!(_.lh[25]&1024);_.kDb=!!(_.lh[24]>>15&1);_.lDb=!!(_.lh[24]>>19&1);_.mDb=!!(_.lh[25]&64);_.nDb=!!(_.lh[24]>>23&1);_.oDb=!!(_.lh[24]>>24&1);_.pDb=!!(_.lh[24]>>29&1);_.qDb=!!(_.lh[24]>>27&1);_.rDb=!!(_.lh[25]&16);_.sDb=!!(_.lh[25]&8);_.tDb=!!(_.lh[24]>>16&1); source: chromecache_136.1.dr
Source:	Binary string: _.ODb=new _.nn;_.ODb.oa=!0;_.PDb=!1; source: chromecache_136.1.dr

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
http://www.broofa.com	0%	URL Reputation	safe
https://csp.withgoogle.com/csp/lcreport/	0%	URL Reputation	safe
https://recaptcha.net	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
google.com	74.125.136.101	true	false	high
www3.l.google.com	172.217.215.101	true	false	high
plus.l.google.com	142.250.9.101	true	false	high
play.google.com	64.233.177.102	true	false	high
makeupenumerate.com	172.240.108.76	true	false	unknown
www.google.com	74.125.138.147	true	false	high
adservice.google.com	64.233.176.157	true	false	high
ogs.google.com	unknown	unknown	false	high
apis.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://www.google.com/recaptcha/api2/reload?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	false	high
https://www.google.com/xjs/_/js/k=xjs.hd.en.Gos8NmADZ0A.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAkgAIAAAoAACAAAAAAgMAQAEAAQAAWAZAICCAIABgAQhCAhzIBgIAJAAAACAAIAQgCAIAAAABAAQAAAAAAAAAAgAECBAAAAAAAAAAAAAA6AQAIAADBACEAAAEAAADIAxAcgEEKAgAAAAAAAAAAAAAEIEEwFySgIAACAAAAAAAAAAAAACCVTiyMAQ/d=0/dg=2/br=1/rs=ACT90oHjHvDG23MtVpqokFyaqpDqKHsdQA/m=sy18x,P10Owf,syo5,sy17j,sy17l,gSZvdb,sytk,sytq,sytr,WlNQGd,syo3,syu8,syua,nabPbb,syo4,syo6,syo7,syo8,syoa,DPreE,syk1,sytj,sytl,CnSW2d,kQvlef,syu9,fXO0xe?xjs=s3	false	high
https://www.google.com/recaptcha/api2/userverify?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	false	high
https://www.google.com/recaptcha/api2/payload?p=06AFcWeA6390MQ8DygnJXJAL-TvHzhHeRJJhWSF1gDG6WF7wqk1KcpTF_O5TM7dY_ThYz9TWd7mUeaisqz6LyOJPlXda1gbp1HXHQkcHszzImEvsCk8rLwcyaY5fSuP6b9rSkVMKBjIXAQFm8iKh306ouedLCgZGwd6w6vlO7CNRI4MAsuO7XLnDkONHVnTZhpyAC0UVFJpXAl&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=2	false	high
https://www.google.com/gen_204?atyp=csi&ei=eU4gZpbFNNqWkPIPhcWVmAg&s=promo&rt=hpbas.2800,hpbarr.680&zx=1713393277118&opi=89978449	false	high
https://www.google.com/gen_204?atyp=csi&ei=eU4gZpbFNNqWkPIPhcWVmAg&s=webhp&t=all&wh=907&imn=11&ima=0&imad=0&imac=2&imf=0&aft=1&aftp=-1&adh=&ime=1&imex=1&imeh=0&imeha=0&imehb=0&imea=0&imeb=0&imel=0&imed=0&scp=0&mem=ujhs.17,tjhs.22,jhsl.2173,dm.8&nv=ne.2,feid.d86e3dcc-32a9-4378-905e-22a63a987187&net=dl.6650,ect.4g,rtt.200&hp=&sys=hc.4&p=bs.true&rt=hst.118,cbt.119,aft.805,prt.805,aftqf.813,xjses.1477,xjsee.1517,xjs.1517,lcp.824,fcp.805,wsrt.2468,cst.215,dnst.0,rqst.762,rspt.437,sslt.214,rqstt.2143,unt.1927,cstt.1928,dit.3284&zx=1713393275159&opi=89978449	false	high
http://makeupenumerate.com/	false	unknown
https://www.google.com/images/branding/googlelogo/1x/googlelogo_color_272x92dp.png	false	high
https://www.google.com/images/hpp/ic_wahlberg_product_core_48.png8.png	false	high
https://www.google.com/async/hpba?vet=10ahUKEwjW5curp8qFAxVaC0QIHYViBYMQj-0KCB0..i&ei=eU4gZpbFNNqWkPIPhcWVmAg&opi=89978449&yv=3&cs=0&async=isImageHp:false,_ck:xjs.hd.Lo9lRXsykaQ.L.W.O,_k:xjs.hd.en.Gos8NmADZ0A.O,_am:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAkgAIAAAoAACAAAAAAgMAQAEAAQAAWAZAICCAIABgAQhCAhzIBgIAJAAAACAAIAQgCAIAAAABAAQAAAAAAAAAAgAECBAAAAAAAAAAAAAA6AQAIAADBACEAAAEAAADIAxAcgEEKAgAAAAAAAAAAAAAEIEEwFySgIAACAAAAAAAAAAAAACCVTiyMAQ,_cssam:cAEAAAAAAMAAAAAAAAAAAAAAAAAAgAAAAgAAAAAgAHzCAQLAhgAAAEAAAIAAAEAAAAAEAQAAACAIABgAABAAAAAAgRAACIAACSAJQQYCAIhgggFSAYABAAAAIAEAAAACAhAwAAHAQwQAAAQ6AQEkAADIACEAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAEAAAACgAAAAAAAAAAAAAAAAAAAE,_csss:ACT90oF2S7JtbOzl7PcgP8AWv8-OdLvQhA,_fmt:prog,_id:a3JU5b	false	high
https://www.google.com/sorry/index?continue=https://google.com/&q=EgRRtTk0GJGcgbEGIjB9gZIilngADswQwHXor1YLbOOeBYuAYH92knL1CCi8WEjYnI0WU-XARvX0oE6qvSUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	false	high
about:blank	false	low
https://www.google.com/client_204?atyp=i&biw=1280&bih=907&ei=eU4gZpbFNNqWkPIPhcWVmAg&opi=89978449	false	high
https://www.google.com/gen_204?atyp=i&ct=psnt&cad=&nt=navigate&ei=eU4gZpbFNNqWkPIPhcWVmAg&zx=1713393278214&opi=89978449	false	high
https://ogs.google.com/widget/callout?prid=19037050&pgid=19037049&puid=9ceb59a7585b55bd&cce=1&dc=1&origin=https%3A%2F%2Fwww.google.com&cn=callout&pid=1&spid=538&hl=en	false	high
https://www.google.com/recaptcha/api.js	false	high
https://adservice.google.com/adsid/google/ui	false	high
https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	false	high
https://www.google.com/gen_204?atyp=i&ei=eU4gZpbFNNqWkPIPhcWVmAg&dt19=2&zx=1713393276436&opi=89978449	false	high
https://www.google.com/xjs/_/js/k=xjs.hd.en.Gos8NmADZ0A.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAkgAIAAAoAACAAAAAAgMAQAEAAQAAWAZAICCAIABgAQhCAhzIBgIAJAAAACAAIAQgCAIAAAABAAQAAAAAAAAAAgAECBAAAAAAAAAAAAAA6AQAIAADBACEAAAEAAADIAxAcgEEKAgAAAAAAAAAAAAAEIEEwFySgIAACAAAAAAAAAAAAACCVTiyMAQ/d=0/dg=2/br=1/rs=ACT90oHjHvDG23MtVpqokFyaqpDqKHsdQA/m=syev,aLUfP?xjs=s3	false	high
https://www.google.com/js/bg/rIjZlM8ZNfOeVQTojtt5OPuY9YnE0CAT82tG0V-YUX0.js	false	high
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.dCBC8e6ENbg.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo8oB7UmguRctpg6togRivSNxNKjzQ/cb=gapi.loaded_0	false	high
https://play.google.com/log?format=json&hasfast=true&authuser=0	false	high
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC	false	high
https://www.google.com/gen_204?s=webhp&t=cap&atyp=csi&ei=eU4gZpbFNNqWkPIPhcWVmAg&rt=wsrt.2468,cbt.119,hst.118&opi=89978449	false	high
https://www.google.com/xjs/_/ss/k=xjs.hd.Lo9lRXsykaQ.L.W.O/am=cAEAAAAAAMAAAAAAAAAAAAAAAAAAgAAAAgAAAAAgAHzCAQLAhgAAAEAAAIAAAEAAAAAEAQAAACAIABgAABAAAAAAgRAACIAACSAJQQYCAIhgggFSAYABAAAAIAEAAAACAhAwAAHAQwQAAAQ6AQEkAADIACEAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAEAAAACgAAAAAAAAAAAAAAAAAAAE/d=1/ed=1/br=1/rs=ACT90oF2S7JtbOzl7PcgP8AWv8-OdLvQhA/m=cdos,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl	false	high
https://www.google.com/gen_204?s=webhp&t=aft&atyp=csi&ei=eU4gZpbFNNqWkPIPhcWVmAg&rt=wsrt.2468,aft.805,cbt.119,hst.118,prt.805&wh=907&imn=11&ima=0&imad=0&imac=2&imf=0&aft=1&aftp=-1&opi=89978449	false	high
https://www.google.com/client_204?cs=1&opi=89978449	false	high
https://www.google.com/favicon.ico	false	high
https://google.com/	false	high
https://www.google.com/gen_204?atyp=csi&ei=eU4gZpbFNNqWkPIPhcWVmAg&s=webhp&nt=navigate&t=fi&st=10938&fid=0&zx=1713393282184&opi=89978449	false	high
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=normal&s=3iQmOoQxl6JGnSd4KT0HW9rTgUfcmwOmiSmaDHxAmGKs_DNRWrxFo6YwPbDyhgnRHj2BTCkySoHbyw-yJRfqRSqmhn6oG_ysK_kejghKuZCMyNyV_bYgrJ5XBClKeOsCfET5sLT20Qm7rEBZz2Xw57s8bc9BxWL9ydupkHoZx_tribj7aqktjbn73eSj6ABDxwRFszyvWkQeJRL38VzK-X6sbZ3xWEMDvfKlQS58Z804KT6MvHuUPaLAk3ZmmiyUQB3KZLmgnSQyLt4r9hPMJzGKgNzE5vQ&cb=b7ivx7j11it0	false	high
https://www.google.com/recaptcha/api2/payload?p=06AFcWeA6390MQ8DygnJXJAL-TvHzhHeRJJhWSF1gDG6WF7wqk1KcpTF_O5TM7dY_ThYz9TWd7mUeaisqz6LyOJPlXda1gbp1HXHQkcHszzImEvsCk8rLwcyaY5fSuP6b9rSkVMKBjIXAQFm8iKh306ouedLCgZGwd6w6vlO7CNRI4MAsuO7XLnDkONHVnTZhpyAC0UVFJpXAl&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	false	high
https://play.google.com/log?format=json&hasfast=true	false	high
https://www.google.com/sorry/index	false	high
https://www.google.com/complete/search?q&cp=0&client=gws-wiz&xssi=t&gs_pcrt=2&hl=en&authuser=0&psi=eU4gZpbFNNqWkPIPhcWVmAg.1713393275186&dpr=1&nolsbt=1	false	high
https://www.google.com/gen_204?atyp=csi&ei=fU4gZuqaGJKVwbkP6pyliAc&s=async&astyp=hpba&ima=0&imn=0&mem=ujhs.17,tjhs.22,jhsl.2173,dm.8&nv=ne.2,feid.d86e3dcc-32a9-4378-905e-22a63a987187&hp=&rt=ttfb.675,st.676,bs.27,aaft.678,acrt.678,art.678&zx=1713393277118&opi=89978449	false	high
https://www.google.com/images/searchbox/desktop_searchbox_sprites318_hr.webp	false	high
https://www.google.com/xjs/_/ss/k=xjs.hd.Lo9lRXsykaQ.L.W.O/am=cAEAAAAAAMAAAAAAAAAAAAAAAAAAgAAAAgAAAAAgAHzCAQLAhgAAAEAAAIAAAEAAAAAEAQAAACAIABgAABAAAAAAgRAACIAACSAJQQYCAIhgggFSAYABAAAAIAEAAAACAhAwAAHAQwQAAAQ6AQEkAADIACEAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAEAAAACgAAAAAAAAAAAAAAAAAAAE/d=0/dg=2/br=1/rs=ACT90oF2S7JtbOzl7PcgP8AWv8-OdLvQhA/m=syk1?xjs=s3	false	high
https://www.google.com/recaptcha/api2/replaceimage?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	false	high
https://www.google.com/xjs/_/js/md=3/k=xjs.hd.en.Gos8NmADZ0A.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAkgAIAAAoAACAAAAAAgMAQAEAAQAAWAZAICCAIABgAQhCAhzIBgIAJAAAACAAIAQgCAIAAAABAAQAAAAAAAAAAgAECBAAAAAAAAAAAAAA6AQAIAADBACEAAAEAAADIAxAcgEEKAgAAAAAAAAAAAAAEIEEwFySgIAACAAAAAAAAAAAAACCVTiyMAQ/rs=ACT90oHjHvDG23MtVpqokFyaqpDqKHsdQA	false	high
https://www.google.com/xjs/_/js/k=xjs.hd.en.Gos8NmADZ0A.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAkgAIAAAoAACAAAAAAgMAQAEAAQAAWAZAICCAIABgAQhCAhzIBgIAJAAAACAAIAQgCAIAAAABAAQAAAAAAAAAAgAECBAAAAAAAAAAAAAA6AQAIAADBACEAAAEAAADIAxAcgEEKAgAAAAAAAAAAAAAEIEEwFySgIAACAAAAAAAAAAAAACCVTiyMAQ/d=0/dg=2/br=1/rs=ACT90oHjHvDG23MtVpqokFyaqpDqKHsdQA/m=kMFpHd,sy8l,bm51tf?xjs=s3	false	high
https://www.google.com/	false	high
https://www.google.com/gen_204?atyp=csi&ei=eU4gZpbFNNqWkPIPhcWVmAg&s=promo&rt=hpbas.2800&zx=1713393276438&opi=89978449	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://ogs.google.com/	chromecache_86.1.dr	false		high
http://www.broofa.com	chromecache_108.1.dr	false	URL Reputation: safe	unknown
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_115.1.dr	false		high
https://ogs.google.com/widget/app/so?awwd=1	chromecache_103.1.dr	false		high
https://support.google.com/recaptcha#6262736	chromecache_115.1.dr	false		high
https://www.google.com/intl/en/about/products	chromecache_103.1.dr	false		high
https://www.google.com/log?format=json&hasfast=true	chromecache_117.1.dr, chromecache_88.1.dr	false		high
https://lens.google.com	chromecache_88.1.dr	false		high
https://ogs.google.com/widget/callout	chromecache_86.1.dr	false		high
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	chromecache_95.1.dr	false		high
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_115.1.dr	false		high
http://schema.org/WebPage	chromecache_103.1.dr	false		high
https://cloud.google.com/contact	chromecache_115.1.dr	false		high
https://lens.google.com/gen204	chromecache_136.1.dr	false		high
https://support.google.com/	chromecache_136.1.dr	false		high
https://www.google.com	chromecache_86.1.dr, chromecache_108.1.dr	false		high
https://www.google.com/url?q	chromecache_86.1.dr	false		high
https://csp.withgoogle.com/csp/lcreport/	chromecache_95.1.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_115.1.dr	false		high
https://apis.google.com	chromecache_103.1.dr, chromecache_108.1.dr, chromecache_95.1.dr	false		high
https://www.google.com/recaptcha/api2/	chromecache_109.1.dr, chromecache_115.1.dr	false		high
https://domains.google.com/suggest/flow	chromecache_95.1.dr	false		high
https://support.google.com/recaptcha	chromecache_115.1.dr	false		high
https://www.google.com/tools/feedback	chromecache_136.1.dr	false		high
https://support.google.com/websearch/answer/106230	chromecache_88.1.dr	false		high
https://apis.google.com/js/api.js	chromecache_117.1.dr	false		high
https://www.google.com/_/og/promos/	chromecache_103.1.dr	false		high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_115.1.dr	false		high
https://recaptcha.net	chromecache_115.1.dr	false	URL Reputation: safe	unknown
https://www.apache.org/licenses/	chromecache_115.1.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__.	chromecache_115.1.dr	false		low
https://plus.google.com	chromecache_95.1.dr	false		high
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	chromecache_117.1.dr, chromecache_88.1.dr	false		high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_115.1.dr	false		high
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_115.1.dr	false		high
https://ogs.google.com/widget/callout?prid=19037050	chromecache_103.1.dr	false		high
https://push.clients6.google.com/upload/	chromecache_136.1.dr	false		high
https://www.google.com"	chromecache_86.1.dr	false		low
https://clients6.google.com	chromecache_95.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.240.108.76	makeupenumerate.com	United States	7979	SERVERS-COMUS	false
172.217.215.101	www3.l.google.com	United States	15169	GOOGLEUS	false
172.253.124.147	unknown	United States	15169	GOOGLEUS	false
74.125.136.101	google.com	United States	15169	GOOGLEUS	false
64.233.176.157	adservice.google.com	United States	15169	GOOGLEUS	false
74.125.138.147	www.google.com	United States	15169	GOOGLEUS	false
142.250.105.100	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
64.233.177.102	play.google.com	United States	15169	GOOGLEUS	false
142.250.9.101	plus.l.google.com	United States	15169	GOOGLEUS	false
74.125.136.113	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1427690
Start date and time:	2024-04-18 00:32:21 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 42s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://makeupenumerate.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@15/109@20/12
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 173.194.219.94, 108.177.122.102, 108.177.122.100, 108.177.122.138, 108.177.122.139, 108.177.122.101, 108.177.122.113, 142.250.105.84, 34.104.35.123, 142.250.9.94, 142.250.105.95, 172.217.215.95, 142.251.15.95, 74.125.136.95, 172.253.124.95, 64.233.177.95, 173.194.219.95, 142.250.9.95, 64.233.185.95, 74.125.138.95, 64.233.176.95, 108.177.122.95, 64.233.176.94, 74.125.138.94, 172.253.124.94, 142.251.15.94, 142.250.105.94, 108.177.122.94, 142.251.15.139, 142.251.15.100, 142.251.15.138, 142.251.15.102, 142.251.15.113, 142.251.15.101
Excluded domains from analysis (whitelisted): clients1.google.com, ssl.gstatic.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com, www.gstatic.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
VT rate limit hit for: http://makeupenumerate.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 17 21:32:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.98287465572716
Encrypted:	false
SSDEEP:	48:8+dsTQUUHlidAKZdA1FehwiZUklqehqy+3:8Nf6py
MD5:	A13A566CC822BEF93A25DA446B66C75D
SHA1:	F549EA986A79C3F518F0340B1C87C238A44C5234
SHA-256:	729F3913885B5269DD9B616B87CCFDF96435E394E37F3559068C0EE7A793547F
SHA-512:	57C95C3C88EC8FAF079235DB9369D2C2518670D0E895F6348E6E85A60F9E49E614EF976A23945E685DAAC10E17B0C8EE220DB0DF6B66348C2EADE059FBB8BF57
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......j.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........a/,......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 17 21:32:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9979532561478894
Encrypted:	false
SSDEEP:	48:8gdsTQUUHlidAKZdA1seh/iZUkAQkqehZy+2:8Xf09QQy
MD5:	9F496E54C016C61C1EF0CB160C8343C7
SHA1:	20DD10AA1AD51B9032C5D548EEB1A4E70515E6B2
SHA-256:	D0FAF6204FC890F279E7346B8C062E35D0A6B7016C67C6B25F50180DC8A939B7
SHA-512:	5A65380B71BC701C09BC81C5302CB9EFAF04B60F0F43D5468B25FE5840D817B56F0A173A023302C87F4E74FFF197BD3B751E06F81AE9BD59FBC12D35A652919B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.... .\.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........a/,......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.00921626337322
Encrypted:	false
SSDEEP:	48:88dsTQUAHlidAKZdA14meh7sFiZUkmgqeh7sny+BX:87fcn1y
MD5:	C24610EC2CC14E231BDF7233E6183451
SHA1:	4C3AB009BD3E916F7BBC42E47B522EBAE349B742
SHA-256:	874179B368CC90B18F25A95D1F575F85062D38B4E8D32F9FCCEC3305A6BFD980
SHA-512:	A2722109997E9ACE7E99B0B8F88ECCB4C98C4CF4C6E4F2AAC4BF46A8CF125685DFD5C59D56FF0EA5AA8C815618023163453014330B6D0AF917C1D88EEF8E6D71
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........a/,......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 17 21:32:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9973717896916945
Encrypted:	false
SSDEEP:	48:86dsTQUUHlidAKZdA1TehDiZUkwqehNy+R:8xfv/y
MD5:	CE6FE1013764E5DFCFC580E692AEE2A6
SHA1:	7DB4CBF37DF603224527917F66D7B6F2E73792B6
SHA-256:	3A7CB7A1F77EAB41FE50DC4A84C8A4D2E308506EADC1F5A5E3CBAB00BC703C76
SHA-512:	6B0CE72931DBAC23F73EE82218CC01A1BF7CA6B58EBA38C0D468EEE0A64ED4669245D2EBD801493BE1FC9CD987F8881B5D4C9EFAF101CE247C48EA982ABBA8FB
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....xBV.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........a/,......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 17 21:32:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9871310995791567
Encrypted:	false
SSDEEP:	48:84dsTQUUHlidAKZdA1dehBiZUk1W1qehDy+C:8ffv9jy
MD5:	AA97B6EEE0DE6B57BE8219D353482F75
SHA1:	5EDC6D61415800F4CC8B4D43F29C5CA5651B671A
SHA-256:	CBEE1EA55D805148D21D006D1B36BB60D42ED97FC3FC7FE1F8334259942AAA11
SHA-512:	71E685C1AAC00DF5CD16B954FD059D19FF0CB500C4F07F49A6D0BD6B0A45677E114FE389DB34060BFDCF81CDE54E058FD659583AE98AD9095985940BE24088E2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....c.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........a/,......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 17 21:32:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.997135653492838
Encrypted:	false
SSDEEP:	48:8ldsTQUUHlidAKZdA1duTeehOuTbbiZUk5OjqehOuTb1y+yT+:8UfTTfTbxWOvTb1y7T
MD5:	641379B26D3EDD94367D5B56F18196CB
SHA1:	8EE4B7D71854A69B5B3C34909BE84304D5429E4C
SHA-256:	7CF72408522B1DC14E9F6E1AEF34B2817EDCAAD9A6CB4E38DDA39AFDA11BF031
SHA-512:	7D65D4A9A0EBAC8708BFA2CBE9703CDB1B9FD22B4963AABBF5752D9A360E701D854C49F0C1FBE7CAFA074371CE2CD6C2CE8996B6166D3003D2011FAC790FD179
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....f.I.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........a/,......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	600
Entropy (8bit):	7.391634169810707
Encrypted:	false
SSDEEP:	12:6v/7OEUT9vceKKNtY3kM8O+mucROzZbJOAjPBE2Iq8AnxT9:bTdcVIM8tfHzzjy2IdKT9
MD5:	0F2A4639B8A4CB30C76E8333C00D30A6
SHA1:	57E273A270BB864970D747C74B3F0A7C8E515B13
SHA-256:	44B988703019CD6BFA86C91840FECF2A42B611B364E3EEA2F4EB63BF62714E98
SHA-512:	3EA72C7E8702D2E9D94B0FAA6FA095A33AB8BC6EC2891F8B3165CE29A9CCF2114FAEF424FA03FD4B9D06785326284C1BB2087CE05E249CCAC65418361BFA7C51
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..M+.Q.....&/....&......6...\|.I..).o.I.X..#.@.bb.D.'5....m...=..y........{....<.P..;.H......f...3l...M.I...j2.....3..1x..S......9..<m...E.'F'.. ...M.j...C..c.5.-..F..3H./F!.."V.e.i.}.Y....../.rw...@...].rp...`CQo(.....J...u.".!E...$.^$...k....b....@.^.;.u5........H/Q{..$..'..........w...r.+xS.uR..J.......GD.O./.. G7..l...J.t.3.S...N.7...e..s.-Jlj)..5E....E.;8w4.k..=.li.G...1.c....p,T6;....1.oW.%.2,..Z..a...*m.s}T1F....Hr.1......<x0.....-.i......IEND.B`.

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	665
Entropy (8bit):	7.42832670119013
Encrypted:	false
SSDEEP:	12:6v/7OEUelyuRs56fyKgIEInu5VLJBZInmJhd/3VqQXD8GBm1:belFRs56fuIEIu5VNBZInMTICfBO
MD5:	07BF314AAB04047B9E9A959EE6F63DA3
SHA1:	17BEF6602672E2FD9956381E01356245144003E5
SHA-256:	55EAF62CB05DA20088DC12B39D7D254D046CB1FD61DDF3AE641F1439EFD0A5EE
SHA-512:	2A1D4EBC7FBA6951881FD1DDA745480B504E14E3ADAC3B27EC5CF4045DE14FF030D45DDA99DC056285C7980446BA0FC37F489B7534BE46107B21BD43CEE87BA0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/info_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..W..DA.=.6O...H.,E.............b.....C.1...1..EbLPI.W......H..s.z5.:..._.d.0.u.......j.x.R..._.v..R...1..ir..`.yn..R..j.h./y..l......(`..5....l.E..0......B^......F.....F....Y\|p..._,p.............(3^.r.P.O......;<....z.,..yF....N..x.MS...Q.C%......D8G.+......oOk...)T..}\|..e...G.....'.R..G.Z.T}7(...&..@...G....$PGYv...A.c.]d....N..'.4b...R.%..)2Yd..b.M..^@.M....^.:h.N(dP*t..RQ%.o...{.vGH..S._".@./...g.....]...?..h..E.,r.m.%."."W.6G..t...->....q\.Kc.t"^......Kj~{l..C..).y..><@\|yB....=c.............!...<....IEND.B`.

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2091
Entropy (8bit):	7.8938748179764
Encrypted:	false
SSDEEP:	48:aGmurFSJs329qIqvZO7N4+lRSm+3gdfI8hV92jPH9b45MloqbSHTrpG:4QUvKI7943UJhn2jP3pUG
MD5:	6282A05D151E7D0446C655D1892475E2
SHA1:	B2B05F319DA0E73250200AE9BB518A318D6B4C5D
SHA-256:	4CAB9CF78FD7C85AE2236CDD47B905FA4173F664946DFAB008591B3CFE4280B7
SHA-512:	DF0C4C01555430BD2AFAD409E40A422F5EFB0ED9B6E86168874B46312FFC0BA7CA2B5503E49858035056C342A83CBC42721AA89077BD2E1F698692AF4277BAB5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......IDATx........m.tm.86.m.m...m.Xo..._~..Mm.&..x....v.....?... .~^.TV....z.wK.....-.`..w.............4....."...z6Z."....`;@....!...S.Q..E...L$..`01..S(.v...vn._...H.......H.fs.8).....q....\....9B>...)>#2...A....z..8.#+A.V-..hh....3.......c.......F. 3.......~.^Q......c.....a.1...gZ....y....wU..2...].-.0b].......[......w...&K..$..K..\.t..QoY..O?....u.Sa.-...na.Z..}..._s..~[.Ue.M.!#Y.....%.t.7y....J......Q.0fC.Fo..@..&...B.....&..}.ld....O.#+...<.z..,."?vC....Y.....<d..."b.D.(sX..c..5.z,..!...oV.. .....>O.#..pHG..y.j.7.-@.K.s..,...&.%6.. O=dj....S..;.O..ylc.O.~....Tn.F.\|.Y..X..@........e..O.Z......}(H...vp.... ...y..&..:.......8y...{n..R^...:.q.......>....C.....^P..C..%..<. 6...9..,.$0x.M.=.`\..MI..\|.........^...W-"...@..J........K.m...h...x.H.>.c.>.w!......:X.b%.v....)..[R..-..>.+!..?...?.....Q.G:F...k..A.)`*.^N$...{9.<.PD...7`).3.d........h.k..{]&.;^.h.s>BREP.X.O.~P\|[....R].m,.......Z..Pk.g0.yl...Z.qp..

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (14569)
Category:	downloaded
Size (bytes):	217198
Entropy (8bit):	5.845060870606591
Encrypted:	false
SSDEEP:	1536:qHo8sXqU3Cwe5gs+bYMJfVvdqPe9qv1RRpsuIT5hCyzjIh2Uh7csvIvHkGLSIMuL:B35v1uI/qSLSIRyIgT5ut0K+/jYD
MD5:	82410D439E8CE7BA320BD734E798B67F
SHA1:	39366887080B1C3772188F7719F227B29EF8BB76
SHA-256:	8A1400B455B2F4C3CD56E91D497EE04C452A66373109B2DD3E1ECF069A6EB9FA
SHA-512:	99222930AD837C12FBD368C0E3149C7C6B2CEDFDBC14DE90CE9869C71DE68BD0720EE0766178E320D787806EE8A6D85F6C4A85F57ED555EEA3BB1F4DEE7D66C2
Malicious:	false
Reputation:	low
URL:	https://www.google.com/
Preview:	<!doctype html><html itemscope="" itemtype="http://schema.org/WebPage" lang="en"><head><meta charset="UTF-8"><meta content="origin" name="referrer"><meta content="/images/branding/googleg/1x/googleg_standard_color_128dp.png" itemprop="image"><title>Google</title><script nonce="HA800D7uWmci5s77CwRzLg">(function(){var _g={kEI:'eU4gZpbFNNqWkPIPhcWVmAg',kEXPI:'31',kBL:'m_7K',kOPI:89978449};(function(){var a;(null==(a=window.google)?0:a.stvsc)?google.kEI=_g.kEI:window.google=_g;}).call(this);})();(function(){google.sn='webhp';google.kHL='en';})();(function(){.var h=this\|\|self;function l(){return void 0!==window.google&&void 0!==window.google.kOPI&&0!==window.google.kOPI?window.google.kOPI:null};var m,n=[];function p(a){for(var b;a&&(!a.getAttribute\|\|!(b=a.getAttribute("eid")));)a=a.parentNode;return b\|\|m}function q(a){for(var b=null;a&&(!a.getAttribute\|\|!(b=a.getAttribute("leid")));)a=a.parentNode;return b}function r(a){/^http:/i.test(a)&&"https:"===window.location.protocol&&(google.ml&&goo

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	195540
Entropy (8bit):	5.188360401771454
Encrypted:	false
SSDEEP:	3072:shr962FMW5jnu9RrkxtfHI2wmNZDzpp+fV4UEs/r3YnPfB:sZ6yru9RrqBnvZHppyV+s/r32fB
MD5:	6E73E0EF44D501AD3D56097C3E4489BB
SHA1:	D5CF7D1BA2F97AFBEB5E54376EDE0E5BB9113729
SHA-256:	79ADA861B4FAEC458FCFDE106EC4AA58DAAE5BF5B21A6B8F8F14E15C61FAA2D7
SHA-512:	4CB1D56362CD5CDE494D83126E61A323AC44247750CAE19FBD0D5F4B2BD9792276F98806853E6DB8F8E2E61F32DE5667347D86ABB7D68AB605BCE2829C84A238
Malicious:	false
Reputation:	low
Preview:	{"chunkTypes":"1000011111111001111000100001011010000001111111111111111111111111111111111111101111011111111111010111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111101110111111111131011011111111111101111111111111110111111111111111111000111011111111111111111111111111111111111111111111101010022222222212122121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212221212121212121212221212212212111221221212122222121212121212122212222222222122121222121212121212121211211121212121212121121212121212121212222222221332333333333333333332111222211222112121212122121212121212212121221212121212121212121212121212121212121212121212121212121212121221212121121212121212121212111212121222222212212121212133

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5584)
Category:	downloaded
Size (bytes):	5589
Entropy (8bit):	6.080163361702926
Encrypted:	false
SSDEEP:	96:xWThUJ7Kq6LwPesjF10m5n4aJxSRAqE1TpMpXpHR4xYQ/KxFY:xWVUJkujFmcJSiqE1uRF2xjJ
MD5:	375011A78108D9183CE049AC75229882
SHA1:	D7F81F6FDCA5D2241B5ECBF810902D8E9E5D48A0
SHA-256:	856624E4623D8A8BDB426BECF89458D989B4AA3391B0EC91DE42432AD0F5A9B5
SHA-512:	6840D35177241754841E978DE13F11FDFD46B3C09D22C3E79D2A475EDDCB9D52B0C07259CB9419DC65E5DBF46AAA23DEE08CFC73418858A3815E293A00D11D10
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?q&cp=0&client=gws-wiz&xssi=t&gs_pcrt=2&hl=en&authuser=0&psi=eU4gZpbFNNqWkPIPhcWVmAg.1713393275186&dpr=1&nolsbt=1
Preview:	)]}'.[[["cicadas map",0,[3,357,362,396,143],{"zf":33,"zl":8,"zp":{"gs_ss":"1"}}],["tom cotton",46,[3,357,362,396,143],{"lm":[],"zf":33,"zh":"Tom Cotton","zi":"United States Senator","zl":8,"zp":{"gs_ssp":"eJzj4tTP1TcwSjdOKTZg9OIqyc9VSM4vKcnPAwBOsAc-"},"zs":"data:image/jpeg;base64,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

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	195540
Entropy (8bit):	5.188360401771454
Encrypted:	false
SSDEEP:	3072:shr962FMW5jnu9RrkxtfHI2wmNZDzpp+fV4UEs/r3YnPfB:sZ6yru9RrqBnvZHppyV+s/r32fB
MD5:	6E73E0EF44D501AD3D56097C3E4489BB
SHA1:	D5CF7D1BA2F97AFBEB5E54376EDE0E5BB9113729
SHA-256:	79ADA861B4FAEC458FCFDE106EC4AA58DAAE5BF5B21A6B8F8F14E15C61FAA2D7
SHA-512:	4CB1D56362CD5CDE494D83126E61A323AC44247750CAE19FBD0D5F4B2BD9792276F98806853E6DB8F8E2E61F32DE5667347D86ABB7D68AB605BCE2829C84A238
Malicious:	false
Reputation:	low
URL:	https://www.google.com/xjs/_/js/md=3/k=xjs.hd.en.Gos8NmADZ0A.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAkgAIAAAoAACAAAAAAgMAQAEAAQAAWAZAICCAIABgAQhCAhzIBgIAJAAAACAAIAQgCAIAAAABAAQAAAAAAAAAAgAECBAAAAAAAAAAAAAA6AQAIAADBACEAAAEAAADIAxAcgEEKAgAAAAAAAAAAAAAEIEEwFySgIAACAAAAAAAAAAAAACCVTiyMAQ/rs=ACT90oHjHvDG23MtVpqokFyaqpDqKHsdQA
Preview:	{"chunkTypes":"1000011111111001111000100001011010000001111111111111111111111111111111111111101111011111111111010111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111101110111111111131011011111111111101111111111111110111111111111111111000111011111111111111111111111111111111111111111111101010022222222212122121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212221212121212121212221212212212111221221212122222121212121212122212222222222122121222121212121212121211211121212121212121121212121212121212222222221332333333333333333332111222211222112121212122121212121212212121221212121212121212121212121212121212121212121212121212121212121221212121121212121212121212111212121222222212212121212133

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2114)
Category:	downloaded
Size (bytes):	216726
Entropy (8bit):	5.519085420379074
Encrypted:	false
SSDEEP:	6144:UNu80eMhzvFHTKWY8s1BgP4IDQ9GURWu8UA/RRUPhDlaY/ADiZ6hpKl:w0eQzvFHTKWXs1BgP4IDQ8URWu8UA/RK
MD5:	6242610B7C2D281C477CF89FE0C96661
SHA1:	5919A23420EA513BAF5F03B35ADCDB2014A7E5F0
SHA-256:	807D16FAEEA13F25773539DE271B4385A6DD9220F42332BEA2618813D90965C4
SHA-512:	AAD844A0DB6331BDDBE2D6FD542F069BC16EEF26F9413D04567D0942563E97EC576C5657CBF97A77ABE8B5650436F40B52EC7537FEFA36690A5639E9D7ADEACC
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.oT1FwJRCVC4.2019.O/rt=j/m=qabr,q_d,qcwid,qapid,qald,q_dg/exm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin/d=1/ed=1/rs=AA2YrTvBynad-nWEy1xIb9j1w6LpLOF6IQ"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.pe=function(a){return _.od(a)&&1==a.nodeType};_.qe=function(a,b){if("textContent"in a)a.textContent=b;else if(3==a.nodeType)a.data=String(b);else if(a.firstChild&&3==a.firstChild.nodeType){for(;a.lastChild!=a.firstChild;)a.removeChild(a.lastChild);a.firstChild.data=String(b)}else _.ne(a),a.appendChild(_.oe(a).createTextNode(String(b)))};var re;_.se=function(a,b,c){Array.isArray(c)&&(c=c.join(" "));var d="aria-"+b;""===c\|\|void 0==c?(re\|\|(re={atomic:!1,autocomplete:"none",dropeffect:"none",haspopup:!1,live:"off",multiline:!1,multiselectable:!1,orientation:"vertical",readonly:!1,relevant:"additions text",required:!1,sort:"none",busy:!1,disabled:!1,hidden:!1,invalid:"false"}),c=re,b in c?a.setAttribute(d,c[b]):a.removeAttribute(d)):a.setAttribute(d,c)};var we;_.ve=function(a,b,c,d,e,f){if(_.Kb&&e)return _.te(a);if(e&&!d)return!1;if(!_.Ib){"number"===typeof b&&(b=_.ue(b));var g=17==b\|\|18==b\|\|_.Kb&&91==b;if((!c\|\|_.Kb)&&g\|\|_.Kb&&1

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1222), with no line terminators
Category:	downloaded
Size (bytes):	1222
Entropy (8bit):	5.820160639060783
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCLTLv138EgFB5vtTGJTlWtX5l1A4fsLqo40RWUnYN:VKEctKonR3evtTA8h1mLrwUnG
MD5:	E9AD011280352C75C6F9CF212C42AACD
SHA1:	05A41AC3A9E296E1D9E6251E6908EABFE9697D04
SHA-256:	B5E1FFD95251B13685BD867DFB1759CEB8DE9E5FB874E052C856022B29DDA862
SHA-512:	3FEFD42D4070B6BCDBC59C54CF45D48273B740604E3AE4428DA23E092709C970575204DA64D19EBC14A555ADD41CA32D2CE3912B043FEC51017FD901E3EC5D9B
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-A236J/ZUgU+0/O6b/VC6BQicPcdW8QQ1ITyp6reT

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	665
Entropy (8bit):	7.42832670119013
Encrypted:	false
SSDEEP:	12:6v/7OEUelyuRs56fyKgIEInu5VLJBZInmJhd/3VqQXD8GBm1:belFRs56fuIEIu5VNBZInMTICfBO
MD5:	07BF314AAB04047B9E9A959EE6F63DA3
SHA1:	17BEF6602672E2FD9956381E01356245144003E5
SHA-256:	55EAF62CB05DA20088DC12B39D7D254D046CB1FD61DDF3AE641F1439EFD0A5EE
SHA-512:	2A1D4EBC7FBA6951881FD1DDA745480B504E14E3ADAC3B27EC5CF4045DE14FF030D45DDA99DC056285C7980446BA0FC37F489B7534BE46107B21BD43CEE87BA0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..W..DA.=.6O...H.,E.............b.....C.1...1..EbLPI.W......H..s.z5.:..._.d.0.u.......j.x.R..._.v..R...1..ir..`.yn..R..j.h./y..l......(`..5....l.E..0......B^......F.....F....Y\|p..._,p.............(3^.r.P.O......;<....z.,..yF....N..x.MS...Q.C%......D8G.+......oOk...)T..}\|..e...G.....'.R..G.Z.T}7(...&..@...G....$PGYv...A.c.]d....N..'.4b...R.%..)2Yd..b.M..^@.M....^.:h.N(dP*t..RQ%.o...{.vGH..S._".@./...g.....]...?..h..E.,r.m.%."."W.6G..t...->....q\.Kc.t"^......Kj~{l..C..).y..><@\|yB....=c.............!...<....IEND.B`.

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (833), with no line terminators
Category:	dropped
Size (bytes):	833
Entropy (8bit):	5.329958267795506
Encrypted:	false
SSDEEP:	12:M4RjFATLdO1NeFx193L9Pdorw9ZMRbIHl2gYdzdT5eIEvzrVl63V5eIEMElvZ9HR:McGMMp1XMRbwJ+5JUzBl63V5JvghXf
MD5:	4119C48CB407B0B6CEA237526E3DFF10
SHA1:	8961A0008A191D84A15EA2AD48DF8646566122F8
SHA-256:	219FEF17DFAF6289CB75957510D48253B2C021585D6056ADD2B617F73929CAA4
SHA-512:	F8617F8ED57807F013D2140916042F5F419A86EDDDBC5AD1D9C9BAFEC7175C9692AE68FBA110C5E308B8781454CE991EFDDEC5981692AA3C4B4DE79EDB787E3E
Malicious:	false
Reputation:	low
Preview:	.EpPYLd{display:block;position:relative}.YpcDnf{padding:0 16px;vertical-align:middle}.YpcDnf.HG1dvd{padding:0}.HG1dvd>*{padding:0 16px}.WtV5nd .YpcDnf{padding-left:28px}.Zt0a5e .YpcDnf{line-height:48px}.GZnQqe .YpcDnf{line-height:23px}.EpPYLd:hover{cursor:pointer}.EpPYLd,.CB8nDe:hover{cursor:default}.LGiluc,.EpPYLd[disabled]{pointer-events:none;cursor:default}.LGiluc{border-top:1px solid;height:0;margin:5px 0}.Zt0a5e.CB8nDe{background:no-repeat left 8px center}.Zt0a5e.CB8nDe{background-image:url(https://ssl.gstatic.com/images/icons/material/system/1x/done_black_16dp.png)}.GZnQqe.CB8nDe{background:no-repeat left center}.GZnQqe.CB8nDe{background-image:url(https://ssl.gstatic.com/ui/v1/menu/checkmark2.png)}.GZnQqe.LGiluc,.GZnQqe.EpPYLd[disabled]{color:#dadce0!important}.GZnQqe.LGiluc{border-top-color:var(--gS5jXb)}sentinel{}

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	27474
Entropy (8bit):	7.964587860963753
Encrypted:	false
SSDEEP:	768:arhvLM4M6VxHv9WmQID/nV8CK1bR6rA8mkDFqT:aV44M6VxP9WmQIDFKWmF
MD5:	D1B5786980B6A3A9D2FBD8A077DD07DE
SHA1:	D7B19243FDB1B4E0A148ED4B57099A0B3CE639E3
SHA-256:	E3A5AB9E94C8B56784B825DB9B4603326DE902D979C37DA0E9531D4124CE9A6C
SHA-512:	2F6098E65EC69A64583D8AA59EAC2547E47467C046A77F10129C3488B57769E3623596A0100A5DBDAD379B136463C2E70C85182323BBE7909D49925567FFD3CA
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................,.,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....N..-R.y.i..w?^...?O~k....I....B.{Lcs..<......s^..4..2.`."...:.......f.......6Z...J..f8c..S.....9....\.p...C.I.o.k..K....M>...H.#q..#.3.....mum.]..3".[..`.;OrA.N...T...[.^a+.3......#.A.G^8=.N*=&.mF.Nf...`Uw".s.<..8<......-K...#.......#........ ....~.[kKIg.......1........R."...yr?.I.<u.s.....[.....[..0i.....#=.. .w...jz..E..w..h.2.Cn.v..7......V...0.....Y.

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2091
Entropy (8bit):	7.8938748179764
Encrypted:	false
SSDEEP:	48:aGmurFSJs329qIqvZO7N4+lRSm+3gdfI8hV92jPH9b45MloqbSHTrpG:4QUvKI7943UJhn2jP3pUG
MD5:	6282A05D151E7D0446C655D1892475E2
SHA1:	B2B05F319DA0E73250200AE9BB518A318D6B4C5D
SHA-256:	4CAB9CF78FD7C85AE2236CDD47B905FA4173F664946DFAB008591B3CFE4280B7
SHA-512:	DF0C4C01555430BD2AFAD409E40A422F5EFB0ED9B6E86168874B46312FFC0BA7CA2B5503E49858035056C342A83CBC42721AA89077BD2E1F698692AF4277BAB5
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/hpp/ic_wahlberg_product_core_48.png8.png
Preview:	.PNG........IHDR...0...0.....W.......IDATx........m.tm.86.m.m...m.Xo..._~..Mm.&..x....v.....?... .~^.TV....z.wK.....-.`..w.............4....."...z6Z."....`;@....!...S.Q..E...L$..`01..S(.v...vn._...H.......H.fs.8).....q....\....9B>...)>#2...A....z..8.#+A.V-..hh....3.......c.......F. 3.......~.^Q......c.....a.1...gZ....y....wU..2...].-.0b].......[......w...&K..$..K..\.t..QoY..O?....u.Sa.-...na.Z..}..._s..~[.Ue.M.!#Y.....%.t.7y....J......Q.0fC.Fo..@..&...B.....&..}.ld....O.#+...<.z..,."?vC....Y.....<d..."b.D.(sX..c..5.z,..!...oV.. .....>O.#..pHG..y.j.7.-@.K.s..,...&.%6.. O=dj....S..;.O..ylc.O.~....Tn.F.\|.Y..X..@........e..O.Z......}(H...vp.... ...y..&..:.......8y...{n..R^...:.q.......>....C.....^P..C..%..<. 6...9..,.$0x.M.=.`\..MI..\|.........^...W-"...@..J........K.m...h...x.H.>.c.>.w!......:X.b%.v....)..[R..-..>.+!..?...?.....Q.G:F...k..A.)`*.^N$...{9.<.PD...7`).3.d........h.k..{]&.;^.h.s>BREP.X.O.~P\|[....R].m,.......Z..Pk.g0.yl...Z.qp..

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (597)
Category:	downloaded
Size (bytes):	518479
Entropy (8bit):	5.683759340720687
Encrypted:	false
SSDEEP:	12288:wTJtYdv7tmjTEyw+Z8ML8Vo1ukBO1N34PS+H7wIqBG7iIXXON2R+:kEcLVuN2R+
MD5:	8326C23D6B3EED35BC3E62F3294587FD
SHA1:	EDDA17E74E53E85073E5EAC9CB6BE2163DBFA23C
SHA-256:	57F03D3BA66117EDC152646341120DD3A1D7D71B9A98A3723AF5A8AE61BCB3AB
SHA-512:	F63FAEEA0ACCAC3FA74CF6168B319D901EDE869A83E7E6129158A120008E70E5B239BBBFF3159917F8AEEFCF997916A778AE21900B22035657E05AAAE9EBAAC0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2200)
Category:	downloaded
Size (bytes):	190128
Entropy (8bit):	5.462632042905428
Encrypted:	false
SSDEEP:	3072:DAVyndZwj8remaLn9pgncCK1yrjRbC7lqUy+LPMP8eu:Ffl+DMcCfU7lPyb8eu
MD5:	E001A9910FB139004C123BF5D6E11A2C
SHA1:	497BAC8326320368B084D9D3830765A1FB1F737A
SHA-256:	408C8DAD014CDCD7420E7F7EF6CFE4AB1518945D6FD0E00B763702B95453ED56
SHA-512:	6F6A26C7C72C05DF0B105FC9E0C0B97DE4641361DB28DEB21DBD40645AFE53D8ABC8B6CFC8B7D3E0E23FEF19E706A4C2F1E1AD2A08C27A1A199653978D43B656
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-one-google/_/js/k=boq-one-google.OneGoogleWidgetUi.en.kIS1Dzh9gxA.es5.O/am=EDDobA/d=1/excm=_b,_tp,calloutview/ed=1/dg=0/wt=2/ujg=1/rs=AM-SdHvVjI37RrLHhU_vACoXtjGC9mw7Jw/m=_b,_tp"
Preview:	"use strict";this.default_OneGoogleWidgetUi=this.default_OneGoogleWidgetUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x2ce83010, 0x1, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT././*.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT.. Names of events that are special to jsaction. These are not all. event types that are legal to use in either HTML or the addEvent(). API, but these are the ones that are treated specially. All other. DOM events can be used in either addEvent() or in the value of the. jsaction attribute. Beware of browser specific events or events. that don't bubble though: If they are not mentioned here, then. even

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (736)
Category:	downloaded
Size (bytes):	3505
Entropy (8bit):	5.548487647979353
Encrypted:	false
SSDEEP:	96:8jibBNyKARx/7Bz+gtBF6fb6gRFrYFxUgzx:sibg7N7ITvs9
MD5:	91FCA5681E4B2B65D9EC02DB312FDECE
SHA1:	78A6603F175119DDC4FECE015326F336D70F0139
SHA-256:	CB0D00367507EAD438F60A2DF6C68C8C03E06C9787D346883E0DBC1B57648465
SHA-512:	38868DDD1D0D0BD0514E1475951DC57CF90181DA601229EC77CA9CD66B84842AEAC6C6AC86770EEEFCD147C93B0F55F17C20D4DC4952237C435F0BC7AC8F6C20
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-one-google/_/js/k=boq-one-google.OneGoogleWidgetUi.en.kIS1Dzh9gxA.es5.O/ck=boq-one-google.OneGoogleWidgetUi.eZwJ0ZMkLQk.L.B1.O/am=EDDobA/d=1/exm=A7fCU,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,QIhFr,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,e5qFLc,fKUV3e,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,pw70Gc,s39S4,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,yDVVkb,yYB61,zbML3c,zr1jrb/excm=_b,_tp,calloutview/ed=1/wt=2/ujg=1/rs=AM-SdHvXRq7lhY-9q8pP_M_4Xl3CHxbmIw/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_OneGoogleWidgetUi=this.default_OneGoogleWidgetUi\|\|{};(function(_){var window=this;.try{._.q("Wt6vjf");.var Ay=function(a){this.ua=_.x(a,0,Ay.ob)};_.F(Ay,_.C);Ay.prototype.Ya=function(){return _.xk(this,1)};Ay.prototype.oc=function(a){_.Pk(this,1,a)};Ay.ob="f.bo";var By=function(){_.vn.call(this)};_.F(By,_.vn);By.prototype.lb=function(){this.Qq=!1;Cy(this);_.vn.prototype.lb.call(this)};By.prototype.j=function(){Dy(this);if(this.Zj)return Ey(this),!1;if(!this.bs)return Fy(this),!0;this.dispatchEvent("p");if(!this.Wo)return Fy(this),!0;this.Tn?(this.dispatchEvent("r"),Fy(this)):Ey(this);return!1};.var Gy=function(a){var b=new _.rt(a.sx);null!=a.Op&&b.l.set("authuser",a.Op);return b},Ey=function(a){a.Zj=!0;var b=Gy(a),c="rt=r&f_uid="+_.ui(a.Wo);_.Zo(b,(0,_.E)(a.l,a),"POST",c)};.By.prototype.l=function(a){a=a.target;Dy(this);if(_.fp(a)){this.Wm=0;if(this.Tn)this.Zj=!1,this.dispatchEvent("r");else if(this.bs)this.dispatchEvent("s");else{try{var b=_.gp(a),c=JSON.pars

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	84
Entropy (8bit):	5.3964990835913245
Encrypted:	false
SSDEEP:	3:VG4sRCav+EHJUmEJElJWdHW0:Vpo99EJkWdHW0
MD5:	FCDBA82CFCE5F33FFE2E5680667509D2
SHA1:	4AC649BECBFE3D2E4EC37D90A0F0778547D0643C
SHA-256:	98277CB55C1E97356D8BAD2F19FE261F5A7EF66C98F7B1998E9A6B1710F9AA30
SHA-512:	680319704ACF997979B8CCB99D9E93B3E67E2F9EE5A9DC357E94371F32085B2CD2063BC8BEC8CC2E1DB52DC994A8A2FBA248C051275C3265BB8A91F6AE89634F
Malicious:	false
Reputation:	low
URL:	"https://www.google.com/async/hpba?vet=10ahUKEwjW5curp8qFAxVaC0QIHYViBYMQj-0KCB0..i&ei=eU4gZpbFNNqWkPIPhcWVmAg&opi=89978449&yv=3&cs=0&async=isImageHp:false,_ck:xjs.hd.Lo9lRXsykaQ.L.W.O,_k:xjs.hd.en.Gos8NmADZ0A.O,_am:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAkgAIAAAoAACAAAAAAgMAQAEAAQAAWAZAICCAIABgAQhCAhzIBgIAJAAAACAAIAQgCAIAAAABAAQAAAAAAAAAAgAECBAAAAAAAAAAAAAA6AQAIAADBACEAAAEAAADIAxAcgEEKAgAAAAAAAAAAAAAEIEEwFySgIAACAAAAAAAAAAAAACCVTiyMAQ,_cssam:cAEAAAAAAMAAAAAAAAAAAAAAAAAAgAAAAgAAAAAgAHzCAQLAhgAAAEAAAIAAAEAAAAAEAQAAACAIABgAABAAAAAAgRAACIAACSAJQQYCAIhgggFSAYABAAAAIAEAAAACAhAwAAHAQwQAAAQ6AQEkAADIACEAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAEAAAACgAAAAAAAAAAAAAAAAAAAE,_csss:ACT90oF2S7JtbOzl7PcgP8AWv8-OdLvQhA,_fmt:prog,_id:a3JU5b"
Preview:	)]}'.22;["fU4gZuqaGJKVwbkP6pyliAc","1990"]3;[2]1b;<div jsname="Nll0ne"></div>3;[9]0;

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 272 x 92, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5969
Entropy (8bit):	7.949719859611916
Encrypted:	false
SSDEEP:	96:30VjFRx06o9fWBVE+/hVaf6hQrDTq2W4jnjhwKItTD97TPJn/SHbICKV6A4TT8D+:30XRx0QPE+5VBx2W4/WtTRnBnobpQDHe
MD5:	8F9327DB2597FA57D2F42B4A6C5A9855
SHA1:	1737D3DFB411C07B86ED8BD30F5987A4DC397CC1
SHA-256:	5776CD87617EACEC3BC00EBCF530D1924026033EDA852F706C1A675A98915826
SHA-512:	B807694ED1EF6DFA6CB5D35B46526FF9584D9AAD66CE4DC93CDEB7B8B103A7C78369D1141D53F092EDDEA0441E982D3A16DF6E98959A5557C288B580CF5191E6
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/branding/googlelogo/1x/googlelogo_color_272x92dp.png
Preview:	.PNG........IHDR.......\............IDATx..]...U..:.................].{.A.A.(......\....1........A@6.......$...(.CXX\|..d...IUu..dz...g..u.....sO.1..g..W.....~..fv..+.TL.z.q.c..e..;..{..._"...`V...NwUwg....L.{6...y...]....2yo.x}^\|.....)....444.....r7.f&.<...t.!.l'8.s..LCCcl...t........ ......;..,a..0.xju........\|.. D%.l._..........]Y.. ...&N.r.~$g...&...Z}.w.3q......RKwm.ihh.I.pL.n..7j.W..%..Ld...@......q7x)..A.x.0..M .H..Wq.g.h..k.\|P..-Q.}.Ca...@.A.....D....x.....vOp.....+.z...N...T..o.?...?.%e....&..#..3.....P..Np9...$m.Ne. ..3y?......]....l.).z...g.^.v.!....-...&..M .Eg..w.K. ..;..@.qiP4yhh.....U.l7X-.u...-.tP..X..D.i......p'.T>Y.\o.TM.....xx&...&..M ..{.MQ...@.......C.ihh...]].ws..L.<.1...M ..>/yl...yhh.Yh..y..n...H.iW!..4444.p'8G.<...4444. .!.$'.._`....&....h=@8..........T.Ao..4444..#..i.q.'t.u........T..+j.ASyjT...u..(f.y.uw...-e.B...5.W........m~..5-\|_">.j....c[o..m+....K.v.Tak_.".\.....<........u.....},..02..'.h.v.^.....s..A..Ctw

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	600
Entropy (8bit):	7.391634169810707
Encrypted:	false
SSDEEP:	12:6v/7OEUT9vceKKNtY3kM8O+mucROzZbJOAjPBE2Iq8AnxT9:bTdcVIM8tfHzzjy2IdKT9
MD5:	0F2A4639B8A4CB30C76E8333C00D30A6
SHA1:	57E273A270BB864970D747C74B3F0A7C8E515B13
SHA-256:	44B988703019CD6BFA86C91840FECF2A42B611B364E3EEA2F4EB63BF62714E98
SHA-512:	3EA72C7E8702D2E9D94B0FAA6FA095A33AB8BC6EC2891F8B3165CE29A9CCF2114FAEF424FA03FD4B9D06785326284C1BB2087CE05E249CCAC65418361BFA7C51
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/refresh_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..M+.Q.....&/....&......6...\|.I..).o.I.X..#.@.bb.D.'5....m...=..y........{....<.P..;.H......f...3l...M.I...j2.....3..1x..S......9..<m...E.'F'.. ...M.j...C..c.5.-..F..3H./F!.."V.e.i.}.Y....../.rw...@...].rp...`CQo(.....J...u.".!E...$.^$...k....b....@.^.;.u5........H/Q{..$..'..........w...r.+xS.uR..J.......GD.O./.. G7..l...J.t.3.S...N.7...e..s.-Jlj)..5E....E.;8w4.k..=.li.G...1.c....p,T6;....1.oW.%.2,..Z..a...*m.s}T1F....Hr.1......<x0.....-.i......IEND.B`.

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:Hnhn:Bn
MD5:	BEEDCB4EB0A559E6CE2D1E20D38CB330
SHA1:	A04EE9801770C0E81B170D7992EC3735E878AA58
SHA-256:	6E9D99B87595B07B10676B68EBE9AA8B63DF7D9A74F59CC91EED60EA1FBDC6EF
SHA-512:	BD101CDF7FDF1210127D83CE76E3F6F6F1378259F0A55C112E39C49A9131B8636FB020E07E985B8427A35B62A544F2F7C5F75B11AD69EF2C4AE67A41BD5898B2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAn11VQ7sgCk8RIFDWlIR0c=?alt=proto
Preview:	CgkKBw1pSEdHGgA=

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	660
Entropy (8bit):	7.7436458678149815
Encrypted:	false
SSDEEP:	12:CPgCZ+X6xCDzNAs1dVc1rhVbo50xCmGjkm9vgZAO2YCGoOg/t+YcJNw:KZ+iC134tFoOxC3/vO2YCpR8YcJNw
MD5:	C3DFF0D9F30EC0BCF4DEC9524505916B
SHA1:	4B378403ACBEBC3747E08C69B5FD7770A850C9EB
SHA-256:	73D788F86BE22112BB53762545989C0F1BBDB7343161130952C9BA3834FF81E3
SHA-512:	677EA304D00D176ACF61FF68BF23BD5F77AD2928D7DE9F4B842292BC9D3FB7029FE9F578B62F142DCE689230F392E828098EED3484FE2DBEE6E1A7AA5378E2C6
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/searchbox/desktop_searchbox_sprites318_hr.webp
Preview:	RIFF....WEBPVP8L..../'....Hv.=n.......Q...a..(Rv.o..U.....l..m........0l.6l..f.......A?B.C.A...2h..Ag0....G8.n#)R.j.x..P.F..I;.Ox......7-...bX./..]...3..T....5...x...G.C....%.u.....u/._.=....<!q.\...9.....\....p:..P.4.aS.N).>.>.."..9..Vh ....no....l.1..#6p\c..2..>..=8...........FP.^....+/.~......hs..D.Jm..9...r....t*.H..~T^\|.....l..l......he..}f....d.."....K...&1..................pl.Pf.%6...2X..I...eXQ(.K..1%c..w.s._..._K`K.1}..D.E=...<..ytM..>.q'.e.L.~$...b..;k.M.....t\O..m.I._..F....'........z.]..u?~..P.zJM.. k...p~9..D....".Zl$?f..+...\.Pg..%...;.[R>N.#.W.e..@q...(....]&......K.......?.\|.z..(...:&m.V.C.'...D^.R....

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1684), with no line terminators
Category:	downloaded
Size (bytes):	1684
Entropy (8bit):	5.210805556745713
Encrypted:	false
SSDEEP:	48:+ZUJVKLuJEcoih+LpOg6ZUvGCUvGU9HghOW:RJYrcoiktfqqMghOW
MD5:	ACA45B0EB3023CBE9EB0C509C26DD2BF
SHA1:	8275E0A8EC608B8958EF3802A0E5C747B12E758A
SHA-256:	F0C2B6F2D5CFB167566BD77CD2F349890825BC93EAB738B5B54B52B5AD1AB5BB
SHA-512:	1E9D83BD46A0F2C93A81437F2A92FD530A788FB0D45BCBEE08233E15BA295CEC3F530F9B72D7F4ACA537F75D181ED3CF81CA1C29BBEFE466CFFE9E33741AA2EA
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm.T5bVtXo12IQ.L.W.O/m=qcwid/excm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin/d=1/ed=1/ct=zgms/rs=AA2YrTssrVR1lBtzoy_MObv1DSp-vWG36A"
Preview:	.gb_3e{background:rgba(60,64,67,.9);-webkit-border-radius:4px;border-radius:4px;color:#fff;font:500 12px "Roboto",arial,sans-serif;letter-spacing:.8px;line-height:16px;margin-top:4px;min-height:14px;padding:4px 8px;position:absolute;z-index:1000;-webkit-font-smoothing:antialiased}.gb_Hc{text-align:left}.gb_Hc>*{color:#bdc1c6;line-height:16px}.gb_Hc div:first-child{color:white}.gb_qa{background:none;border:1px solid transparent;-webkit-border-radius:50%;border-radius:50%;-webkit-box-sizing:border-box;box-sizing:border-box;cursor:pointer;height:40px;margin:8px;outline:none;padding:1px;position:absolute;right:0;top:0;width:40px}.gb_qa:hover{background-color:rgba(68,71,70,.08)}.gb_qa:focus,.gb_qa:active{background-color:rgba(68,71,70,.12)}.gb_qa:focus-visible{border-color:#0b57d0;outline:1px solid transparent;outline-offset:-1px}.gb_i .gb_qa:hover,.gb_i .gb_qa:focus,.gb_i .gb_qa:active{background-color:rgba(227,227,227,.08)}.gb_i .gb_qa:focus-visible{border-color:#a8c7fa}.gb_ra{-webkit-box

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	238
Entropy (8bit):	5.184482755717443
Encrypted:	false
SSDEEP:	6:otqWtxbQLZVVi7GeqlAGmwbQLZVZYZ7qT:o7xbK95eqKVaKiM
MD5:	B54D0452E2FDB8C0D91C455D1C5495F9
SHA1:	DDD85730B9CB4CB9905B1D7E7643F595D2F33CB8
SHA-256:	F4138D99EC6E17514BB87CEEAD1C1D2A204219C970864FC85BFF00949EE18082
SHA-512:	6883DE3ABB2A7B71CBDE6EDA0854D5B9EC696A0656735843BBB6329007D758B502D2557CB36D5A1CEFC7B4D0AB5DCBC227C88DE9163662741C60F9D561F5A367
Malicious:	false
Reputation:	low
Preview:	<HTML>.<HEAD>.<TITLE>HTTP method GET is not supported by this URL</TITLE>.</HEAD>.<BODY BGCOLOR="#FFFFFF" TEXT="#000000">. GSE Default Error -->.<H1>HTTP method GET is not supported by this URL</H1>.<H2>Error 405</H2>.</BODY>.</HTML>.

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15340, version 1.0
Category:	downloaded
Size (bytes):	15340
Entropy (8bit):	7.983406336508752
Encrypted:	false
SSDEEP:	384:F2gPJde0V2iGrQyD8b3k/tigCdeNqOUd47SH0tsGm:4gPVV2NQE8b3ldeNWH0Wb
MD5:	19B7A0ADFDD4F808B53AF7E2CE2AD4E5
SHA1:	81D5D4C7B5035AD10CCE63CF7100295E0C51FDDA
SHA-256:	C912A9CE0C3122D4B2B29AD26BFE06B0390D1A5BDAA5D6128692C0BEFD1DFBBD
SHA-512:	49DA16000687AC81FC4CA9E9112BDCA850BB9F32E0AF2FE751ABC57A8E9C3382451B50998CEB9DE56FC4196F1DC7EF46BBA47933FC47EB4538124870B7630036
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
Preview:	wOF2......;........d..;..........................d..z..J.`..L.Z..<.....\..`..^...x.6.$..6. ..\|. ..8..z%......Q.{..q...FF.kd .8.(..d..).!C...Y.JA...r. ..GH8F......nW...".2&....2<..+C...p...b..SC.......J......z.-..Q..#6&1zUe../\...l.....<.....9s...E~.]B-..B.wY..o......Q..A.F..1j.......-.`P% .. ,..@1.0..~.....WWW.d.u<c{..^.R.+..w....&.........A......+C....(.N.....0.~..0.J.;.Nu..7....]..m.H.....[h.GL3....?)....c.H...2.3.}y........SXI\|..iVN'%E.D.W....r..<`....i....6;E$.....U.$j.@...._.......R2....WS...k.vz.R.'a9!^...N....h.._.....c.%."..S.2.16B...o.2}.pmU[.\|.LI....2.....OWQLO1-....s..8.(...".\|6...6R.. ..M-.zO.}w)..v..mXxX...c..3#.+.v....F`.Z;.zQ.......r,....Yo.....g.h....+.....O.3Y..)Y.8.!....elX......._.3.}k~u.{ C..H.z..FP........@...d..)T.R...L.H.J.j.@..............$...E......y...3.b...I.h u.+%.HA.\..9..8..X.!....gx...].:..V..C...._..X..!....6..)...GM:E.....O.Z.}k.;.T.k..D.k.O..D5.r..."......?..T.Q.A...CF...3g.5.Dn<.QPy..G..1.9..Q..0..

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	660
Entropy (8bit):	7.7436458678149815
Encrypted:	false
SSDEEP:	12:CPgCZ+X6xCDzNAs1dVc1rhVbo50xCmGjkm9vgZAO2YCGoOg/t+YcJNw:KZ+iC134tFoOxC3/vO2YCpR8YcJNw
MD5:	C3DFF0D9F30EC0BCF4DEC9524505916B
SHA1:	4B378403ACBEBC3747E08C69B5FD7770A850C9EB
SHA-256:	73D788F86BE22112BB53762545989C0F1BBDB7343161130952C9BA3834FF81E3
SHA-512:	677EA304D00D176ACF61FF68BF23BD5F77AD2928D7DE9F4B842292BC9D3FB7029FE9F578B62F142DCE689230F392E828098EED3484FE2DBEE6E1A7AA5378E2C6
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../'....Hv.=n.......Q...a..(Rv.o..U.....l..m........0l.6l..f.......A?B.C.A...2h..Ag0....G8.n#)R.j.x..P.F..I;.Ox......7-...bX./..]...3..T....5...x...G.C....%.u.....u/._.=....<!q.\...9.....\....p:..P.4.aS.N).>.>.."..9..Vh ....no....l.1..#6p\c..2..>..=8...........FP.^....+/.~......hs..D.Jm..9...r....t*.H..~T^\|.....l..l......he..}f....d.."....K...&1..................pl.Pf.%6...2X..I...eXQ(.K..1%c..w.s._..._K`K.1}..D.E=...<..ytM..>.q'.e.L.~$...b..;k.M.....t\O..m.I._..F....'........z.]..u?~..P.zJM.. k...p~9..D....".Zl$?f..+...\.Pg..%...;.[R>N.#.W.e..@q...(....]&......K.......?.\|.z..(...:&m.V.C.'...D^.R....

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	27474
Entropy (8bit):	7.964587860963753
Encrypted:	false
SSDEEP:	768:arhvLM4M6VxHv9WmQID/nV8CK1bR6rA8mkDFqT:aV44M6VxP9WmQIDFKWmF
MD5:	D1B5786980B6A3A9D2FBD8A077DD07DE
SHA1:	D7B19243FDB1B4E0A148ED4B57099A0B3CE639E3
SHA-256:	E3A5AB9E94C8B56784B825DB9B4603326DE902D979C37DA0E9531D4124CE9A6C
SHA-512:	2F6098E65EC69A64583D8AA59EAC2547E47467C046A77F10129C3488B57769E3623596A0100A5DBDAD379B136463C2E70C85182323BBE7909D49925567FFD3CA
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA68w0rIJIN9BGY7n5rDbONWq8suRkCkTB8x0nuU7wHapp0Fq-EaeuqoJw7uXBzitihUTEK094EYrTFRTL2btZIG1h9fWZhFwrNp0wyrn82bpnjVIXP5IsMiY1qe9SKYtSL7n76VA5Z8zc5oJ3xhkcDD4qNewW6MJj6VPnLHQi8If8lIBKoW8dSukkBxDuFIwFWdOS5B&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................,.,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....N..-R.y.i..w?^...?O~k....I....B.{Lcs..<......s^..4..2.`."...:.......f.......6Z...J..f8c..S.....9....\.p...C.I.o.k..K....M>...H.#q..#.3.....mum.]..3".[..`.;OrA.N...T...[.^a+.3......#.A.G^8=.N*=&.mF.Nf...`Uw".s.<..8<......-K...#.......#........ ....~.[kKIg.......1........R."...yr?.I.<u.s.....[.....[..0i.....#=.. .w...jz..E..w..h.2.Cn.v..7......V...0.....Y.

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 22308, version 1.0
Category:	downloaded
Size (bytes):	22308
Entropy (8bit):	7.991797344190553
Encrypted:	true
SSDEEP:	384:6y/VUj3uc3L/mXGG4sOAzBBp6ojL2R8brJw4eKSquOAAiwQ9SIaZtUCzZ6UqBfU4:H/VUj3d3L/0jO8BFkoJwZtqCVwQ9SIcS
MD5:	16ED7FFDC347C24C8275E6907B508257
SHA1:	EEA712285E89D88243C29F8A5B306A4B565A89BD
SHA-256:	D7F62CCD6D9784466FB9B92202B71A63182DE790D0575E13641E027B39E0590E
SHA-512:	F906D22EA8354DB0826210F6A94C4F654600BCA2255FB8689CDD2BFF13F33E578E95B46E6CA93A60A5793E62F1E2DDB1EAF67A8E4A01953301F7D5D7E5557F0D
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v58/4Ua_rENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RFD48TE63OOYKtrw2IJllpyk.woff2
Preview:	wOF2......W$.......`..V...........................X.....4.`?STATx..J.....t..u..Z..6.$.... ..F..K.......m........U...Q.}(..fX..E.j.8.x.f..g$.c....U.tI.6B..jK..P..=.\.H..%.7z..B...D..Q.....Q.p9'&Y2X<.Nz.T@...TC..c.w.f@%.s.6.......n..}..Fq7..t.....<$,...8.\<.:.w..lH.....]g..P.=.......>I#.{.$}.x..@u.'..yoK6.J. @.K....%....5.b.VP.O..s..w.Z.u.+*.........4.......X.F........6M.6.T.Z`....`0.F.y..R.?.....B=.~..=k...gJ..Pa......\|.F.....p0r..n..=.....x....R"}.W..t..oo...V[D.....+}.G.YU.J..BD.\....n.......7....F..s?....PQ;......T.i..NN......\Z?^N.y.9s....B...."z....i.u..j.3^.r.X......2.&.f..r..Z...H.I.Iy.....w./B.R.R...0.O.7D...!...5+...i...f..$...9.!...LU<....w....Pr....pu.U@v..",.. .JG...2@%`Q..tIEE...t.......%....Wwe^.^./.4....>b.1..Z.\|.P..{.....Q.U.{......e...7... ..&Bj..3..d..?.~e..>...B7?.U..e.7.....7/....@..&.....X..5zI...z.^...et3r.....03&UU...W..........G......\|....s./(~..J...<n..d..... C. AD...}......Mi~Z....."""..""..Qc....HQ5..c.....c....s

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (521)
Category:	downloaded
Size (bytes):	1573
Entropy (8bit):	5.105609702174676
Encrypted:	false
SSDEEP:	48:XrNszKPkmV7+KcxhduPg69V0aq4hNEz2F7s:xsz5Wcxo9V0ahS2F7s
MD5:	89C3FEAB50F845BF2D635D5962F7890B
SHA1:	BAE3C9DF1C246EF66540DE2ED09E31C67584A32F
SHA-256:	6FE1A056C3398139805F99748398D2A3592D20AA7066B138D1ABB10D011188D6
SHA-512:	403D380050BA6B6F5EEA3028ED8587B9187510A16E4789216D9A4E411F8D67BC6DF927CAA1F89D753311E3925D73CEF8CCF5300F2A40ABDA879B85F43CF03F3F
Malicious:	false
Reputation:	low
URL:	"https://www.google.com/xjs/_/js/k=xjs.hd.en.Gos8NmADZ0A.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAkgAIAAAoAACAAAAAAgMAQAEAAQAAWAZAICCAIABgAQhCAhzIBgIAJAAAACAAIAQgCAIAAAABAAQAAAAAAAAAAgAECBAAAAAAAAAAAAAA6AQAIAADBACEAAAEAAADIAxAcgEEKAgAAAAAAAAAAAAAEIEEwFySgIAACAAAAAAAAAAAAACCVTiyMAQ/d=0/dg=2/br=1/rs=ACT90oHjHvDG23MtVpqokFyaqpDqKHsdQA/m=syev,aLUfP?xjs=s3"
Preview:	this._hd=this._hd\|\|{};(function(_){var window=this;.try{._.Fob=function(a){this.Mv=a};.}catch(e){_._DumpException(e)}.try{._.x("aLUfP");.var Gob=function(a){_.Mn.call(this,a.Ma);var b=this;this.window=a.service.window.get();this.ta=this.Mv();this.oa=window.orientation;this.ka=function(){var c=b.Mv(),d=b.jSa()&&90===Math.abs(window.orientation)&&b.oa===-1window.orientation;b.oa=window.orientation;if(c!==b.ta\|\|d){b.ta=c;d=_.Ta(b.Qd);for(var e=d.next();!e.done;e=d.next()){e=e.value;var f=new _.Fob(c);try{e(f)}catch(g){_.da(g)}}}};this.Qd=new Set;this.window.addEventListener("resize",this.ka);this.jSa()&&this.window.addEventListener("orientationchange",.this.ka)};_.C(Gob,_.Mn);Gob.Va=_.Mn.Va;Gob.Ia=function(){return{service:{window:_.Nn}}};_.m=Gob.prototype;_.m.addListener=function(a){this.Qd.add(a)};_.m.removeListener=function(a){this.Qd.delete(a)};._.m.Mv=function(){if(_.na()&&_.la()&&!navigator.userAgent.includes("GSA")){var a=_.Cl(this.window);a=new _.ml(a.width,Math.round(a.widththi

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	530
Entropy (8bit):	7.2576396280117494
Encrypted:	false
SSDEEP:	12:6v/7OEUhUxzPKmghSn8nazyk+k8/OzxQcxNMvVb:bhUxzlvWkT8FcxK1
MD5:	88E0F42C9FA4F94AA8BCD54D1685C180
SHA1:	5AD9D47A49B82718BAA3BE88550A0B3350270C42
SHA-256:	89C62095126FCA89EA1511CF35B49B8306162946B0C26D6F60C5506C51D85992
SHA-512:	FAFF842E9FF4CC838EC3C724E95EEE6D36B2F8C768DC23E48669E28FC5C19AA24B1B34CF1DBCBE877B3537D6A325B4C35AF440C2B6D58F6A77A04A208D9296F8
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/audio_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX...JBA.....E-R... (#..-*$.}.%.Kt.A..Dx.I...AF.Q.4.......-.6..?.m:.,.......Q..D.L..e4..2.D..8)j4:......&>.s......p?......9.o5>.][H.}...&L.%.xh{~K.J\|.b..N..HMp....f.}dd..S..4%...$dK..!..Z..NNs.W&g..Fn....p...w..Ut...E\.e.......6......M.F...X.L......em.....R#'..%....j$/..-......@.l."..M.\|....OtW.H.,.-.~W`Z.s8..W...B...C-.8"H....6......9...A..aO.1`.M..A..eA.{...-...U.,.W........IEND.B`.

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12759)
Category:	downloaded
Size (bytes):	501873
Entropy (8bit):	5.599874512857839
Encrypted:	false
SSDEEP:	6144:Yb9kefRK/cYoTAXpCZdNkUxJoNOQSptKoNQFC8E:ekeMU/TAXpC/6Ujk2
MD5:	187C1E9C09772B78D87494AAA1A2A739
SHA1:	BF2CD583BC1C61C80AC029C302F40FC3580D498E
SHA-256:	E80C17BBC8C01DD23194FB08293260BF234404EE69FE46D41D2C94E792E8CB14
SHA-512:	9554F08C2A56868643EFCBBD277A653EC0361469E9B6707C6DE994DCBE526FCD8AD22A0FCDBCD6ECC196E738B7CC1535A147AA02801C4086B6281BC48F8B31A6
Malicious:	false
Reputation:	low
URL:	"https://www.google.com/xjs/_/js/k=xjs.hd.en.Gos8NmADZ0A.O/ck=xjs.hd.Lo9lRXsykaQ.L.W.O/am=cAEAAAAAAMAAAAAAAAAAAAAAAAAAgAAAAgAAAAAkgH7CAQrAhiAAAEAAgMAQAEAAQAAWAZAICCAIABgAQhCAhzIBgZAJCIAACSAJQQ4CAIhgggFSAYABAAAAIAEAgAECBhAwAAHAQwQAAAQ6AQEsAADJACEAAAEAAADIAxAcgEEKAgAAAAAAAAAAAAAEIEEwFySgIAACAAAAAAAAAAAAACCVTiyMAQ/d=1/exm=SNUn3,cEt90b,cdos,csi,d,dtl0hd,eHDfl,hsm,jsa,mb4ZUb,qddgKe,sTsDMc/ed=1/dg=2/br=1/ujg=1/rs=ACT90oH5-nqU-fkpcukkJFXUbfQh-hjsyg/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;Afksuc:wMx0R;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DM55c:imLrKe;DULqB:RKfG5c;Dkk6ge:wJqrrd;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;Erl4fe:FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HqeXPd:cmbnH;IBADCc:RYquRb;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KeeMUb:HiPxjc;KpRAue:Tia57b;LBgRLc:XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;Oj465e:KG2eXe;OohIYe:mpEAQb;Pjplud:EEDORb,PoEs9b;Q1Ow7b:x5CSu;Q6C5kf:pfdZCe;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;RDNBlf:zPRCJb;SLtqO:Kh1xYe;SMDL4c:fTfGO;SNUn3:ZwDk9d,x8cHvb;ShpF6e:N0pvGc;TxfV6d:YORN0b;U96pRd:FsR04;UDrY1c:eps46d;UVmjEd:EesRsb;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VsAqSb:PGf2Re;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;YV5bee:IvPZ6d;YkQtAf:rx8ur;ZMvdv:PHFPjb;ZWEUA:afR4Cf;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;bDXwRe:UsyOtc;bFZ6gf:RsDQqe;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:VruDBd;eHDfl:ofjVkb;eO3lse:nFClrf;fWLTFc:TVBJbf;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:cEt90b;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;hsLsYc:Vl118;iFQyKf:QIhFr,vfuNJf;imqimf:jKGL2e;io8t5d:sgY6Zb;jY0zg:Q6tNgc;k2Qxcb:XY51pe;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kbAm9d:MkHyGd;lkq0A:JyBE3e;nAFL3:NTMZac,s39S4;oGtAuc:sOXFj;oSUNyd:fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;p2tIDb:tp1Cx;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:mg5CW;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:d7YSfd,x4FYXe;rQSrae:C6D5Fc;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;tH4IIe:Ymry6;tosKvd:ZCqP3;trZL0b:qY8PFe;uY49fb:COQbmf;uuQkY:u2V3ud;vGrMZ:lPJJ0c;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:TtcOte;wV5Pjc:L8KGxe;whEZac:F4AmNb;xBbsrc:NEW1Qc;yGxLoc:FmAr0c;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zaIgPb:Qtpxbd/m=B2qlPe,DhPYme,GU4Gab,MpJwZc,NzU6V,UUJqVe,Wo3n8,aa,abd,async,epYOx,ifl,ms4mZb,mu,pHXghd,q0xTif,s39S4,sOXFj,sb_wiz,sf,sonic,spch?xjs=s1"
Preview:	_F_installCss(".jbBItf{display:block;position:relative}.DU0NJ{bottom:0;left:0;position:absolute;right:0;top:0}.lP3Jof{display:inline-block;position:relative}.nNMuOd{-webkit-animation:qli-container-rotate 1568.2352941176ms linear infinite;animation:qli-container-rotate 1568.2352941176ms linear infinite}@-webkit-keyframes qli-container-rotate{from{-webkit-transform:rotate(0);transform:rotate(0)}to{-webkit-transform:rotate(1turn);transform:rotate(1turn)}}@keyframes qli-container-rotate{from{-webkit-transform:rotate(0);transform:rotate(0)}to{-webkit-transform:rotate(1turn);transform:rotate(1turn)}}.RoKmhb{height:100%;opacity:0;position:absolute;width:100%}.nNMuOd .VQdeab{-webkit-animation:qli-fill-unfill-rotate 5332ms cubic-bezier(0.4,0,0.2,1) infinite both,qli-blue-fade-in-out 5332ms cubic-bezier(0.4,0,0.2,1) infinite both;animation:qli-fill-unfill-rotate 5332ms cubic-bezier(0.4,0,0.2,1) infinite both,qli-blue-fade-in-out 5332ms cubic-bezier(0.4,0,0.2,1) infinite both}.nNMuOd .IEqiAf{-web

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5584)
Category:	dropped
Size (bytes):	5589
Entropy (8bit):	6.080163361702926
Encrypted:	false
SSDEEP:	96:xWThUJ7Kq6LwPesjF10m5n4aJxSRAqE1TpMpXpHR4xYQ/KxFY:xWVUJkujFmcJSiqE1uRF2xjJ
MD5:	375011A78108D9183CE049AC75229882
SHA1:	D7F81F6FDCA5D2241B5ECBF810902D8E9E5D48A0
SHA-256:	856624E4623D8A8BDB426BECF89458D989B4AA3391B0EC91DE42432AD0F5A9B5
SHA-512:	6840D35177241754841E978DE13F11FDFD46B3C09D22C3E79D2A475EDDCB9D52B0C07259CB9419DC65E5DBF46AAA23DEE08CFC73418858A3815E293A00D11D10
Malicious:	false
Reputation:	low
Preview:	)]}'.[[["cicadas map",0,[3,357,362,396,143],{"zf":33,"zl":8,"zp":{"gs_ss":"1"}}],["tom cotton",46,[3,357,362,396,143],{"lm":[],"zf":33,"zh":"Tom Cotton","zi":"United States Senator","zl":8,"zp":{"gs_ssp":"eJzj4tTP1TcwSjdOKTZg9OIqyc9VSM4vKcnPAwBOsAc-"},"zs":"data:image/jpeg;base64,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

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	238
Entropy (8bit):	5.184482755717443
Encrypted:	false
SSDEEP:	6:otqWtxbQLZVVi7GeqlAGmwbQLZVZYZ7qT:o7xbK95eqKVaKiM
MD5:	B54D0452E2FDB8C0D91C455D1C5495F9
SHA1:	DDD85730B9CB4CB9905B1D7E7643F595D2F33CB8
SHA-256:	F4138D99EC6E17514BB87CEEAD1C1D2A204219C970864FC85BFF00949EE18082
SHA-512:	6883DE3ABB2A7B71CBDE6EDA0854D5B9EC696A0656735843BBB6329007D758B502D2557CB36D5A1CEFC7B4D0AB5DCBC227C88DE9163662741C60F9D561F5A367
Malicious:	false
Reputation:	low
Preview:	<HTML>.<HEAD>.<TITLE>HTTP method GET is not supported by this URL</TITLE>.</HEAD>.<BODY BGCOLOR="#FFFFFF" TEXT="#000000">. GSE Default Error -->.<H1>HTTP method GET is not supported by this URL</H1>.<H2>Error 405</H2>.</BODY>.</HTML>.

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3594), with no line terminators
Category:	downloaded
Size (bytes):	3594
Entropy (8bit):	5.3812381262281965
Encrypted:	false
SSDEEP:	48:pTJR/DOTOafN8fNDzt/lejdg5UIu9ThEuvAo7:NnDod4tzajm5U9xh5L
MD5:	BE94CC4355C49A090E256E3DCFB09E68
SHA1:	B02B08AAB9A90D2486DA0037B830EF7319864BFD
SHA-256:	493C24305ECB4E10D3CC28ACFBF15693FB761EEE24EA1126973C47A829158749
SHA-512:	66669B548C57AF639CFE77142F31D4EF2FECAD0A20C262AB5DB960118FC696B63293B8147FD5ECAA38739A0464A0929A999DC0C0F72B1DB959E439EB70A412E6
Malicious:	false
Reputation:	low
URL:	"https://www.google.com/xjs/_/ss/k=xjs.hd.Lo9lRXsykaQ.L.W.O/am=cAEAAAAAAMAAAAAAAAAAAAAAAAAAgAAAAgAAAAAgAHzCAQLAhgAAAEAAAIAAAEAAAAAEAQAAACAIABgAABAAAAAAgRAACIAACSAJQQYCAIhgggFSAYABAAAAIAEAAAACAhAwAAHAQwQAAAQ6AQEkAADIACEAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAEAAAACgAAAAAAAAAAAAAAAAAAAE/d=1/ed=1/br=1/rs=ACT90oF2S7JtbOzl7PcgP8AWv8-OdLvQhA/m=cdos,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl"
Preview:	:root{--gS5jXb:#dadce0;--Aqn7xd:#d2d2d2;--EpFNW:#fff;--IXoxUe:#5e5e5e;--bbQxAb:#474747;--YLNNHc:#1f1f1f;--COEmY:#1f1f1f;--TMYS9:#0b57d0;--amnPwe:#5e5e5e;--JKqx2:#1a0dab;--rrJJUc:#0b57d0;--mXZkqc:#d2d2d2;--Nsm0ce:#0b57d0;--XKMDxc:#f7f8f9;--aYn2S:#ecedee;--Lm570b:#ecedee;--xhUGwc:#fff}.zJUuqf{margin-bottom:4px}.AB4Wff{margin-left:16px}.v0rrvd{padding-bottom:16px}.wHYlTd{font-family:Roboto,arial,sans-serif;font-size:14px;line-height:22px}.yUTMj{font-family:Roboto,arial,sans-serif;font-weight:400}.VDgVie{text-align:center}.TUOsUe{text-align:left}@-webkit-keyframes g-snackbar-show{from{pointer-events:none;-webkit-transform:translateY(0);transform:translateY(0)}to{-webkit-transform:translateY(-100%);transform:translateY(-100%)}}@keyframes g-snackbar-show{from{pointer-events:none;-webkit-transform:translateY(0);transform:translateY(0)}to{-webkit-transform:translateY(-100%);transform:translateY(-100%)}}@-webkit-keyframes g-snackbar-hide{from{-webkit-transform:translateY(-100%);transform:transl

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (593)
Category:	downloaded
Size (bytes):	1670
Entropy (8bit):	5.3163724879133145
Encrypted:	false
SSDEEP:	48:XrN2pJeJqz7uf4FWX/YobqG9s84YW0WGbB9jGbhRJNZ2:x2pMqL0PFZx9kRI
MD5:	443804D714F2FBC118E02920E8FF18D6
SHA1:	59421968F7DD68FCD226658FBD9858022471C833
SHA-256:	3611040AD9FC1BF82ED4F133C5D7CB15C67F3F5CCBB5C4D5A146FAE3106FA765
SHA-512:	9D5003B60EF8943770332D658DEF256A15A496D21E4C313887B9CD70A07E9C754DA68455B3F984B9F6EBB59A2B55438CEF266C0C439C5B60631C214FD37BCB27
Malicious:	false
Reputation:	low
URL:	"https://www.google.com/xjs/_/js/k=xjs.hd.en.Gos8NmADZ0A.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAkgAIAAAoAACAAAAAAgMAQAEAAQAAWAZAICCAIABgAQhCAhzIBgIAJAAAACAAIAQgCAIAAAABAAQAAAAAAAAAAgAECBAAAAAAAAAAAAAA6AQAIAADBACEAAAEAAADIAxAcgEEKAgAAAAAAAAAAAAAEIEEwFySgIAACAAAAAAAAAAAAACCVTiyMAQ/d=0/dg=2/br=1/rs=ACT90oHjHvDG23MtVpqokFyaqpDqKHsdQA/m=kMFpHd,sy8l,bm51tf?xjs=s3"
Preview:	this._hd=this._hd\|\|{};(function(_){var window=this;.try{._.x("kMFpHd");._.e$a=new _.Md(_.AJa);._.y();.}catch(e){_._DumpException(e)}.try{.var n$a;_.o$a=function(a,b,c,d,e){this.dAa=a;this.Sjd=b;this.Cfb=c;this.Gpd=d;this.lBd=e;this.s7a=0;this.Bfb=n$a(this)};n$a=function(a){return Math.random()Math.min(a.SjdMath.pow(a.Cfb,a.s7a),a.Gpd)};_.o$a.prototype.DWb=function(){return this.s7a};_.o$a.prototype.tga=function(a){return this.s7a>=this.dAa?!1:null!=a?!!this.lBd[a]:!0};_.p$a=function(a){if(!a.tga())throw Error("de`"+a.dAa);++a.s7a;a.Bfb=n$a(a)};.}catch(e){_._DumpException(e)}.try{._.x("bm51tf");.var q$a=function(a){var b={};_.Ja(a.Dmb(),function(e){b[e]=!0});var c=a.xlb(),d=a.Slb();return new _.o$a(a.Rlb(),1E3c.ka(),a.gcb(),1E3d.ka(),b)},r$a=!!(_.lh[21]&64);var s$a=function(a){_.Mn.call(this,a.Ma);this.qg=null;this.ta=a.service.jxb;this.Ca=a.service.metadata;a=a.service.v$c;this.ka=a.fetch.bind(a)};_.C(s$a,_.Mn);s$a.Va=_.Mn.Va;s$a.Ia=function(){return{service:{jxb:_.i$a,metadata:_.e

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	530
Entropy (8bit):	7.2576396280117494
Encrypted:	false
SSDEEP:	12:6v/7OEUhUxzPKmghSn8nazyk+k8/OzxQcxNMvVb:bhUxzlvWkT8FcxK1
MD5:	88E0F42C9FA4F94AA8BCD54D1685C180
SHA1:	5AD9D47A49B82718BAA3BE88550A0B3350270C42
SHA-256:	89C62095126FCA89EA1511CF35B49B8306162946B0C26D6F60C5506C51D85992
SHA-512:	FAFF842E9FF4CC838EC3C724E95EEE6D36B2F8C768DC23E48669E28FC5C19AA24B1B34CF1DBCBE877B3537D6A325B4C35AF440C2B6D58F6A77A04A208D9296F8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX...JBA.....E-R... (#..-*$.}.%.Kt.A..Dx.I...AF.Q.4.......-.6..?.m:.,.......Q..D.L..e4..2.D..8)j4:......&>.s......p?......9.o5>.][H.}...&L.%.xh{~K.J\|.b..N..HMp....f.}dd..S..4%...$dK..!..Z..NNs.W&g..Fn....p...w..Ut...E\.e.......6......M.F...X.L......em.....R#'..%....j$/..-......@.l."..M.\|....OtW.H.,.-.~W`Z.s8..W...B...C-.8"H....6......9...A..aO.1`.M..A..eA.{...-...U.,.W........IEND.B`.

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAk8dqZYMe7mkRIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (833), with no line terminators
Category:	downloaded
Size (bytes):	833
Entropy (8bit):	5.329958267795506
Encrypted:	false
SSDEEP:	12:M4RjFATLdO1NeFx193L9Pdorw9ZMRbIHl2gYdzdT5eIEvzrVl63V5eIEMElvZ9HR:McGMMp1XMRbwJ+5JUzBl63V5JvghXf
MD5:	4119C48CB407B0B6CEA237526E3DFF10
SHA1:	8961A0008A191D84A15EA2AD48DF8646566122F8
SHA-256:	219FEF17DFAF6289CB75957510D48253B2C021585D6056ADD2B617F73929CAA4
SHA-512:	F8617F8ED57807F013D2140916042F5F419A86EDDDBC5AD1D9C9BAFEC7175C9692AE68FBA110C5E308B8781454CE991EFDDEC5981692AA3C4B4DE79EDB787E3E
Malicious:	false
Reputation:	low
URL:	https://www.google.com/xjs/_/ss/k=xjs.hd.Lo9lRXsykaQ.L.W.O/am=cAEAAAAAAMAAAAAAAAAAAAAAAAAAgAAAAgAAAAAgAHzCAQLAhgAAAEAAAIAAAEAAAAAEAQAAACAIABgAABAAAAAAgRAACIAACSAJQQYCAIhgggFSAYABAAAAIAEAAAACAhAwAAHAQwQAAAQ6AQEkAADIACEAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAEAAAACgAAAAAAAAAAAAAAAAAAAE/d=0/dg=2/br=1/rs=ACT90oF2S7JtbOzl7PcgP8AWv8-OdLvQhA/m=syk1?xjs=s3
Preview:	.EpPYLd{display:block;position:relative}.YpcDnf{padding:0 16px;vertical-align:middle}.YpcDnf.HG1dvd{padding:0}.HG1dvd>*{padding:0 16px}.WtV5nd .YpcDnf{padding-left:28px}.Zt0a5e .YpcDnf{line-height:48px}.GZnQqe .YpcDnf{line-height:23px}.EpPYLd:hover{cursor:pointer}.EpPYLd,.CB8nDe:hover{cursor:default}.LGiluc,.EpPYLd[disabled]{pointer-events:none;cursor:default}.LGiluc{border-top:1px solid;height:0;margin:5px 0}.Zt0a5e.CB8nDe{background:no-repeat left 8px center}.Zt0a5e.CB8nDe{background-image:url(https://ssl.gstatic.com/images/icons/material/system/1x/done_black_16dp.png)}.GZnQqe.CB8nDe{background:no-repeat left center}.GZnQqe.CB8nDe{background-image:url(https://ssl.gstatic.com/ui/v1/menu/checkmark2.png)}.GZnQqe.LGiluc,.GZnQqe.EpPYLd[disabled]{color:#dadce0!important}.GZnQqe.LGiluc{border-top-color:var(--gS5jXb)}sentinel{}

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	dropped
Size (bytes):	44942
Entropy (8bit):	7.971196183809074
Encrypted:	false
SSDEEP:	768:etu65F1igMfjJisbBu0/b4zv2KYRkIqQSLnn2NKIhMfuSlTfcm6ihsfCeGmd6QSO:etu6H1q7T/b82NqIqQSjn0Au8oHusfCW
MD5:	22A320215D7A04468670F4ACBFE394EC
SHA1:	0FF0E387F44E6A217B8B7D0343DACE337A2F4FF9
SHA-256:	35A9DFCDF1DB666A710A1FEEDFAABFAEE060C2332170F8B4DCF8F763635713DF
SHA-512:	6C59D312F4AEE37AEF688F4C3A416FDD5D336A2482378A9A8D4C91F88DDD4D8F2692DA11A51A3F1A4DC4C98EEE422845A716F72A8C65F1B1CBB8BD19DCDEF11D
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..o......W,.....Z.W....x...Igx.,.D....=G.\|...i..(a.........,w.....?.+)BoDc%..<Coq'.......M.......S...)......6...Go......^O.k)r.).].....~......w1.[.\|\|.#d....d..}).XX....&{.)$...(.y.8,z.=+7.%.]I..<?.jJ.Y...\.Y..\|.o.j....{p}kOC.4..l....VF.A..I.C.}E.en..x....._...R...U<....w).e..'..+,/.<..hg.0 awv<.jz..&...g\.Op..W..W..sM....=..>....Hu4.Ky/%r........

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (769)
Category:	downloaded
Size (bytes):	1424
Entropy (8bit):	5.365419328271021
Encrypted:	false
SSDEEP:	24:kWfS+wwY1tw8ojCYN/RfF2TeJYahii1VI47U6OG0gdIiGbvvGbquZPlVOkD1ZGI9:ZfS+zYwRmOfFiOF6CangdIiGbvvGbqST
MD5:	213A219F4D2C9272C9960409FC210C50
SHA1:	0365479D56A9DBC3F4BA134F7B3402FB98A212C7
SHA-256:	AABDECF8E56A9C5DC95DBB5C85F4E72EF73AA87AB610CE3B3052FA3945323479
SHA-512:	5A445B51BF88EBC6F6687AB140ACC09C08FF1AC8FADC4950B363F8A85ED9E4880F7C5D90511CAB57581BE071D65D5200C75A0FD605794B5EDBD74D560032219F
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-one-google/_/js/k=boq-one-google.OneGoogleWidgetUi.en.kIS1Dzh9gxA.es5.O/ck=boq-one-google.OneGoogleWidgetUi.eZwJ0ZMkLQk.L.B1.O/am=EDDobA/d=1/exm=A7fCU,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,QIhFr,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,fKUV3e,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,pw70Gc,s39S4,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,yDVVkb,yYB61,zbML3c,zr1jrb/excm=_b,_tp,calloutview/ed=1/wt=2/ujg=1/rs=AM-SdHvXRq7lhY-9q8pP_M_4Xl3CHxbmIw/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=bm51tf"
Preview:	"use strict";this.default_OneGoogleWidgetUi=this.default_OneGoogleWidgetUi\|\|{};(function(_){var window=this;.try{._.q("bm51tf");.var jpa=!!(_.Qg[0]>>16&1);var kpa=function(a,b,c,d,e){this.o=a;this.N=b;this.v=c;this.O=d;this.T=e;this.j=0;this.l=zW(this)},lpa=function(a){var b={};_.Ba(a.Bq(),function(e){b[e]=!0});var c=a.tq(),d=a.vq();return new kpa(a.uq(),1E3c.j(),a.nq(),1E3d.j(),b)},zW=function(a){return Math.random()Math.min(a.NMath.pow(a.v,a.j),a.O)},AW=function(a,b){return a.j>=a.o?!1:null!=b?!!a.T[b]:!0};var BW=function(a){_.O.call(this,a.oa);this.o=a.service.Tr;this.v=a.service.metadata;a=a.service.fE;this.l=a.o.bind(a)};_.F(BW,_.O);BW.qa=_.O.qa;BW.V=function(){return{service:{Tr:_.xW,metadata:_.tW,fE:_.HU}}};BW.prototype.j=function(a,b){if(1!=this.v.getType(a.Db()))return _.Xn(a);var c=this.o.j;(c=c?lpa(c):null)&&AW(c)?(b=CW(this,a,b,c),a=new _.Wn(a,b,2)):a=_.Xn(a);return a};.var CW=function(a,b,c,d){return c.then(function(e){return e},function(e){if(jpa)if(e instanceof _.fe)

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56412), with no line terminators
Category:	downloaded
Size (bytes):	56412
Entropy (8bit):	5.907540404138125
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyBblxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0BbchXwW49z2
MD5:	2C00B9F417B688224937053CD0C284A5
SHA1:	17B4C18EBC129055DD25F214C3F11E03E9DF2D82
SHA-256:	1E754B107428162C65A26D399B66DB3DAAEA09616BF8620D9DE4BC689CE48EED
SHA-512:	8DC644D4C8E6DA600C751975AC4A9E620E26179167A4021DDB1DA81B452ECF420E459DD1C23D1F2E177685B4E1006DBC5C8736024C447D0FF65F75838A785F57
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (17208)
Category:	downloaded
Size (bytes):	38317
Entropy (8bit):	5.855293501691261
Encrypted:	false
SSDEEP:	768:Q+EghhvpuRqH1OX5uuln2aFe04om0l5SIVmrGRIDJnavWdpxqxvQzFJ/N4gxs:J1OX5Thm0TBm11dpxqxi1Nxs
MD5:	8643867FF258A2762F31F5FEB2A8C93C
SHA1:	BB9D023187B15F8972E5184D19B3244B2D185179
SHA-256:	48B084A863720329DFFC1C362E2216DEAAEC36E5707830DB4D20798D7E6D1595
SHA-512:	85C5E07B3F13262993AAF6406F418D57ED28ADFF86C5F05D2CA0853E6B20BCADFCC768C429D30AFCC959196AD5F8355D486CF153D0E820CA0796DB86F3521B8D
Malicious:	false
Reputation:	low
URL:	https://ogs.google.com/widget/callout?prid=19037050&pgid=19037049&puid=9ceb59a7585b55bd&cce=1&dc=1&origin=https%3A%2F%2Fwww.google.com&cn=callout&pid=1&spid=538&hl=en
Preview:	<!doctype html><html lang="en" dir="ltr"><head><base href="https://ogs.google.com/"><meta name="referrer" content="origin"><link rel="canonical" href="https://ogs.google.com/widget/callout"><link rel="preconnect" href="https://www.gstatic.com"><link rel="preconnect" href="https://ssl.gstatic.com"><script data-id="_gd" nonce="jmIsso7kY55kRk4acYiyIw">window.WIZ_global_data = {"DpimGf":false,"EP1ykd":["/_/*"],"FdrFJe":"-7849003215513087036","Im6cmf":"/_/OneGoogleWidgetUi","LVIXXb":1,"LoQv7e":true,"MT7f9b":[],"NrSucd":false,"OwAJ6e":false,"QrtxK":"","S06Grb":"","S6lZl":128566913,"TSDtV":"%.@.[[null,[[45459555,null,false,null,null,null,\"Imeoqb\"]],\"CAMSEB0J99WlENysuBIWg/naBhY\\u003d\"]]]","Vvafkd":false,"Yllh3e":"%.@.1713393276177518,86568512,3322511505]","ZwjLXe":538,"cfb2h":"boq_onegooglehttpserver_20240414.03_p0","eptZe":"/_/OneGoogleWidgetUi/","fPDxwd":[48802160,93880158,97517173],"gGcLoe":false,"nQyAE":{},"qwAQke":"OneGoogleWidgetUi","rtQCxc":300,"uoqGRe":"WnksUc","w2btAe":"%.@.null,

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.928019308351512
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKSbtQP5mwjWaee:PLKdXNQK+QP51L
MD5:	C193745DEB63FE67F3AA6B578C40DD99
SHA1:	8A3ECC2696074E71D3B011C99B98CB25229E1A31
SHA-256:	D41E076366E4207D57A5FD1725C2024F751C43AE4A3A8E93CC46DFB8462A3E5B
SHA-512:	A2FD9573CF80C9D14F9DCEAA1940407E88F7B35BDD01B1FF34891929DC5528A134E851B29CC2205EF8CE5F81A8DFAFED5D7A6A93A304C7B8844981844BA73A8E
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js');

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (549)
Category:	downloaded
Size (bytes):	875127
Entropy (8bit):	5.590974497109073
Encrypted:	false
SSDEEP:	24576:9wQlMEAbCa3yYp8+HpXumXdJnHbdw6/Oo11ZYEGZv:v7AbCa3ykH9JnHbdw6/Oo11ZYZ
MD5:	152A39B28EEDC3D98EBFD420B7B8B962
SHA1:	1D4A4839080F6602E133A1CACE024B1377CF44CC
SHA-256:	09DA80B0E36370AD92F2068BC220C62F8271B038856FA0CE6C288CD4F9E9B342
SHA-512:	6F7B810AC80933915511B856EF9F7BBA3C7C3C4499BA64D2C406F622539D6596F5972F4F15335194C0186DEE5261153B66DD5E7A3AE58E4AFEA9BFF5A2E4D45D
Malicious:	false
Reputation:	low
URL:	"https://www.google.com/xjs/_/js/k=xjs.hd.en.Gos8NmADZ0A.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAkgAIAAAoAACAAAAAAgMAQAEAAQAAWAZAICCAIABgAQhCAhzIBgIAJAAAACAAIAQgCAIAAAABAAQAAAAAAAAAAgAECBAAAAAAAAAAAAAA6AQAIAADBACEAAAEAAADIAxAcgEEKAgAAAAAAAAAAAAAEIEEwFySgIAACAAAAAAAAAAAAACCVTiyMAQ/d=1/ed=1/dg=2/br=1/rs=ACT90oHjHvDG23MtVpqokFyaqpDqKHsdQA/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;Afksuc:wMx0R;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DM55c:imLrKe;DULqB:RKfG5c;Dkk6ge:wJqrrd;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;Erl4fe:FloWmf,FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HqeXPd:cmbnH;IBADCc:RYquRb;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KeeMUb:HiPxjc;KpRAue:Tia57b;LBgRLc:XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;Oj465e:KG2eXe,KG2eXe;OohIYe:mpEAQb;Pjplud:EEDORb,PoEs9b;Q1Ow7b:x5CSu;Q6C5kf:pfdZCe;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;RDNBlf:zPRCJb;SLtqO:Kh1xYe;SMDL4c:fTfGO,fTfGO;SNUn3:ZwDk9d,x8cHvb;ShpF6e:N0pvGc;TxfV6d:YORN0b;U96pRd:FsR04;UDrY1c:eps46d;UVmjEd:EesRsb;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VsAqSb:PGf2Re;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;YV5bee:IvPZ6d;YkQtAf:rx8ur;ZMvdv:PHFPjb;ZWEUA:afR4Cf;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;bDXwRe:UsyOtc;bFZ6gf:RsDQqe;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:VruDBd;eHDfl:ofjVkb;eO3lse:nFClrf;fWLTFc:TVBJbf;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:cEt90b;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;hsLsYc:Vl118;iFQyKf:QIhFr,vfuNJf;imqimf:jKGL2e;io8t5d:sgY6Zb;jY0zg:Q6tNgc;k2Qxcb:XY51pe;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kbAm9d:MkHyGd;lkq0A:JyBE3e;nAFL3:NTMZac,s39S4;oGtAuc:sOXFj;oSUNyd:fTfGO,fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;p2tIDb:tp1Cx;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:mg5CW;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:d7YSfd,x4FYXe;rQSrae:C6D5Fc;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;tH4IIe:Ymry6;tosKvd:ZCqP3;trZL0b:qY8PFe;uY49fb:COQbmf;uuQkY:u2V3ud;vGrMZ:lPJJ0c;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:TtcOte;wV5Pjc:L8KGxe;whEZac:F4AmNb;xBbsrc:NEW1Qc;yGxLoc:FmAr0c;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zaIgPb:Qtpxbd/m=cdos,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl"
Preview:	this._hd=this._hd\|\|{};(function(_){var window=this;.try{./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: MIT././. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var baa,caa,laa,naa,Aaa,Caa,Iaa,Raa,Yaa,gba,iba,nba,rba,sba,wba,xba,Aba,zba,uba,Va,Dba,Hba,Iba,Kba,Oba,Rba,Sba,Uba,Wba,Xba,$ba,bca,cca,dca,eca,jca,lca,rca,sca,tca,oca,uca,nca,vca,mca,wca,xca,Eca,Gca,Hca,Nca,Oca,Pca,Sca,Tca,Uca,Vca,Wca,Zca,$ca,cda,ada,gda,hda,nda,oda,qda,pda,sda,uda,tda,wda,vda,zda,yda,Bda,Fda,Gda,Jda,Lda,Mda,Oda,Qda,Yda,Zda,Kda,Nda,aea,bea,jea,kea,tea,pea,vea,wea,mea,zea,xea,Hea,Iea,Jea,Mea,Nea,nea,Lea,Pea,Rea,Vea,Wea,cfa,ffa,hfa,qfa,sfa,ufa,vfa,Cfa,Efa,Hfa,Jfa,Kfa,Mfa,Ofa,Qfa,Rfa,.Tfa,Vfa,Wfa,Xfa,Yfa,Ufa,aga,yga,zga,Bga,Hga,Qga,Oga,Pga,Uga,Yga,cha,gha,hha,iha,jha,lha,rha,sha,Iha,Kha,Nha,Oha,Pha,Rha,Wha,Vha,aia,nia,ria,wia,qia,

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2956)
Category:	downloaded
Size (bytes):	18835
Entropy (8bit):	5.412596337812619
Encrypted:	false
SSDEEP:	384:Fka3u8U7usfDsK/pD5DT8jZPjUOSslZ0p9NKwFNMb8XLUJiVW79QbQPSkMpQO:hU7usfDsK/pD5DT8jZPwZXUWAJicQbQW
MD5:	BA095D761063DF6A9CED92ED2318C1F6
SHA1:	BBEE942F428AD8D26B2B84653700A0D1AB2008B5
SHA-256:	3758F898639B1005289E3BA365A9FED0EE3051E53D7B29AEB2E3435B1EACD6E1
SHA-512:	5DD9C6E7B929AC7A9984AAB29076C5339012FF8E900133CB2C099D3693E073D47B2B9199EB8561DE93859FCD674841AC0F9485FCAE10532D60AAF2B0F1C8DD1A
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-one-google/_/js/k=boq-one-google.OneGoogleWidgetUi.en.kIS1Dzh9gxA.es5.O/ck=boq-one-google.OneGoogleWidgetUi.eZwJ0ZMkLQk.L.B1.O/am=EDDobA/d=1/exm=A7fCU,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,QIhFr,RMhBfe,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,fKUV3e,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,pw70Gc,s39S4,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,yDVVkb,yYB61,zbML3c,zr1jrb/excm=_b,_tp,calloutview/ed=1/wt=2/ujg=1/rs=AM-SdHvXRq7lhY-9q8pP_M_4Xl3CHxbmIw/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=RqjULd"
Preview:	"use strict";this.default_OneGoogleWidgetUi=this.default_OneGoogleWidgetUi\|\|{};(function(_){var window=this;.try{._.q("RqjULd");.var zha=function(a){if(_.n&&_.n.performance&&_.n.performance.memory){var b=_.n.performance.memory;if(b){var c=new hF;isNaN(b.jsHeapSizeLimit)\|\|_.be(c,1,_.Gc(Math.round(b.jsHeapSizeLimit).toString()));isNaN(b.totalJSHeapSize)\|\|_.be(c,2,_.Gc(Math.round(b.totalJSHeapSize).toString()));isNaN(b.usedJSHeapSize)\|\|_.be(c,3,_.Gc(Math.round(b.usedJSHeapSize).toString()));_.Ck(a,hF,1,c)}}},Aha=function(a){if(iF()){var b=performance.getEntriesByType("navigation");if(b&&b.length){var c=new jF;if(b=b[0]){switch(b.type){case "navigate":c.ug(1);.break;case "reload":c.ug(2);break;case "back_forward":c.ug(3);break;case "prerender":c.ug(4);break;default:c.ug(0)}var d=_.Qk(c,2,Math.round(b.startTime));d=_.Qk(d,3,Math.round(b.fetchStart));d=_.Qk(d,4,Math.round(b.domainLookupStart));d=_.Qk(d,5,Math.round(b.domainLookupEnd));d=_.Qk(d,6,Math.round(b.connectStart));d=_.Qk(d,7,Math.ro

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (519)
Category:	downloaded
Size (bytes):	23535
Entropy (8bit):	5.403968676490736
Encrypted:	false
SSDEEP:	384:2kgX80nMhF98i/Iee6RjFMHF/rSNfVVU5nmLtUStEWa4a8qLFlbv/tgumR9XdKpw:2kM5MhF98i/7NRjFMHF/rifVu5nmhUSv
MD5:	DD5078A0717B4F8C8C17F6C43F46E6F5
SHA1:	7671005C45C6A03AEB921736F27FECCC3EE96A0A
SHA-256:	45D659843289AA4B0F9ABDACA151155DAF5BB7DD080358D5607F4E84CC2D90E3
SHA-512:	312CB67E37E2DF6791D5CCEED938DAD47BBA330F6B5D7F46916E5F759D0B174729A21004BB3C94E554CF027DB3E229999ED6D23A26D4B5CB680E48D5F6AAF31A
Malicious:	false
Reputation:	low
URL:	"https://www.google.com/xjs/_/js/k=xjs.hd.en.Gos8NmADZ0A.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAkgAIAAAoAACAAAAAAgMAQAEAAQAAWAZAICCAIABgAQhCAhzIBgIAJAAAACAAIAQgCAIAAAABAAQAAAAAAAAAAgAECBAAAAAAAAAAAAAA6AQAIAADBACEAAAEAAADIAxAcgEEKAgAAAAAAAAAAAAAEIEEwFySgIAACAAAAAAAAAAAAACCVTiyMAQ/d=0/dg=2/br=1/rs=ACT90oHjHvDG23MtVpqokFyaqpDqKHsdQA/m=sy18x,P10Owf,syo5,sy17j,sy17l,gSZvdb,sytk,sytq,sytr,WlNQGd,syo3,syu8,syua,nabPbb,syo4,syo6,syo7,syo8,syoa,DPreE,syk1,sytj,sytl,CnSW2d,kQvlef,syu9,fXO0xe?xjs=s3"
Preview:	this._hd=this._hd\|\|{};(function(_){var window=this;.try{._.yUc=_.Id("P10Owf",[_.lq]);.}catch(e){_._DumpException(e)}.try{._.x("P10Owf");.var zUc=function(a){_.A.call(this,a.Ma);this.Sb=a.service.Sb;this.data=a.he.Kpa};_.C(zUc,_.A);zUc.Ia=function(){return{service:{Sb:_.Et},he:{Kpa:_.hB}}};zUc.prototype.oa=function(){this.Sb.ka().oa(this.getRoot().el(),1).log(!0)};zUc.prototype.ka=function(a){var b,c;(null==(b=a.data)?0:_.Te(b,4))&&(null==(c=this.data)?0:_.Te(c,4))&&_.Te(a.data,4)!==_.Te(this.data,4)\|\|this.Sb.ka().oa(this.getRoot().el(),2).log(!0)};zUc.prototype.Ca=function(a){this.Sb.ka().ka(a.tb.el()).log(!0);_.rf(document,_.QRb)};.zUc.prototype.ta=function(a){this.Sb.ka().ka(a.tb.el()).log(!0);_.rf(document,_.PRb,this.data)};_.I(zUc.prototype,"kEOk4d",function(){return this.ta});_.I(zUc.prototype,"fT3Ybb",function(){return this.Ca});_.I(zUc.prototype,"hRwSgb",function(){return this.ka});_.I(zUc.prototype,"MlP2je",function(){return this.oa});_.qr(_.yUc,zUc);._.y();.}catch(e){_._DumpEx

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 272 x 92, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5969
Entropy (8bit):	7.949719859611916
Encrypted:	false
SSDEEP:	96:30VjFRx06o9fWBVE+/hVaf6hQrDTq2W4jnjhwKItTD97TPJn/SHbICKV6A4TT8D+:30XRx0QPE+5VBx2W4/WtTRnBnobpQDHe
MD5:	8F9327DB2597FA57D2F42B4A6C5A9855
SHA1:	1737D3DFB411C07B86ED8BD30F5987A4DC397CC1
SHA-256:	5776CD87617EACEC3BC00EBCF530D1924026033EDA852F706C1A675A98915826
SHA-512:	B807694ED1EF6DFA6CB5D35B46526FF9584D9AAD66CE4DC93CDEB7B8B103A7C78369D1141D53F092EDDEA0441E982D3A16DF6E98959A5557C288B580CF5191E6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......\............IDATx..]...U..:.................].{.A.A.(......\....1........A@6.......$...(.CXX\|..d...IUu..dz...g..u.....sO.1..g..W.....~..fv..+.TL.z.q.c..e..;..{..._"...`V...NwUwg....L.{6...y...]....2yo.x}^\|.....)....444.....r7.f&.<...t.!.l'8.s..LCCcl...t........ ......;..,a..0.xju........\|.. D%.l._..........]Y.. ...&N.r.~$g...&...Z}.w.3q......RKwm.ihh.I.pL.n..7j.W..%..Ld...@......q7x)..A.x.0..M .H..Wq.g.h..k.\|P..-Q.}.Ca...@.A.....D....x.....vOp.....+.z...N...T..o.?...?.%e....&..#..3.....P..Np9...$m.Ne. ..3y?......]....l.).z...g.^.v.!....-...&..M .Eg..w.K. ..;..@.qiP4yhh.....U.l7X-.u...-.tP..X..D.i......p'.T>Y.\o.TM.....xx&...&..M ..{.MQ...@.......C.ihh...]].ws..L.<.1...M ..>/yl...yhh.Yh..y..n...H.iW!..4444.p'8G.<...4444. .!.$'.._`....&....h=@8..........T.Ao..4444..#..i.q.'t.u........T..+j.ASyjT...u..(f.y.uw...-e.B...5.W........m~..5-\|_">.j....c[o..m+....K.v.Tak_.".\.....<........u.....},..02..'.h.v.^.....s..A..Ctw

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1519)
Category:	downloaded
Size (bytes):	265834
Entropy (8bit):	5.477537156730461
Encrypted:	false
SSDEEP:	3072:iSGf2wjAIYUfUCLlCEg7jzCl1Sx8ClPupqrk2Ec:r+AWfMRWlkSU4Xc
MD5:	2E4E1AD8D645129525F7197F431D7428
SHA1:	461E046AB0A2E994F00609CEF481AAB3C5A8AA16
SHA-256:	DE4F3B4EF03629FFD752FC6D36CF7F775128C2FFC1AAD38F06CA3A7F4A2416B1
SHA-512:	C8CC537517154D85A9C63AD2C8D48F3746B78F74DBD177E504E23136AF21EA4D92731C913DAD6736E7340D9AB9D484328CEBB5F14F614152D38703460D8AC37C
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-one-google/_/js/k=boq-one-google.OneGoogleWidgetUi.en.kIS1Dzh9gxA.es5.O/ck=boq-one-google.OneGoogleWidgetUi.eZwJ0ZMkLQk.L.B1.O/am=EDDobA/d=1/exm=_b,_tp/excm=_b,_tp,calloutview/ed=1/wt=2/ujg=1/rs=AM-SdHvXRq7lhY-9q8pP_M_4Xl3CHxbmIw/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=ws9Tlc,n73qwf,GkRiKb,e5qFLc,IZT63,UUJqVe,O1Gjze,byfTOb,lsjVmc,xUdipf,OTA3Ae,COQbmf,fKUV3e,aurFic,U0aPgd,ZwDk9d,V3dDOb,mI3LFb,yYB61,O6y8ed,PrPYRd,MpJwZc,LEikZe,NwH0H,OmgaI,lazG7b,XVMNvd,L1AAkb,KUM7Z,Mlhmy,s39S4,lwddkf,gychg,w9hDv,EEDORb,RMhBfe,SdcwHb,aW3pY,pw70Gc,EFQ78c,Ulmmrd,ZfAoz,mdR7q,wmnU7d,xQtZb,JNoxi,kWgXee,MI6k7c,kjKdXe,BVgquf,QIhFr,ovKuLd,hKSk3e,yDVVkb,hc6Ubd,SpsfSb,KG2eXe,Z5uLle,MdUzUe,VwDzFe,zbML3c,A7fCU,zr1jrb,Uas9Hd,pjICDe"
Preview:	"use strict";_F_installCss(".KL4X6e{background:#eee;bottom:0;left:0;opacity:0;position:absolute;right:0;top:0}.TuA45b{opacity:.8}sentinel{}");.this.default_OneGoogleWidgetUi=this.default_OneGoogleWidgetUi\|\|{};(function(_){var window=this;.try{.var Qy;_.Iy=function(a,b,c,d,e,f,g){a=a.ua;var h=(0,_.Xc)(a);_.nc(h);b=_.sd(a,h,c,b,2,f,!0);c=null!=d?d:new c;if(g&&("number"!==typeof e\|\|0>e\|\|e>b.length))throw Error();void 0!=e?b.splice(e,g,c):b.push(c);(0,_.lc)(c.ua)&2?(0,_.ok)(b,8):(0,_.ok)(b,16)};_.Wr.prototype.Mb=_.ca(28,function(){if(0<this.ub.length){var a=this.ub[0];if("textContent"in a)return(0,_.Mh)(a.textContent);if("innerText"in a)return(0,_.Mh)(a.innerText)}return""});._.Wr.prototype.kc=_.ca(27,function(){return 0==this.ub.length?null:new _.I(this.ub[0])});_.I.prototype.kc=_.ca(26,function(){return this});_.Wr.prototype.Ka=_.ca(25,function(){return this.ub.length?this.ub[0]:null});_.I.prototype.Ka=_.ca(24,function(){return this.ub[0]});_.Jy=function(a,b,c){if(!b&&!c)return null;var

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	downloaded
Size (bytes):	41079
Entropy (8bit):	7.974950613768136
Encrypted:	false
SSDEEP:	768:ePf6AMnRn7pqRoOlmJRu1hKzbd62/m1brEqFAadg+93SYViiqq2x01YrJSzd:engRnNLyqu1hWf6bYqFAs9eWWr05
MD5:	851166BC01D67E057D26BC89A2BD3383
SHA1:	84FAD70933DF6D055F40DCA125BDFD1D2D85A15C
SHA-256:	7B194ED8286D846E326E59E1072A2B539EB12BAF6EBC14BF8A79E6BB8CD3CE5F
SHA-512:	F6049E4BAE71AD3DBF7FF12F8D811B0E5A4D1638B1575507963BFBE4EAA2DBC612523084039570DF56AC9EF5D5CB80591E695C75C4A2E192EB3E559F0C3B5F74
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA6390MQ8DygnJXJAL-TvHzhHeRJJhWSF1gDG6WF7wqk1KcpTF_O5TM7dY_ThYz9TWd7mUeaisqz6LyOJPlXda1gbp1HXHQkcHszzImEvsCk8rLwcyaY5fSuP6b9rSkVMKBjIXAQFm8iKh306ouedLCgZGwd6w6vlO7CNRI4MAsuO7XLnDkONHVnTZhpyAC0UVFJpXAl&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=2
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..]..(..c.gkr.>o&iw:.....r..m."<..`.<.o....QK.{....D....RnJ..r9.y...b.@...}+.'.xZ;I$......1.wc.x.0..v.d<`u.......$...../._.F>..VfH..5h4...;l8w!_nA...... .'...M.%..q....w'.C.?..\|S..b.....d....+..-H$........' .jd...885..A....%.7.;.}...Ijz6.0...eh,...&.O.c.`.],V..z...Z:R..4......T...}.I.....[.gH.<....~,h.Xh....1...P.......^G.......u.v.i...X.#k...J..9V....

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
URL:	https://www.google.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2124)
Category:	downloaded
Size (bytes):	121628
Entropy (8bit):	5.50660985162542
Encrypted:	false
SSDEEP:	3072:UI9yvwslCsrCF9fGoRDj3FjVUrEehA5L1kx:J9ygsritbVUyL1kx
MD5:	65ABF16FF35D7D829F4F78613063502B
SHA1:	2F640A30F14CA0A643A70E6A717D211B28DC9F38
SHA-256:	933E2BE0474963E1C8E5D2FC3FEB2F19192B6696867214584632B71FE2816E1C
SHA-512:	7A56E6E1B48C0700CEFF7880E511E0AE25A9ACB879A2BD057B3E7034EC79EEF38655A75EB4D097EC5A7046B21C84AFDA6DABEC9C9770493D56D599725214E112
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.dCBC8e6ENbg.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo8oB7UmguRctpg6togRivSNxNKjzQ/cb=gapi.loaded_0"
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20000, ]);.var ba,ca,da,na,pa,va,wa,za;ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.ma=da(this);na=function(a,b){if(b)a:{var c=_.ma;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)re

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	83
Entropy (8bit):	5.394508371283624
Encrypted:	false
SSDEEP:	3:VGwk5U0t6mEJElJWdHW0:VGwj07EJkWdHW0
MD5:	E89A1E0D8AC4FD0B454176234FC676BE
SHA1:	0FD8A834D4BBBFED05DCD688791EC4947F5D8422
SHA-256:	52CB92285FA71722A38E5E6917555BDABDA99B622BCB69E969A0C61506E39801
SHA-512:	A5D49E7E255CD81AFB77BCC076F17C50272178E9DDC778BC53A2E6C1338F296763E5CA070B916641A4513D6F1E3E0E316634A929105C72781EDF88FC2D93B6D7
Malicious:	false
Reputation:	low
Preview:	)]}'.21;["fU4gZry_NIKt1QGk-6zQCw","1990"]3;[2]1b;<div jsname="Nll0ne"></div>3;[9]0;

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	downloaded
Size (bytes):	44942
Entropy (8bit):	7.971196183809074
Encrypted:	false
SSDEEP:	768:etu65F1igMfjJisbBu0/b4zv2KYRkIqQSLnn2NKIhMfuSlTfcm6ihsfCeGmd6QSO:etu6H1q7T/b82NqIqQSjn0Au8oHusfCW
MD5:	22A320215D7A04468670F4ACBFE394EC
SHA1:	0FF0E387F44E6A217B8B7D0343DACE337A2F4FF9
SHA-256:	35A9DFCDF1DB666A710A1FEEDFAABFAEE060C2332170F8B4DCF8F763635713DF
SHA-512:	6C59D312F4AEE37AEF688F4C3A416FDD5D336A2482378A9A8D4C91F88DDD4D8F2692DA11A51A3F1A4DC4C98EEE422845A716F72A8C65F1B1CBB8BD19DCDEF11D
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA6390MQ8DygnJXJAL-TvHzhHeRJJhWSF1gDG6WF7wqk1KcpTF_O5TM7dY_ThYz9TWd7mUeaisqz6LyOJPlXda1gbp1HXHQkcHszzImEvsCk8rLwcyaY5fSuP6b9rSkVMKBjIXAQFm8iKh306ouedLCgZGwd6w6vlO7CNRI4MAsuO7XLnDkONHVnTZhpyAC0UVFJpXAl&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..o......W,.....Z.W....x...Igx.,.D....=G.\|...i..(a.........,w.....?.+)BoDc%..<Coq'.......M.......S...)......6...Go......^O.k)r.).].....~......w1.[.\|\|.#d....d..}).XX....&{.)$...(.y.8,z.=+7.%.]I..<?.jJ.Y...\.Y..\|.o.j....{p}kOC.4..l....VF.A..I.C.}E.en..x....._...R...U<....w).e..'..+,/.<..hg.0 awv<.jz..&...g\.Op..W..W..sM....=..>....Hu4.Ky/%r........

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17696)
Category:	downloaded
Size (bytes):	18291
Entropy (8bit):	5.675040290596522
Encrypted:	false
SSDEEP:	384:A10ZNodN7X9fo6Gfx+VfvBZbIPGIu/9xJMD5RjTORps0E30cIMW4XdiGZ0ZeaeoR:A10ZY7XNo6Gfx+dvBZkPGt/97K5lTORP
MD5:	8D120D4D5CB207E52720218A143FEF17
SHA1:	DAE68D4F786BDA08FE39D89AB6F3366B1199CB8B
SHA-256:	AC88D994CF1935F39E5504E88EDB7938FB98F589C4D02013F36B46D15F98517D
SHA-512:	4611F40996ABD45761C5D56FD3EE000A3733ED872C6CFA89E112E32104E328AF632B0330C20E125E248F6D5718116D848A1D0CA28F01626CEDE564610319D629
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/rIjZlM8ZNfOeVQTojtt5OPuY9YnE0CAT82tG0V-YUX0.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var a=this\|\|self,K=function(z,w){if(!(w=(z=null,a.trustedTypes),w)\|\|!w.createPolicy)return z;try{z=w.createPolicy("bg",{createHTML:m,createScript:m,createScriptURL:m})}catch(F){a.console&&a.console.error(F.message)}return z},m=function(z){return z};(0,eval)(function(z,w){return(w=K())&&1===z.eval(w.createScript("1"))?function(F){return w.createScript(F)}:function(F){return""+F}}(a)(Array(7824Math.random()\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var is=function(z,w){((w.push(z[0]<<24\|z[1]<<16\|z[2]<<8\|z[3]),w).push(z[4]<<24\|z[5]<<16\|z[6]<<8\|z[7]),w).push(z[8]<<24\|z[9]<<16\|z[10]<<8\|z[11])},zc=function(z,w){return z[w]<<24\|z[(w\|0)+1]<<16\|z[(w\|0)+2]<<8\|z[(w\|0)+3]},Fk=function(z,w,a,m,q){(((m=(a=(m=B((w&=(q=w&4,3),z)),B(z)),G)(z,m),q)&&(m=wk(""+m)),w)&&e(a,U(m.length,2),z),e)(a,m,z)},Q=function(z,w,a,m,q,M){if(!w.SQ&&(q=void 0,a&&a[0]===H&&(q=a[2]

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	dropped
Size (bytes):	41079
Entropy (8bit):	7.974950613768136
Encrypted:	false
SSDEEP:	768:ePf6AMnRn7pqRoOlmJRu1hKzbd62/m1brEqFAadg+93SYViiqq2x01YrJSzd:engRnNLyqu1hWf6bYqFAs9eWWr05
MD5:	851166BC01D67E057D26BC89A2BD3383
SHA1:	84FAD70933DF6D055F40DCA125BDFD1D2D85A15C
SHA-256:	7B194ED8286D846E326E59E1072A2B539EB12BAF6EBC14BF8A79E6BB8CD3CE5F
SHA-512:	F6049E4BAE71AD3DBF7FF12F8D811B0E5A4D1638B1575507963BFBE4EAA2DBC612523084039570DF56AC9EF5D5CB80591E695C75C4A2E192EB3E559F0C3B5F74
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..]..(..c.gkr.>o&iw:.....r..m."<..`.<.o....QK.{....D....RnJ..r9.y...b.@...}+.'.xZ;I$......1.wc.x.0..v.d<`u.......$...../._.F>..VfH..5h4...;l8w!_nA...... .'...M.%..q....w'.C.?..\|S..b.....d....+..-H$........' .jd...885..A....%.7.;.}...Ijz6.0...eh,...&.O.c.`.],V..z...Z:R..4......T...}.I.....[.gH.<....~,h.Xh....1...P.......^G.......u.v.i...X.#k...J..9V....

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 18, 2024 00:32:49.135924101 CEST	49703	80	192.168.2.16	172.240.108.76
Apr 18, 2024 00:32:49.136431932 CEST	49704	80	192.168.2.16	172.240.108.76
Apr 18, 2024 00:32:49.257227898 CEST	80	49703	172.240.108.76	192.168.2.16
Apr 18, 2024 00:32:49.257342100 CEST	49703	80	192.168.2.16	172.240.108.76
Apr 18, 2024 00:32:49.257514954 CEST	80	49704	172.240.108.76	192.168.2.16
Apr 18, 2024 00:32:49.257554054 CEST	49703	80	192.168.2.16	172.240.108.76
Apr 18, 2024 00:32:49.257584095 CEST	49704	80	192.168.2.16	172.240.108.76
Apr 18, 2024 00:32:49.380188942 CEST	80	49703	172.240.108.76	192.168.2.16
Apr 18, 2024 00:32:49.380263090 CEST	80	49703	172.240.108.76	192.168.2.16
Apr 18, 2024 00:32:49.380275011 CEST	80	49703	172.240.108.76	192.168.2.16
Apr 18, 2024 00:32:49.380342007 CEST	49703	80	192.168.2.16	172.240.108.76
Apr 18, 2024 00:32:49.490547895 CEST	49705	443	192.168.2.16	74.125.136.101
Apr 18, 2024 00:32:49.490619898 CEST	443	49705	74.125.136.101	192.168.2.16
Apr 18, 2024 00:32:49.490701914 CEST	49705	443	192.168.2.16	74.125.136.101
Apr 18, 2024 00:32:49.490972996 CEST	49705	443	192.168.2.16	74.125.136.101
Apr 18, 2024 00:32:49.491005898 CEST	443	49705	74.125.136.101	192.168.2.16
Apr 18, 2024 00:32:49.704653025 CEST	443	49705	74.125.136.101	192.168.2.16
Apr 18, 2024 00:32:49.704910994 CEST	49705	443	192.168.2.16	74.125.136.101
Apr 18, 2024 00:32:49.704938889 CEST	443	49705	74.125.136.101	192.168.2.16
Apr 18, 2024 00:32:49.705447912 CEST	443	49705	74.125.136.101	192.168.2.16
Apr 18, 2024 00:32:49.705516100 CEST	49705	443	192.168.2.16	74.125.136.101
Apr 18, 2024 00:32:49.706054926 CEST	443	49705	74.125.136.101	192.168.2.16
Apr 18, 2024 00:32:49.706106901 CEST	49705	443	192.168.2.16	74.125.136.101
Apr 18, 2024 00:32:49.707108974 CEST	49705	443	192.168.2.16	74.125.136.101
Apr 18, 2024 00:32:49.707175016 CEST	443	49705	74.125.136.101	192.168.2.16
Apr 18, 2024 00:32:49.707288027 CEST	49705	443	192.168.2.16	74.125.136.101
Apr 18, 2024 00:32:49.707297087 CEST	443	49705	74.125.136.101	192.168.2.16
Apr 18, 2024 00:32:49.760677099 CEST	49705	443	192.168.2.16	74.125.136.101
Apr 18, 2024 00:32:50.184062958 CEST	443	49705	74.125.136.101	192.168.2.16
Apr 18, 2024 00:32:50.184168100 CEST	443	49705	74.125.136.101	192.168.2.16
Apr 18, 2024 00:32:50.184243917 CEST	49705	443	192.168.2.16	74.125.136.101
Apr 18, 2024 00:32:50.184273005 CEST	49705	443	192.168.2.16	74.125.136.101
Apr 18, 2024 00:32:50.185123920 CEST	49705	443	192.168.2.16	74.125.136.101
Apr 18, 2024 00:32:50.185142040 CEST	443	49705	74.125.136.101	192.168.2.16
Apr 18, 2024 00:32:50.293803930 CEST	49706	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:50.293831110 CEST	443	49706	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:50.293925047 CEST	49706	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:50.294182062 CEST	49706	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:50.294193983 CEST	443	49706	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:50.514252901 CEST	443	49706	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:50.514585972 CEST	49706	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:50.514604092 CEST	443	49706	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:50.516180992 CEST	443	49706	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:50.516297102 CEST	49706	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:50.517623901 CEST	49706	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:50.517709017 CEST	443	49706	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:50.517843962 CEST	49706	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:50.517852068 CEST	443	49706	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:50.558720112 CEST	49706	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:50.722275019 CEST	443	49706	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:50.722331047 CEST	443	49706	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:50.722393036 CEST	443	49706	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:50.722431898 CEST	49706	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:50.722454071 CEST	443	49706	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:50.722471952 CEST	443	49706	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:50.722501040 CEST	49706	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:50.722546101 CEST	49706	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:50.723031044 CEST	49706	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:50.723042965 CEST	443	49706	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:50.748518944 CEST	49707	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:50.748577118 CEST	443	49707	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:50.748720884 CEST	49707	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:50.748902082 CEST	49707	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:50.748923063 CEST	443	49707	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:50.750514030 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 18, 2024 00:32:50.962186098 CEST	443	49707	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:50.962481976 CEST	49707	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:50.962507010 CEST	443	49707	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:50.962966919 CEST	443	49707	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:50.963269949 CEST	49707	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:50.963351011 CEST	443	49707	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:50.963390112 CEST	49707	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:51.008133888 CEST	443	49707	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:51.018704891 CEST	49707	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:51.050702095 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 18, 2024 00:32:51.194909096 CEST	443	49707	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:51.195080042 CEST	443	49707	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:51.195174932 CEST	49707	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:51.195898056 CEST	49707	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:51.195939064 CEST	443	49707	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:51.654706955 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 18, 2024 00:32:52.303441048 CEST	49710	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:52.303461075 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.303560019 CEST	49710	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:52.303771019 CEST	49710	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:52.303783894 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.525475025 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.525751114 CEST	49710	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:52.525775909 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.526988983 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.527445078 CEST	49710	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:52.527527094 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.527699947 CEST	49710	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:52.527731895 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.768820047 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.768934965 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.768991947 CEST	49710	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:52.769006968 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.769134045 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.769186974 CEST	49710	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:52.769193888 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.769277096 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.769316912 CEST	49710	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:52.769325018 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.775979996 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.776040077 CEST	49710	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:52.776047945 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.783325911 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.783386946 CEST	49710	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:52.783395052 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.788780928 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.788835049 CEST	49710	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:52.788841963 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.819005013 CEST	49689	80	192.168.2.16	192.229.211.108
Apr 18, 2024 00:32:52.831715107 CEST	49710	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:52.831729889 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.863706112 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 18, 2024 00:32:52.874445915 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.874509096 CEST	49710	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:52.874519110 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.878108978 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.878177881 CEST	49710	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:52.878186941 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.885545969 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.885612011 CEST	49710	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:52.885621071 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.900295019 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.900367975 CEST	49710	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:52.900376081 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.900450945 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.900500059 CEST	49710	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:52.900506973 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.907932997 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.908013105 CEST	49710	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:52.908021927 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.915194988 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.915255070 CEST	49710	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:52.915266037 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.921961069 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.922059059 CEST	49710	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:52.922070026 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.928708076 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.928772926 CEST	49710	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:52.928780079 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.935519934 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.935580015 CEST	49710	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:52.935586929 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.942302942 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.942363024 CEST	49710	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:52.942369938 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.949086905 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.949141979 CEST	49710	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:52.949150085 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.955867052 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.955926895 CEST	49710	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:52.955934048 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.959543943 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:52.959605932 CEST	49710	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:52.959709883 CEST	49710	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:52.959723949 CEST	443	49710	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:53.557123899 CEST	49714	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:53.557136059 CEST	443	49714	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:53.557224035 CEST	49714	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:53.557454109 CEST	49714	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:53.557471991 CEST	443	49714	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:53.773696899 CEST	443	49714	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:53.773966074 CEST	49714	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:53.773989916 CEST	443	49714	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:53.774349928 CEST	443	49714	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:53.774686098 CEST	49714	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:53.774763107 CEST	443	49714	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:53.775078058 CEST	49716	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:53.775146008 CEST	443	49716	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:53.775186062 CEST	49714	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:53.775214911 CEST	443	49714	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:53.775258064 CEST	49716	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:53.775425911 CEST	49716	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:53.775461912 CEST	443	49716	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:53.989480972 CEST	443	49714	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:53.989531994 CEST	443	49714	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:53.989562035 CEST	443	49714	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:53.989576101 CEST	49714	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:53.989588022 CEST	443	49714	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:53.989619017 CEST	443	49714	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:53.989634991 CEST	49714	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:53.989643097 CEST	443	49714	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:53.989695072 CEST	49714	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:53.989702940 CEST	443	49714	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:53.992157936 CEST	443	49716	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:53.992388964 CEST	49716	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:53.992408991 CEST	443	49716	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:53.992744923 CEST	443	49716	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:53.993052006 CEST	49716	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:53.993159056 CEST	443	49716	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:53.993191957 CEST	49716	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:53.993202925 CEST	443	49716	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:53.996756077 CEST	443	49714	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:53.996825933 CEST	49714	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:53.996848106 CEST	443	49714	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.004076004 CEST	443	49714	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.004157066 CEST	49714	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:54.004174948 CEST	443	49714	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.011555910 CEST	443	49714	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.011621952 CEST	49714	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:54.011636972 CEST	443	49714	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.033804893 CEST	49716	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:54.065710068 CEST	49714	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:54.065721035 CEST	443	49714	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.095978975 CEST	443	49714	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.096051931 CEST	49714	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:54.096129894 CEST	443	49714	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.099637985 CEST	443	49714	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.099735975 CEST	49714	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:54.099900961 CEST	49714	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:54.099946976 CEST	443	49714	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.184511900 CEST	49721	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:54.184560061 CEST	443	49721	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.184628010 CEST	49721	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:54.184967041 CEST	49721	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:54.184998035 CEST	443	49721	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.235193014 CEST	443	49716	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.235327959 CEST	443	49716	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.235390902 CEST	49716	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:54.235970974 CEST	49716	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:54.235996962 CEST	443	49716	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.407201052 CEST	443	49721	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.407440901 CEST	49721	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:54.407460928 CEST	443	49721	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.407922983 CEST	443	49721	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.408303976 CEST	49721	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:54.408416986 CEST	443	49721	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.408860922 CEST	49723	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:54.408890963 CEST	443	49723	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.408983946 CEST	49723	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:54.409049988 CEST	49721	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:54.409233093 CEST	49723	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:54.409249067 CEST	443	49723	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.452120066 CEST	443	49721	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.622896910 CEST	443	49721	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.622961998 CEST	443	49721	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.623023987 CEST	443	49721	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.623063087 CEST	443	49721	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.623095036 CEST	49721	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:54.623157978 CEST	443	49721	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.623189926 CEST	49721	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:54.624219894 CEST	49721	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:54.624274015 CEST	443	49721	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.624327898 CEST	49721	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:54.627866983 CEST	443	49723	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.628119946 CEST	49723	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:54.628132105 CEST	443	49723	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.629558086 CEST	443	49723	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.629638910 CEST	49723	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:54.629910946 CEST	49723	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:54.629988909 CEST	443	49723	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.630026102 CEST	49723	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:54.669723988 CEST	49723	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:54.669730902 CEST	443	49723	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.717713118 CEST	49723	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:54.731678963 CEST	49724	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:32:54.731786966 CEST	443	49724	172.253.124.147	192.168.2.16
Apr 18, 2024 00:32:54.731874943 CEST	49724	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:32:54.732078075 CEST	49724	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:32:54.732129097 CEST	443	49724	172.253.124.147	192.168.2.16
Apr 18, 2024 00:32:54.857144117 CEST	443	49723	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.857239962 CEST	443	49723	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.857280016 CEST	443	49723	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.857351065 CEST	443	49723	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.857387066 CEST	443	49723	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.857414961 CEST	49723	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:54.857414961 CEST	49723	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:54.857449055 CEST	443	49723	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.860745907 CEST	49723	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:54.864176989 CEST	443	49723	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.866781950 CEST	443	49723	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.869277000 CEST	49723	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:54.869543076 CEST	49723	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:32:54.869559050 CEST	443	49723	74.125.138.147	192.168.2.16
Apr 18, 2024 00:32:54.945152044 CEST	443	49724	172.253.124.147	192.168.2.16
Apr 18, 2024 00:32:54.945439100 CEST	49724	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:32:54.945498943 CEST	443	49724	172.253.124.147	192.168.2.16
Apr 18, 2024 00:32:54.946588993 CEST	443	49724	172.253.124.147	192.168.2.16
Apr 18, 2024 00:32:54.946680069 CEST	49724	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:32:54.946949005 CEST	49724	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:32:54.947021961 CEST	443	49724	172.253.124.147	192.168.2.16
Apr 18, 2024 00:32:54.947088957 CEST	49724	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:32:54.947104931 CEST	443	49724	172.253.124.147	192.168.2.16
Apr 18, 2024 00:32:54.989738941 CEST	49724	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:32:55.161078930 CEST	443	49724	172.253.124.147	192.168.2.16
Apr 18, 2024 00:32:55.161159992 CEST	443	49724	172.253.124.147	192.168.2.16
Apr 18, 2024 00:32:55.161839008 CEST	443	49724	172.253.124.147	192.168.2.16
Apr 18, 2024 00:32:55.161911964 CEST	443	49724	172.253.124.147	192.168.2.16
Apr 18, 2024 00:32:55.161931038 CEST	49724	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:32:55.161992073 CEST	443	49724	172.253.124.147	192.168.2.16
Apr 18, 2024 00:32:55.162026882 CEST	49724	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:32:55.162322044 CEST	49724	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:32:55.162379980 CEST	443	49724	172.253.124.147	192.168.2.16
Apr 18, 2024 00:32:55.162606955 CEST	443	49724	172.253.124.147	192.168.2.16
Apr 18, 2024 00:32:55.162672043 CEST	49724	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:32:55.162708044 CEST	49724	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:32:55.277762890 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 18, 2024 00:32:58.232048035 CEST	49726	443	192.168.2.16	184.31.62.93
Apr 18, 2024 00:32:58.232151985 CEST	443	49726	184.31.62.93	192.168.2.16
Apr 18, 2024 00:32:58.232251883 CEST	49726	443	192.168.2.16	184.31.62.93
Apr 18, 2024 00:32:58.234098911 CEST	49726	443	192.168.2.16	184.31.62.93
Apr 18, 2024 00:32:58.234138012 CEST	443	49726	184.31.62.93	192.168.2.16
Apr 18, 2024 00:32:58.455293894 CEST	443	49726	184.31.62.93	192.168.2.16
Apr 18, 2024 00:32:58.455444098 CEST	49726	443	192.168.2.16	184.31.62.93
Apr 18, 2024 00:32:58.459152937 CEST	49726	443	192.168.2.16	184.31.62.93
Apr 18, 2024 00:32:58.459182978 CEST	443	49726	184.31.62.93	192.168.2.16
Apr 18, 2024 00:32:58.459548950 CEST	443	49726	184.31.62.93	192.168.2.16
Apr 18, 2024 00:32:58.496470928 CEST	49726	443	192.168.2.16	184.31.62.93
Apr 18, 2024 00:32:58.544117928 CEST	443	49726	184.31.62.93	192.168.2.16
Apr 18, 2024 00:32:58.654426098 CEST	443	49726	184.31.62.93	192.168.2.16
Apr 18, 2024 00:32:58.654546022 CEST	443	49726	184.31.62.93	192.168.2.16
Apr 18, 2024 00:32:58.654608965 CEST	49726	443	192.168.2.16	184.31.62.93
Apr 18, 2024 00:32:58.654673100 CEST	49726	443	192.168.2.16	184.31.62.93
Apr 18, 2024 00:32:58.654694080 CEST	443	49726	184.31.62.93	192.168.2.16
Apr 18, 2024 00:32:58.654707909 CEST	49726	443	192.168.2.16	184.31.62.93
Apr 18, 2024 00:32:58.654714108 CEST	443	49726	184.31.62.93	192.168.2.16
Apr 18, 2024 00:32:58.694314957 CEST	49727	443	192.168.2.16	184.31.62.93
Apr 18, 2024 00:32:58.694364071 CEST	443	49727	184.31.62.93	192.168.2.16
Apr 18, 2024 00:32:58.694452047 CEST	49727	443	192.168.2.16	184.31.62.93
Apr 18, 2024 00:32:58.694704056 CEST	49727	443	192.168.2.16	184.31.62.93
Apr 18, 2024 00:32:58.694720030 CEST	443	49727	184.31.62.93	192.168.2.16
Apr 18, 2024 00:32:58.914894104 CEST	443	49727	184.31.62.93	192.168.2.16
Apr 18, 2024 00:32:58.914999962 CEST	49727	443	192.168.2.16	184.31.62.93
Apr 18, 2024 00:32:58.916166067 CEST	49727	443	192.168.2.16	184.31.62.93
Apr 18, 2024 00:32:58.916182995 CEST	443	49727	184.31.62.93	192.168.2.16
Apr 18, 2024 00:32:58.916959047 CEST	443	49727	184.31.62.93	192.168.2.16
Apr 18, 2024 00:32:58.918159008 CEST	49727	443	192.168.2.16	184.31.62.93
Apr 18, 2024 00:32:58.926099062 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 00:32:58.960129976 CEST	443	49727	184.31.62.93	192.168.2.16
Apr 18, 2024 00:32:59.118583918 CEST	443	49727	184.31.62.93	192.168.2.16
Apr 18, 2024 00:32:59.118700981 CEST	443	49727	184.31.62.93	192.168.2.16
Apr 18, 2024 00:32:59.118748903 CEST	49727	443	192.168.2.16	184.31.62.93
Apr 18, 2024 00:32:59.119374037 CEST	49727	443	192.168.2.16	184.31.62.93
Apr 18, 2024 00:32:59.119395971 CEST	443	49727	184.31.62.93	192.168.2.16
Apr 18, 2024 00:32:59.119407892 CEST	49727	443	192.168.2.16	184.31.62.93
Apr 18, 2024 00:32:59.119414091 CEST	443	49727	184.31.62.93	192.168.2.16
Apr 18, 2024 00:32:59.229768038 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 00:32:59.380220890 CEST	80	49703	172.240.108.76	192.168.2.16
Apr 18, 2024 00:32:59.380284071 CEST	49703	80	192.168.2.16	172.240.108.76
Apr 18, 2024 00:32:59.833760977 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 00:33:00.089745045 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 18, 2024 00:33:00.984389067 CEST	49703	80	192.168.2.16	172.240.108.76
Apr 18, 2024 00:33:01.046793938 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 00:33:01.105689049 CEST	80	49703	172.240.108.76	192.168.2.16
Apr 18, 2024 00:33:02.790148020 CEST	49728	443	192.168.2.16	40.127.169.103
Apr 18, 2024 00:33:02.790199041 CEST	443	49728	40.127.169.103	192.168.2.16
Apr 18, 2024 00:33:02.790280104 CEST	49728	443	192.168.2.16	40.127.169.103
Apr 18, 2024 00:33:02.792243004 CEST	49728	443	192.168.2.16	40.127.169.103
Apr 18, 2024 00:33:02.792258024 CEST	443	49728	40.127.169.103	192.168.2.16
Apr 18, 2024 00:33:03.387012005 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 00:33:03.406052113 CEST	443	49728	40.127.169.103	192.168.2.16
Apr 18, 2024 00:33:03.406164885 CEST	49728	443	192.168.2.16	40.127.169.103
Apr 18, 2024 00:33:03.409796000 CEST	49728	443	192.168.2.16	40.127.169.103
Apr 18, 2024 00:33:03.409821987 CEST	443	49728	40.127.169.103	192.168.2.16
Apr 18, 2024 00:33:03.410247087 CEST	443	49728	40.127.169.103	192.168.2.16
Apr 18, 2024 00:33:03.450808048 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 00:33:03.450973034 CEST	49728	443	192.168.2.16	40.127.169.103
Apr 18, 2024 00:33:03.470439911 CEST	49728	443	192.168.2.16	40.127.169.103
Apr 18, 2024 00:33:03.512135029 CEST	443	49728	40.127.169.103	192.168.2.16
Apr 18, 2024 00:33:03.688827038 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 00:33:03.986116886 CEST	443	49728	40.127.169.103	192.168.2.16
Apr 18, 2024 00:33:03.986150026 CEST	443	49728	40.127.169.103	192.168.2.16
Apr 18, 2024 00:33:03.986160040 CEST	443	49728	40.127.169.103	192.168.2.16
Apr 18, 2024 00:33:03.986177921 CEST	443	49728	40.127.169.103	192.168.2.16
Apr 18, 2024 00:33:03.986217976 CEST	443	49728	40.127.169.103	192.168.2.16
Apr 18, 2024 00:33:03.986263990 CEST	49728	443	192.168.2.16	40.127.169.103
Apr 18, 2024 00:33:03.986289978 CEST	443	49728	40.127.169.103	192.168.2.16
Apr 18, 2024 00:33:03.986308098 CEST	49728	443	192.168.2.16	40.127.169.103
Apr 18, 2024 00:33:03.986366987 CEST	49728	443	192.168.2.16	40.127.169.103
Apr 18, 2024 00:33:03.986380100 CEST	443	49728	40.127.169.103	192.168.2.16
Apr 18, 2024 00:33:03.986394882 CEST	443	49728	40.127.169.103	192.168.2.16
Apr 18, 2024 00:33:03.986445904 CEST	49728	443	192.168.2.16	40.127.169.103
Apr 18, 2024 00:33:04.001245975 CEST	49728	443	192.168.2.16	40.127.169.103
Apr 18, 2024 00:33:04.001332045 CEST	443	49728	40.127.169.103	192.168.2.16
Apr 18, 2024 00:33:04.001374006 CEST	49728	443	192.168.2.16	40.127.169.103
Apr 18, 2024 00:33:04.001394033 CEST	443	49728	40.127.169.103	192.168.2.16
Apr 18, 2024 00:33:04.289804935 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 00:33:05.501780987 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 00:33:07.912863016 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 00:33:08.263847113 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 00:33:09.700928926 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 18, 2024 00:33:12.719882965 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 00:33:17.869929075 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 00:33:22.323956013 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 00:33:34.264086008 CEST	49704	80	192.168.2.16	172.240.108.76
Apr 18, 2024 00:33:34.385756969 CEST	80	49704	172.240.108.76	192.168.2.16
Apr 18, 2024 00:33:38.687325954 CEST	49699	80	192.168.2.16	72.21.81.240
Apr 18, 2024 00:33:38.687328100 CEST	49697	80	192.168.2.16	72.21.81.240
Apr 18, 2024 00:33:38.790926933 CEST	80	49699	72.21.81.240	192.168.2.16
Apr 18, 2024 00:33:38.790942907 CEST	80	49697	72.21.81.240	192.168.2.16
Apr 18, 2024 00:33:38.791050911 CEST	49699	80	192.168.2.16	72.21.81.240
Apr 18, 2024 00:33:38.791074038 CEST	49697	80	192.168.2.16	72.21.81.240
Apr 18, 2024 00:33:40.274813890 CEST	49729	443	192.168.2.16	40.127.169.103
Apr 18, 2024 00:33:40.274849892 CEST	443	49729	40.127.169.103	192.168.2.16
Apr 18, 2024 00:33:40.274935961 CEST	49729	443	192.168.2.16	40.127.169.103
Apr 18, 2024 00:33:40.275259972 CEST	49729	443	192.168.2.16	40.127.169.103
Apr 18, 2024 00:33:40.275274992 CEST	443	49729	40.127.169.103	192.168.2.16
Apr 18, 2024 00:33:40.867253065 CEST	443	49729	40.127.169.103	192.168.2.16
Apr 18, 2024 00:33:40.867458105 CEST	49729	443	192.168.2.16	40.127.169.103
Apr 18, 2024 00:33:40.868787050 CEST	49729	443	192.168.2.16	40.127.169.103
Apr 18, 2024 00:33:40.868798018 CEST	443	49729	40.127.169.103	192.168.2.16
Apr 18, 2024 00:33:40.869029045 CEST	443	49729	40.127.169.103	192.168.2.16
Apr 18, 2024 00:33:40.870776892 CEST	49729	443	192.168.2.16	40.127.169.103
Apr 18, 2024 00:33:40.912122011 CEST	443	49729	40.127.169.103	192.168.2.16
Apr 18, 2024 00:33:41.450839043 CEST	443	49729	40.127.169.103	192.168.2.16
Apr 18, 2024 00:33:41.450860023 CEST	443	49729	40.127.169.103	192.168.2.16
Apr 18, 2024 00:33:41.450872898 CEST	443	49729	40.127.169.103	192.168.2.16
Apr 18, 2024 00:33:41.451024055 CEST	49729	443	192.168.2.16	40.127.169.103
Apr 18, 2024 00:33:41.451046944 CEST	443	49729	40.127.169.103	192.168.2.16
Apr 18, 2024 00:33:41.451126099 CEST	49729	443	192.168.2.16	40.127.169.103
Apr 18, 2024 00:33:41.455642939 CEST	49729	443	192.168.2.16	40.127.169.103
Apr 18, 2024 00:33:41.455642939 CEST	49729	443	192.168.2.16	40.127.169.103
Apr 18, 2024 00:33:41.455660105 CEST	443	49729	40.127.169.103	192.168.2.16
Apr 18, 2024 00:33:41.455672026 CEST	443	49729	40.127.169.103	192.168.2.16
Apr 18, 2024 00:33:49.379697084 CEST	80	49704	172.240.108.76	192.168.2.16
Apr 18, 2024 00:33:49.379765987 CEST	49704	80	192.168.2.16	172.240.108.76
Apr 18, 2024 00:33:50.976929903 CEST	49704	80	192.168.2.16	172.240.108.76
Apr 18, 2024 00:33:51.098021984 CEST	80	49704	172.240.108.76	192.168.2.16
Apr 18, 2024 00:33:52.906177998 CEST	49688	443	192.168.2.16	204.79.197.200
Apr 18, 2024 00:33:53.643299103 CEST	49731	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:33:53.643333912 CEST	443	49731	74.125.138.147	192.168.2.16
Apr 18, 2024 00:33:53.643420935 CEST	49731	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:33:53.643645048 CEST	49731	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:33:53.643661022 CEST	443	49731	74.125.138.147	192.168.2.16
Apr 18, 2024 00:33:53.859847069 CEST	443	49731	74.125.138.147	192.168.2.16
Apr 18, 2024 00:33:53.860177040 CEST	49731	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:33:53.860200882 CEST	443	49731	74.125.138.147	192.168.2.16
Apr 18, 2024 00:33:53.860491037 CEST	443	49731	74.125.138.147	192.168.2.16
Apr 18, 2024 00:33:53.860754967 CEST	49731	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:33:53.860819101 CEST	443	49731	74.125.138.147	192.168.2.16
Apr 18, 2024 00:33:53.913233995 CEST	49731	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:03.893980980 CEST	443	49731	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:03.894067049 CEST	443	49731	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:03.894145012 CEST	49731	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:04.980969906 CEST	49731	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:04.981029987 CEST	443	49731	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:11.851269960 CEST	49732	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:11.851367950 CEST	443	49732	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:11.851516008 CEST	49732	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:11.851777077 CEST	49732	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:11.851814985 CEST	443	49732	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.069832087 CEST	443	49732	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.070205927 CEST	49732	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:12.070219994 CEST	443	49732	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.070672035 CEST	443	49732	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.071069002 CEST	49732	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:12.071147919 CEST	443	49732	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.071243048 CEST	49732	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:12.071341038 CEST	49732	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:12.071367025 CEST	443	49732	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.119298935 CEST	49732	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:12.334872961 CEST	443	49732	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.345041990 CEST	443	49732	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.345082045 CEST	443	49732	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.345136881 CEST	443	49732	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.345158100 CEST	49732	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:12.345196009 CEST	443	49732	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.345355034 CEST	49732	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:12.348716021 CEST	443	49732	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.348843098 CEST	49732	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:12.348858118 CEST	443	49732	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.356241941 CEST	443	49732	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.356343985 CEST	49732	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:12.356358051 CEST	443	49732	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.361485004 CEST	443	49732	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.361599922 CEST	49732	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:12.361613035 CEST	443	49732	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.406310081 CEST	49732	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:12.406328917 CEST	443	49732	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.440522909 CEST	443	49732	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.440699100 CEST	49732	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:12.440736055 CEST	443	49732	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.443165064 CEST	443	49732	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.443280935 CEST	49732	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:12.443298101 CEST	443	49732	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.450227976 CEST	443	49732	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.450313091 CEST	49732	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:12.450325966 CEST	443	49732	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.450408936 CEST	443	49732	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.450464964 CEST	49732	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:12.450484991 CEST	443	49732	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.450529099 CEST	49732	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:12.450529099 CEST	49732	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:12.450566053 CEST	49732	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:12.454201937 CEST	49733	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:12.454273939 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:12.454417944 CEST	49733	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:12.455287933 CEST	49733	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:12.455321074 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:12.479425907 CEST	49734	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:12.479451895 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.479608059 CEST	49734	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:12.479868889 CEST	49734	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:12.479887009 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.674166918 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:12.674673080 CEST	49733	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:12.674711943 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:12.678383112 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:12.678482056 CEST	49733	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:12.678847075 CEST	49733	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:12.678996086 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:12.679052114 CEST	49733	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:12.694583893 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.694940090 CEST	49734	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:12.694986105 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.695462942 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.696564913 CEST	49734	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:12.696654081 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.696715117 CEST	49734	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:12.696729898 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.720141888 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:12.726315975 CEST	49733	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:12.726351023 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:12.742353916 CEST	49734	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:12.774257898 CEST	49733	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:12.903875113 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:12.904257059 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:12.904364109 CEST	49733	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:12.904727936 CEST	49733	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:12.904758930 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:12.925817013 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.926196098 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.926270962 CEST	49734	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:12.926335096 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.926389933 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.926451921 CEST	49734	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:12.926470041 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.931003094 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.931106091 CEST	49734	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:12.931122065 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.934607029 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.934689045 CEST	49734	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:12.934703112 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.940933943 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.941010952 CEST	49734	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:12.941025019 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.948301077 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.948405027 CEST	49734	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:12.948421001 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:12.997581005 CEST	49734	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:13.030457973 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:13.034106016 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:13.034145117 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:13.034177065 CEST	49734	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:13.034210920 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:13.034312963 CEST	49734	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:13.041445017 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:13.048732042 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:13.048777103 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:13.048799992 CEST	49734	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:13.048819065 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:13.048871040 CEST	49734	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:13.056046963 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:13.063292980 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:13.063328981 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:13.063378096 CEST	49734	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:13.063393116 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:13.063455105 CEST	49734	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:13.070338964 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:13.076734066 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:13.076769114 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:13.076812029 CEST	49734	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:13.076829910 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:13.076896906 CEST	49734	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:13.083239079 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:13.089597940 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:13.089633942 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:13.089680910 CEST	49734	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:13.089699984 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:13.089764118 CEST	49734	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:13.095808983 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:13.102171898 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:13.102210045 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:13.102256060 CEST	49734	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:13.102277040 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:13.102345943 CEST	49734	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:13.108551025 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:13.108675957 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:13.108745098 CEST	49734	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:13.108848095 CEST	49734	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:13.108876944 CEST	443	49734	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:13.113416910 CEST	49743	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:13.113461971 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.113540888 CEST	49743	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:13.113781929 CEST	49743	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:13.113809109 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.330184937 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.330743074 CEST	49743	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:13.330774069 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.331273079 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.331861019 CEST	49743	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:13.331952095 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.332201004 CEST	49743	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:13.380158901 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.588150978 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.588227987 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.588295937 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.588304996 CEST	49743	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:13.588336945 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.588350058 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.588397026 CEST	49743	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:13.588424921 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.588609934 CEST	49743	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:13.588643074 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.595292091 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.595379114 CEST	49743	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:13.595398903 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.602612019 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.602685928 CEST	49743	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:13.602703094 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.609127045 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.609215975 CEST	49743	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:13.609234095 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.650355101 CEST	49743	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:13.650393963 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.693537951 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.693615913 CEST	49743	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:13.693648100 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.697045088 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.697107077 CEST	49743	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:13.697129965 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.704451084 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.704530954 CEST	49743	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:13.704551935 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.711631060 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.711694002 CEST	49743	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:13.711715937 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.718924999 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.718981981 CEST	49743	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:13.719001055 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.733541012 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.733588934 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.733623981 CEST	49743	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:13.733652115 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.733848095 CEST	49743	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:13.740807056 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.747507095 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.747550011 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.747601032 CEST	49743	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:13.747663021 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.747731924 CEST	49743	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:13.754211903 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.760936022 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.760972023 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.761020899 CEST	49743	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:13.761048079 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.761116982 CEST	49743	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:13.767940044 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.768122911 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:13.768184900 CEST	49743	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:13.768374920 CEST	49743	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:13.768409014 CEST	443	49743	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:18.895283937 CEST	49745	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:18.895371914 CEST	443	49745	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:18.895447016 CEST	49745	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:18.895891905 CEST	49745	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:18.895931959 CEST	443	49745	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.110625029 CEST	443	49745	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.111171007 CEST	49745	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:19.111215115 CEST	443	49745	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.111680984 CEST	443	49745	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.112184048 CEST	49745	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:19.112265110 CEST	443	49745	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.112726927 CEST	49746	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:19.112772942 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.112816095 CEST	49745	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:19.112842083 CEST	49746	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:19.112957954 CEST	49745	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:19.112991095 CEST	443	49745	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.113143921 CEST	49746	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:19.113162994 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.328355074 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.328685999 CEST	49746	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:19.328711987 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.329166889 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.329770088 CEST	49746	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:19.329862118 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.330089092 CEST	49746	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:19.330115080 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.341939926 CEST	443	49745	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.341979027 CEST	443	49745	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.342008114 CEST	443	49745	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.342066050 CEST	443	49745	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.342071056 CEST	49745	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:19.342168093 CEST	443	49745	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.342171907 CEST	49745	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:19.342902899 CEST	49745	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:19.342964888 CEST	443	49745	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.343028069 CEST	49745	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:19.345683098 CEST	49747	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:19.345730066 CEST	443	49747	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:19.345805883 CEST	49747	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:19.346112967 CEST	49747	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:19.346137047 CEST	443	49747	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:19.560092926 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.560153008 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.560179949 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.560200930 CEST	49746	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:19.560214043 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.560240984 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.560270071 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.560302019 CEST	49746	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:19.560309887 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.560336113 CEST	49746	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:19.561877012 CEST	443	49747	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:19.562150955 CEST	49747	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:19.562176943 CEST	443	49747	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:19.562516928 CEST	443	49747	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:19.562894106 CEST	49747	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:19.562953949 CEST	443	49747	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:19.563081026 CEST	49747	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:19.566293955 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.566401005 CEST	49746	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:19.566407919 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.573503971 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.573560953 CEST	49746	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:19.573585033 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.578656912 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.578819990 CEST	49746	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:19.578828096 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.608114004 CEST	443	49747	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:19.625294924 CEST	49746	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:19.625305891 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.666802883 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.666873932 CEST	49746	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:19.666886091 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.670433998 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.670494080 CEST	49746	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:19.670502901 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.676450968 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.676594973 CEST	49746	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:19.676606894 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.683770895 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.683861971 CEST	49746	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:19.683870077 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.690995932 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.691066027 CEST	49746	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:19.691073895 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.705043077 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.705079079 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.705141068 CEST	49746	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:19.705149889 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.705215931 CEST	49746	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:19.711842060 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.718606949 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.718660116 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.718697071 CEST	49746	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:19.718723059 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.718776941 CEST	49746	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:19.725402117 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.725452900 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.725590944 CEST	49746	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:19.725605011 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.725617886 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.725697994 CEST	49746	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:19.725897074 CEST	49746	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:19.725924015 CEST	443	49746	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:19.728876114 CEST	49748	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:19.728905916 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:19.728981018 CEST	49748	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:19.729304075 CEST	49748	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:19.729317904 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:19.793363094 CEST	443	49747	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:19.793482065 CEST	443	49747	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:19.793574095 CEST	49747	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:19.793600082 CEST	443	49747	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:19.793764114 CEST	443	49747	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:19.793822050 CEST	49747	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:19.794246912 CEST	49747	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:19.794260979 CEST	443	49747	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:19.944307089 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:19.944668055 CEST	49748	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:19.944732904 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:19.945224047 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:19.945615053 CEST	49748	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:19.945709944 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:19.945772886 CEST	49748	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:19.992119074 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.185844898 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.186113119 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.186150074 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.186176062 CEST	49748	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:20.186206102 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.186248064 CEST	49748	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:20.187027931 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.193463087 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.193495035 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.193527937 CEST	49748	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:20.193546057 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.193605900 CEST	49748	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:20.200850010 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.208235025 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.208276033 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.208306074 CEST	49748	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:20.208322048 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.208370924 CEST	49748	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:20.215658903 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.262269974 CEST	49748	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:20.290513992 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.294187069 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.294215918 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.294284105 CEST	49748	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:20.294311047 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.294357061 CEST	49748	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:20.301597118 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.309020042 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.309053898 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.309077024 CEST	49748	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:20.309084892 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.309129953 CEST	49748	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:20.316433907 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.323909044 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.323971987 CEST	49748	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:20.323978901 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.331309080 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.331353903 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.331382990 CEST	49748	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:20.331401110 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.331443071 CEST	49748	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:20.338716030 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.345432043 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.345482111 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.345508099 CEST	49748	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:20.345524073 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.345561981 CEST	49748	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:20.352200031 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.358872890 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.358993053 CEST	49748	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:20.359003067 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.359070063 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.359114885 CEST	49748	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:20.359181881 CEST	49748	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:20.359194994 CEST	443	49748	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:20.359205961 CEST	49748	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:20.359245062 CEST	49748	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:24.448115110 CEST	49749	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:24.448146105 CEST	443	49749	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:24.448257923 CEST	49749	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:24.448533058 CEST	49749	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:24.448546886 CEST	443	49749	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:24.670516014 CEST	443	49749	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:24.670890093 CEST	49749	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:24.670908928 CEST	443	49749	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:24.671994925 CEST	443	49749	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:24.672313929 CEST	49749	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:24.672444105 CEST	49749	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:24.672450066 CEST	443	49749	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:24.672491074 CEST	443	49749	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:24.672497988 CEST	49749	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:24.672646999 CEST	443	49749	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:24.722316980 CEST	49749	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:24.940401077 CEST	443	49749	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:24.946702957 CEST	443	49749	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:24.946794987 CEST	49749	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:24.946809053 CEST	443	49749	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:24.946841955 CEST	443	49749	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:24.946892023 CEST	49749	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:24.946928024 CEST	443	49749	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:24.950402975 CEST	443	49749	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:24.950473070 CEST	49749	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:24.950484991 CEST	443	49749	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:24.954240084 CEST	443	49749	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:24.954370975 CEST	49749	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:24.954379082 CEST	443	49749	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:24.961654902 CEST	443	49749	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:24.961743116 CEST	49749	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:24.961776018 CEST	443	49749	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:24.966696978 CEST	443	49749	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:24.966770887 CEST	49749	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:24.966784000 CEST	443	49749	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.010359049 CEST	49749	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:25.010376930 CEST	443	49749	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.046951056 CEST	443	49749	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.047040939 CEST	49749	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:25.047068119 CEST	443	49749	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.050378084 CEST	443	49749	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.050560951 CEST	49749	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:25.050573111 CEST	443	49749	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.058145046 CEST	443	49749	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.058295012 CEST	49749	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:25.058304071 CEST	443	49749	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.065243006 CEST	443	49749	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.066131115 CEST	49749	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:25.066144943 CEST	443	49749	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.073813915 CEST	443	49749	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.073944092 CEST	49749	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:25.074208021 CEST	49749	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:25.074224949 CEST	443	49749	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.077528000 CEST	49750	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:25.077563047 CEST	443	49750	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:25.077672958 CEST	49750	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:25.077884912 CEST	49750	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:25.077903986 CEST	443	49750	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:25.083204985 CEST	49751	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:25.083292007 CEST	443	49751	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.083381891 CEST	49751	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:25.084139109 CEST	49751	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:25.084168911 CEST	443	49751	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.300689936 CEST	443	49751	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.301008940 CEST	49751	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:25.301068068 CEST	443	49751	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.301398039 CEST	443	49751	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.301486015 CEST	443	49750	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:25.301701069 CEST	49751	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:25.301794052 CEST	443	49751	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.301963091 CEST	49751	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:25.301996946 CEST	443	49751	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.302090883 CEST	49750	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:25.302103043 CEST	443	49750	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:25.303241968 CEST	443	49750	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:25.303596020 CEST	49750	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:25.303596020 CEST	49750	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:25.303607941 CEST	443	49750	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:25.303755999 CEST	443	49750	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:25.344381094 CEST	49750	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:25.528270006 CEST	443	49751	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.528337955 CEST	443	49751	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.528394938 CEST	443	49751	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.528502941 CEST	49751	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:25.528532982 CEST	443	49751	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.528585911 CEST	49751	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:25.532130003 CEST	443	49750	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:25.532402992 CEST	443	49751	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.532510996 CEST	443	49750	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:25.532640934 CEST	49750	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:25.533442020 CEST	49750	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:25.533462048 CEST	443	49750	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:25.539964914 CEST	443	49751	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.540010929 CEST	443	49751	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.540066004 CEST	49751	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:25.540091038 CEST	443	49751	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.540143967 CEST	49751	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:25.547457933 CEST	443	49751	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.555026054 CEST	443	49751	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.555048943 CEST	443	49751	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.555104971 CEST	49751	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:25.555118084 CEST	443	49751	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.555238962 CEST	49751	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:25.632863998 CEST	443	49751	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.636291981 CEST	443	49751	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.636343956 CEST	443	49751	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.636483908 CEST	49751	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:25.636512041 CEST	443	49751	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.636568069 CEST	49751	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:25.643732071 CEST	443	49751	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.651293993 CEST	443	49751	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.651314020 CEST	443	49751	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.651351929 CEST	49751	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:25.651360035 CEST	443	49751	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.651401043 CEST	49751	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:25.660238028 CEST	443	49751	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.666004896 CEST	443	49751	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.666068077 CEST	49751	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:25.666074991 CEST	443	49751	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.666160107 CEST	443	49751	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.666215897 CEST	49751	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:25.666404963 CEST	49751	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:25.666419029 CEST	443	49751	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:25.669944048 CEST	49752	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:25.670027971 CEST	443	49752	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:25.670164108 CEST	49752	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:25.670459032 CEST	49752	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:25.670494080 CEST	443	49752	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:25.887633085 CEST	443	49752	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:25.888020992 CEST	49752	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:25.888048887 CEST	443	49752	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:25.888535023 CEST	443	49752	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:25.888964891 CEST	49752	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:25.889051914 CEST	443	49752	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:25.889125109 CEST	49752	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:25.936106920 CEST	443	49752	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:26.216737986 CEST	443	49752	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:26.216823101 CEST	443	49752	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:26.216856003 CEST	443	49752	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:26.217077971 CEST	49752	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:26.217106104 CEST	443	49752	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:26.217160940 CEST	49752	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:26.217217922 CEST	443	49752	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:26.223922968 CEST	443	49752	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:26.223958969 CEST	443	49752	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:26.223994970 CEST	49752	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:26.224005938 CEST	443	49752	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:26.224055052 CEST	49752	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:26.231342077 CEST	443	49752	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:26.238727093 CEST	443	49752	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:26.238768101 CEST	443	49752	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:26.238817930 CEST	49752	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:26.238826990 CEST	443	49752	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:26.239025116 CEST	49752	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:26.246243000 CEST	443	49752	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:26.286323071 CEST	49752	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:26.322149992 CEST	443	49752	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:26.325844049 CEST	443	49752	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:26.325874090 CEST	443	49752	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:26.325918913 CEST	49752	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:26.325937986 CEST	443	49752	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:26.325994968 CEST	49752	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:26.333141088 CEST	443	49752	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:26.340569973 CEST	443	49752	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:26.340601921 CEST	443	49752	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:26.340660095 CEST	49752	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:26.340677023 CEST	443	49752	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:26.340837002 CEST	49752	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:26.347973108 CEST	443	49752	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:26.348093033 CEST	443	49752	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:26.348148108 CEST	49752	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:26.348162889 CEST	443	49752	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:26.348215103 CEST	443	49752	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:26.348282099 CEST	49752	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:26.348342896 CEST	49752	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:26.348377943 CEST	443	49752	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:31.077826023 CEST	49753	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:31.077863932 CEST	443	49753	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:31.077960968 CEST	49753	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:31.078279018 CEST	49753	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:31.078315020 CEST	443	49753	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:31.294218063 CEST	443	49753	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:31.294537067 CEST	49753	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:31.294603109 CEST	443	49753	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:31.294939041 CEST	443	49753	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:31.295259953 CEST	49753	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:31.295331955 CEST	443	49753	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:31.295429945 CEST	49753	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:31.295486927 CEST	49753	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:31.295512915 CEST	443	49753	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:31.538634062 CEST	443	49753	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:31.538754940 CEST	443	49753	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:31.538841963 CEST	49753	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:31.539273977 CEST	49753	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:31.539288998 CEST	443	49753	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:31.541810989 CEST	49754	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:31.541913033 CEST	443	49754	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:31.542027950 CEST	49754	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:31.542232037 CEST	49754	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:31.542265892 CEST	443	49754	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:31.556094885 CEST	49755	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:31.556139946 CEST	443	49755	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:31.556210995 CEST	49755	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:31.556464911 CEST	49755	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:31.556480885 CEST	443	49755	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:31.757863998 CEST	443	49754	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:31.758205891 CEST	49754	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:31.758239985 CEST	443	49754	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:31.758649111 CEST	443	49754	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:31.758955956 CEST	49754	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:31.759061098 CEST	443	49754	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:31.759088039 CEST	49754	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:31.771240950 CEST	443	49755	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:31.771564960 CEST	49755	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:31.771629095 CEST	443	49755	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:31.772147894 CEST	443	49755	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:31.772453070 CEST	49755	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:31.772552967 CEST	443	49755	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:31.772658110 CEST	49755	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:31.772658110 CEST	49755	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:31.772659063 CEST	49755	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:31.772696018 CEST	443	49755	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:31.804112911 CEST	443	49754	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:31.814378023 CEST	49754	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:31.820141077 CEST	443	49755	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:31.986721992 CEST	443	49754	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:31.986845970 CEST	443	49754	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:31.986937046 CEST	49754	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:31.987812996 CEST	49754	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:31.987833977 CEST	443	49754	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:32.071907043 CEST	443	49755	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:32.072009087 CEST	443	49755	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:32.072079897 CEST	49755	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:32.073824883 CEST	49755	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:32.073848009 CEST	443	49755	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:32.181759119 CEST	49756	443	192.168.2.16	74.125.136.113
Apr 18, 2024 00:34:32.181792021 CEST	443	49756	74.125.136.113	192.168.2.16
Apr 18, 2024 00:34:32.182087898 CEST	49756	443	192.168.2.16	74.125.136.113
Apr 18, 2024 00:34:32.182336092 CEST	49756	443	192.168.2.16	74.125.136.113
Apr 18, 2024 00:34:32.182348013 CEST	443	49756	74.125.136.113	192.168.2.16
Apr 18, 2024 00:34:32.394978046 CEST	443	49756	74.125.136.113	192.168.2.16
Apr 18, 2024 00:34:32.395545006 CEST	49756	443	192.168.2.16	74.125.136.113
Apr 18, 2024 00:34:32.395553112 CEST	443	49756	74.125.136.113	192.168.2.16
Apr 18, 2024 00:34:32.395941019 CEST	443	49756	74.125.136.113	192.168.2.16
Apr 18, 2024 00:34:32.396258116 CEST	49756	443	192.168.2.16	74.125.136.113
Apr 18, 2024 00:34:32.396311998 CEST	443	49756	74.125.136.113	192.168.2.16
Apr 18, 2024 00:34:32.396435976 CEST	49756	443	192.168.2.16	74.125.136.113
Apr 18, 2024 00:34:32.440116882 CEST	443	49756	74.125.136.113	192.168.2.16
Apr 18, 2024 00:34:32.977516890 CEST	443	49756	74.125.136.113	192.168.2.16
Apr 18, 2024 00:34:32.977627039 CEST	49756	443	192.168.2.16	74.125.136.113
Apr 18, 2024 00:34:32.977648020 CEST	443	49756	74.125.136.113	192.168.2.16
Apr 18, 2024 00:34:32.977663994 CEST	443	49756	74.125.136.113	192.168.2.16
Apr 18, 2024 00:34:32.977802038 CEST	49756	443	192.168.2.16	74.125.136.113
Apr 18, 2024 00:34:32.978226900 CEST	49756	443	192.168.2.16	74.125.136.113
Apr 18, 2024 00:34:32.978241920 CEST	443	49756	74.125.136.113	192.168.2.16
Apr 18, 2024 00:34:32.981776953 CEST	49757	443	192.168.2.16	74.125.136.113
Apr 18, 2024 00:34:32.981853008 CEST	443	49757	74.125.136.113	192.168.2.16
Apr 18, 2024 00:34:32.981983900 CEST	49757	443	192.168.2.16	74.125.136.113
Apr 18, 2024 00:34:32.982194901 CEST	49757	443	192.168.2.16	74.125.136.113
Apr 18, 2024 00:34:32.982228994 CEST	443	49757	74.125.136.113	192.168.2.16
Apr 18, 2024 00:34:33.198076963 CEST	443	49757	74.125.136.113	192.168.2.16
Apr 18, 2024 00:34:33.198410988 CEST	49757	443	192.168.2.16	74.125.136.113
Apr 18, 2024 00:34:33.198425055 CEST	443	49757	74.125.136.113	192.168.2.16
Apr 18, 2024 00:34:33.198965073 CEST	443	49757	74.125.136.113	192.168.2.16
Apr 18, 2024 00:34:33.199352980 CEST	49757	443	192.168.2.16	74.125.136.113
Apr 18, 2024 00:34:33.199430943 CEST	443	49757	74.125.136.113	192.168.2.16
Apr 18, 2024 00:34:33.199520111 CEST	49757	443	192.168.2.16	74.125.136.113
Apr 18, 2024 00:34:33.244117022 CEST	443	49757	74.125.136.113	192.168.2.16
Apr 18, 2024 00:34:33.471769094 CEST	443	49757	74.125.136.113	192.168.2.16
Apr 18, 2024 00:34:33.471908092 CEST	443	49757	74.125.136.113	192.168.2.16
Apr 18, 2024 00:34:33.471982002 CEST	49757	443	192.168.2.16	74.125.136.113
Apr 18, 2024 00:34:33.472601891 CEST	49757	443	192.168.2.16	74.125.136.113
Apr 18, 2024 00:34:33.472619057 CEST	443	49757	74.125.136.113	192.168.2.16
Apr 18, 2024 00:34:33.475188017 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:33.475256920 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:33.475404024 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:33.475684881 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:33.475719929 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:33.688256979 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:33.688658953 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:33.688674927 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:33.689083099 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:33.689517975 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:33.689600945 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:33.689713001 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:33.732157946 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.014745951 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.014815092 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.014873028 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.014889956 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.014944077 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.021800041 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.021884918 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.021908998 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.021969080 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.031769037 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.034198046 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.034235001 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.034292936 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.034320116 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.034384012 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.040035009 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.095352888 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.095364094 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.120434046 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.120518923 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.120542049 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.123837948 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.123902082 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.123919010 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.131162882 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.131252050 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.131272078 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.135412931 CEST	49759	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.135437965 CEST	443	49759	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.135504961 CEST	49759	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.135853052 CEST	49759	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.135864973 CEST	443	49759	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.138417006 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.138483047 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.138499022 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.145701885 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.145776033 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.145791054 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.152991056 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.153064966 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.153079033 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.160340071 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.160407066 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.160423994 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.167526007 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.167584896 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.167599916 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.174153090 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.174216032 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.174266100 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.180926085 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.180999994 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.181016922 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.193970919 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.194051981 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.194053888 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.194072962 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.194113970 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.200453043 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.203795910 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.203867912 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.203876972 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.226398945 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.226464987 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.226474047 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.229573011 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.229628086 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.229635000 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.236190081 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.236244917 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.236251116 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.242598057 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.242672920 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.242681026 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.248979092 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.249034882 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.249042988 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.254762888 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.254825115 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.254832983 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.260696888 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.260749102 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.260756016 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.266047001 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.266100883 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.266108036 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.271648884 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.271708012 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.271714926 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.277029991 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.277097940 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.277107954 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.282396078 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.282460928 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.282466888 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.290461063 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.290507078 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.290537119 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.290546894 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.290591955 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.295896053 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.301110029 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.301145077 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.301165104 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.301171064 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.301218987 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.306056976 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.310698032 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.310730934 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.310755968 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.310766935 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.310811043 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.315275908 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.319710016 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.319744110 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.319772959 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.319780111 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.319823980 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.324064016 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.328526974 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.328568935 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.328582048 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.328589916 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.328633070 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.332915068 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.337403059 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.337441921 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.337466955 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.337472916 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.337517977 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.341692924 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.344552040 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.344604969 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.344613075 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.347212076 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.347282887 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.347290039 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.349004030 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.349078894 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.349086046 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.351459026 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.351533890 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.351541996 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.353387117 CEST	443	49759	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.353672028 CEST	49759	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.353681087 CEST	443	49759	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.354136944 CEST	443	49759	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.354175091 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.354228020 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.354237080 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.354512930 CEST	49759	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.354588032 CEST	443	49759	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.355029106 CEST	49760	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.355051041 CEST	443	49760	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.355139971 CEST	49760	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.355263948 CEST	49761	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.355279922 CEST	443	49761	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.355346918 CEST	49761	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.355397940 CEST	49759	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.355432034 CEST	443	49759	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.355771065 CEST	49760	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.355783939 CEST	443	49760	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.355953932 CEST	49761	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.355962038 CEST	443	49761	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.356914997 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.356960058 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.356969118 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.359616995 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.359668970 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.359683990 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.362396002 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.362451077 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.362473965 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.365134001 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.365194082 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.365216017 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.367883921 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.367954969 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.367966890 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.369900942 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.369939089 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.370021105 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.370248079 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.370263100 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.370599985 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.370646000 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.370656967 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.373320103 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.373378038 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.373398066 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.376030922 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.376095057 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.376123905 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.379903078 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.379940987 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.379973888 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.379991055 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.380040884 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.382567883 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.385176897 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.385242939 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.385257959 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.385279894 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.385463953 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.387862921 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.390393972 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.390441895 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.390450954 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.390465975 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.390511036 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.392911911 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.395481110 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.395515919 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.395545006 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.395554066 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.395601988 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.398046970 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.400551081 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.400597095 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.400618076 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.400625944 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.400676966 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.402976990 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.405416012 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.405492067 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.405517101 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.405525923 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.405580997 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.407810926 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.410216093 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.410269976 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.410278082 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.411462069 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.411529064 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.411535978 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.413719893 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.413784027 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.413790941 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.416066885 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.416125059 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.416131973 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.418467045 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.418520927 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.418528080 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.420741081 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.420797110 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.420804024 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.422960997 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.423021078 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.423027992 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.425292969 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.425333023 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.425347090 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.425354004 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.425403118 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.425409079 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.427571058 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.427630901 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.427638054 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.429802895 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.429860115 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.429867983 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.432007074 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.432064056 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.432070971 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.434137106 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.434196949 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.434204102 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.436471939 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.436528921 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.436543941 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.439476967 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.439528942 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.439536095 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.439543009 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.439587116 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.441584110 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.443600893 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.443655968 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.443691015 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.443701029 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.443743944 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.445646048 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.447712898 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.447751045 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.447765112 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.447772026 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.447817087 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.449778080 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.451755047 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.451811075 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.451817989 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.451935053 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.451992989 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.452115059 CEST	49758	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.452122927 CEST	443	49758	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.571140051 CEST	443	49761	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.571876049 CEST	49761	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.571887970 CEST	443	49761	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.572187901 CEST	443	49761	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.572668076 CEST	49761	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.572721004 CEST	443	49761	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.572849035 CEST	49761	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.572861910 CEST	443	49761	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.577423096 CEST	443	49760	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.577687979 CEST	49760	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.577697039 CEST	443	49760	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.578151941 CEST	443	49760	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.578489065 CEST	49760	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.578566074 CEST	443	49760	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.578634024 CEST	49760	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.578644037 CEST	443	49760	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.584916115 CEST	443	49759	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.585520983 CEST	49759	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.585530043 CEST	443	49759	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.585563898 CEST	443	49759	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.585587978 CEST	49759	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.585669041 CEST	49759	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.585860014 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.586215973 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.586247921 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.587110996 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.587176085 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.587481022 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.587534904 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.587615967 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.587635994 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.632383108 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.788954020 CEST	443	49761	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.788990021 CEST	443	49761	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.789037943 CEST	443	49761	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.789067030 CEST	49761	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.789077997 CEST	443	49761	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.789129019 CEST	49761	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.789136887 CEST	443	49761	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.789726973 CEST	443	49761	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.789779902 CEST	49761	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.790687084 CEST	49761	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.790695906 CEST	443	49761	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.792529106 CEST	443	49760	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.792651892 CEST	443	49760	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.792714119 CEST	49760	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.792731047 CEST	443	49760	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.792813063 CEST	443	49760	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.792866945 CEST	49760	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.792874098 CEST	443	49760	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.792953968 CEST	443	49760	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.793015003 CEST	49760	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.793020964 CEST	443	49760	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.793505907 CEST	49760	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.793591022 CEST	443	49760	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.793654919 CEST	49760	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.796715975 CEST	49763	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:34.796804905 CEST	443	49763	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:34.796924114 CEST	49763	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:34.797338963 CEST	49763	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:34.797375917 CEST	443	49763	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:34.821839094 CEST	49766	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.821876049 CEST	443	49766	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.822087049 CEST	49766	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.822160006 CEST	49766	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.822175980 CEST	443	49766	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.841471910 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.841514111 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.841542006 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.841568947 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.841587067 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.841620922 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.841628075 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.841634989 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.841686010 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.848696947 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.856122971 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.856173992 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.856177092 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.856188059 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.856228113 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.863614082 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.871016979 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.871093988 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.871109009 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.919493914 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.947099924 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.950831890 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.950861931 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.950941086 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.950954914 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.951082945 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.958235025 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.965656042 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.965681076 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.965766907 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.965778112 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.965873957 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.973134995 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.980554104 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.980578899 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.980680943 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.980691910 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.980798960 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.988010883 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.994832039 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.994884014 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.994930983 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:34.994941950 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:34.995049953 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.001765966 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.008711100 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.008738041 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.008820057 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.008830070 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.008898973 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.015503883 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.019831896 CEST	443	49763	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:35.020113945 CEST	49763	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:35.020157099 CEST	443	49763	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:35.021255970 CEST	443	49763	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:35.021564960 CEST	49763	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:35.021682978 CEST	49763	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:35.021696091 CEST	443	49763	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:35.021745920 CEST	443	49763	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:35.022425890 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.022455931 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.022494078 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.022504091 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.022557974 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.029314041 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.036212921 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.036242008 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.036273956 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.036283016 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.036353111 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.037180901 CEST	443	49766	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.037436962 CEST	49766	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.037456036 CEST	443	49766	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.037854910 CEST	443	49766	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.038170099 CEST	49766	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.038237095 CEST	443	49766	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.038583994 CEST	49767	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.038614988 CEST	443	49767	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.038700104 CEST	49767	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.038697004 CEST	49766	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.038741112 CEST	443	49766	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.038860083 CEST	49767	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.038882017 CEST	443	49767	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.053061008 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.055916071 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.055947065 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.055973053 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.055983067 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.056030035 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.061172009 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.063389063 CEST	49763	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:35.066322088 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.066344023 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.066379070 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.066390991 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.066435099 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.071089029 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.075897932 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.075963974 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.075989008 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.075999975 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.076050997 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.080739021 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.085491896 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.085517883 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.085580111 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.085592031 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.085635900 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.090329885 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.095097065 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.095118999 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.095165014 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.095177889 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.095225096 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.100364923 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.104228973 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.104300022 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.104310036 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.107120991 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.107141018 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.107213974 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.107223988 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.107285976 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.111922026 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.116738081 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.116791010 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.116894007 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.116904974 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.117012978 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.121556997 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.126337051 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.126368999 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.126435995 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.126446009 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.126521111 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.131139040 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.135785103 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.135811090 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.135884047 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.135895967 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.135993004 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.140396118 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.144870043 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.144932985 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.144942999 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.149261951 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.149389029 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.149398088 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.153474092 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.153528929 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.153537035 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.159610033 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.159637928 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.159657955 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.159671068 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.159712076 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.163748980 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.163781881 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.163840055 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.163847923 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.167923927 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.168020964 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.168030024 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.170500994 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.170552015 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.170559883 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.173041105 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.173100948 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.173108101 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.175529957 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.175591946 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.175601959 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.178016901 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.178077936 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.178087950 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.180515051 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.180571079 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.180577993 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.183037996 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.183092117 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.183100939 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.185390949 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.185441017 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.185450077 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.187808037 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.187860966 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.187869072 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.190185070 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.190237999 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.190252066 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.193762064 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.193787098 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.193830967 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.193840981 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.193880081 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.196063042 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.198350906 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.198374987 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.198405981 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.198414087 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.198452950 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.200649023 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.202940941 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.202970028 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.202999115 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.203006983 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.203056097 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.205204964 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.207479000 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.207509995 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.207534075 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.207550049 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.207596064 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.209750891 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.212044954 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.212073088 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.212109089 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.212116957 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.212181091 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.214220047 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.216475964 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.216504097 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.216527939 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.216536045 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.216583967 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.218683958 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.220844030 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.220895052 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.220901966 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.222008944 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.222055912 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.222063065 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.224140882 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.224198103 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.224205017 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.226232052 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.226284027 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.226291895 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.228322983 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.228375912 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.228384018 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.230448008 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.230494976 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.230501890 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.232513905 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.232562065 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.232568979 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.234570980 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.234626055 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.234633923 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.236643076 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.236687899 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.236695051 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.238708973 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.238761902 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.238770008 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.240684986 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.240736008 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.240742922 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.242716074 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.242764950 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.242773056 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.244664907 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.244716883 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.244724035 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.245238066 CEST	443	49763	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:35.245361090 CEST	443	49763	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:35.245409012 CEST	49763	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:35.245426893 CEST	443	49763	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:35.245513916 CEST	443	49763	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:35.245575905 CEST	49763	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:35.245584011 CEST	443	49763	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:35.245650053 CEST	443	49763	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:35.245703936 CEST	49763	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:35.245711088 CEST	443	49763	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:35.246094942 CEST	49763	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:35.246170998 CEST	443	49763	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:35.246227980 CEST	49763	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:35.247642040 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.247678041 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.247693062 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.247700930 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.247736931 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.249572992 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.251478910 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.251507998 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.251518011 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.251526117 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.251562119 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.251991034 CEST	443	49766	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.252082109 CEST	443	49766	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.252126932 CEST	49766	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.252824068 CEST	49766	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.252847910 CEST	443	49766	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.253523111 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.254976988 CEST	443	49767	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.255326986 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.255352974 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.255377054 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.255384922 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.255426884 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.255455971 CEST	49767	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.255466938 CEST	443	49767	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.255913019 CEST	443	49767	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.256417036 CEST	49768	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:35.256443977 CEST	443	49768	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:35.256508112 CEST	49768	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:35.256887913 CEST	49767	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.256967068 CEST	443	49767	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.257198095 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.257335901 CEST	49768	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:35.257354975 CEST	443	49768	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:35.257692099 CEST	49767	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.257734060 CEST	443	49767	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.259057999 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.259089947 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.259104967 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.259114027 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.259155989 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.260999918 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.262826920 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.262855053 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.262878895 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.262887955 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.262933969 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.264786959 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.266469955 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.266499996 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.266516924 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.266525984 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.266565084 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.268304110 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.270131111 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.270184040 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.270193100 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.271074057 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.271127939 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.271136045 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.273001909 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.273053885 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.273061037 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.274696112 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.274745941 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.274751902 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.276417017 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.276467085 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.276474953 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.278259993 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.278314114 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.278321028 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.279881954 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.279933929 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.279941082 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.281449080 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.281496048 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.281502962 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.283054113 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.283107996 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.283114910 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.284656048 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.284704924 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.284712076 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.286190987 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.286242962 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.286250114 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.287710905 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.287760973 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.287770033 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.289216042 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.289269924 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.289278030 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.290752888 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.290805101 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.290812016 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.292217016 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.292334080 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.292340994 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.293683052 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.293732882 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.293740988 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.295119047 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.295170069 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.295180082 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.296571970 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.296624899 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.296633005 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.297944069 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.298001051 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.298007965 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.299319029 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.299365997 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.299386978 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.300685883 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.300736904 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.300745964 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.302094936 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.302145958 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.302153111 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.303478956 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.303527117 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.303534985 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.304828882 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.304877996 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.304884911 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.306133986 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.306183100 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.306190014 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.307465076 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.307518005 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.307524920 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.308763981 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.308813095 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.308820009 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.310043097 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.310094118 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.310101032 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.311229944 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.311280012 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.311286926 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.312469006 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.312520027 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.312527895 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.313749075 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.313798904 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.313806057 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.314949036 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.314996004 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.315004110 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.316234112 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.316283941 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.316291094 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.317430019 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.317481041 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.317487955 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.318599939 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.318654060 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.318660975 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.319817066 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.319871902 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.319879055 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.321065903 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.321119070 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.321125031 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.322191000 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.322243929 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.322249889 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.323338032 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.323394060 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.323401928 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.324451923 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.324506044 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.324513912 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.325620890 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.325671911 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.325685978 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.326781988 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.326852083 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.326859951 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.327876091 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.327925920 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.327933073 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.328979969 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.329025984 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.329035044 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.330091000 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.330151081 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.330159903 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.331204891 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.331258059 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.331265926 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.332333088 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.332381964 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.332389116 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.333345890 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.333451033 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.333457947 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.334439039 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.334487915 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.334495068 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.335499048 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.335553885 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.335561037 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.336599112 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.336648941 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.336656094 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.337646008 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.337692022 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.337699890 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.338690042 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.338742018 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.338747978 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.339765072 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.339813948 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.339822054 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.340734005 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.340783119 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.340790033 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.341710091 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.341758013 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.341764927 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.342730999 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.342778921 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.342787027 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.343842983 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.343898058 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.343904972 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.344753981 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.344803095 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.344810009 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.345864058 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.345921993 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.345928907 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.346731901 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.346781015 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.346787930 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.347687006 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.347737074 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.347745895 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.348687887 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.348737955 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.348745108 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.349668026 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.349719048 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.349725962 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.350608110 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.350660086 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.350671053 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.351547003 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.351600885 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.351608992 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.352474928 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.352525949 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.352534056 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.353391886 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.353447914 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.353456020 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.354336023 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.354387999 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.354397058 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.355278969 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.355339050 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.355346918 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.356208086 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.356264114 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.356271029 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.357089996 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.357146025 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.357152939 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.357997894 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.358056068 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.358063936 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.358939886 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.358993053 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.358999968 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.359872103 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.359919071 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.359925985 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.360676050 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.360727072 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.360733986 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.361593008 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.361644030 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.361653090 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.362474918 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.362525940 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.362533092 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.363342047 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.363408089 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.363415003 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.364247084 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.364310980 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.364317894 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.365082979 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.365134001 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.365140915 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.365916967 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.365971088 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.365978003 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.366775036 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.366827965 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.366836071 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.367649078 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.367695093 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.367702007 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.368504047 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.368566990 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.368572950 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.369318008 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.369366884 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.369374037 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.370147943 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.370210886 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.370218992 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.370973110 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.371025085 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.371032000 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.371834993 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.371886969 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.371893883 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.372623920 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.372674942 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.372683048 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.373434067 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.373481989 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.373492956 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.374263048 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.374352932 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.374360085 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.375061989 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.375106096 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.375113010 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.375926018 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.375981092 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.375988007 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.376689911 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.376744986 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.376751900 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.377506018 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.377562046 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.377569914 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.378268957 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.378333092 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.378340006 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.379003048 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.379053116 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.379067898 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.379839897 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.379893064 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.379900932 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.380619049 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.380670071 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.380676985 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.381378889 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.381431103 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.381438017 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.382527113 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.382560015 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.382566929 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.382574081 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.382611990 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.383240938 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.384022951 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.384058952 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.384083986 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.384089947 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.384134054 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.384845018 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.385643959 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.385694027 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.385693073 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.385706902 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.385749102 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.386316061 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.387061119 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.387108088 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.387113094 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.387119055 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.387161970 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.387931108 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.388505936 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.388541937 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.388560057 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.388566017 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.388612986 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.389308929 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.389941931 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.389976978 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.389981031 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.389986992 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.390023947 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.390674114 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.391427994 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.391460896 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.391468048 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.391474962 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.391514063 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.392117977 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.392863035 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.392895937 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.392909050 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.392918110 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.392961979 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.393593073 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.394296885 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.394352913 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.394382954 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.394390106 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.394444942 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.395013094 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.395713091 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.395742893 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.395772934 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.395780087 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.395823956 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.396568060 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.397175074 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.397206068 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.397228003 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.397236109 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.397275925 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.397887945 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.398607016 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.398637056 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.398654938 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.398662090 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.398713112 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.399262905 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.399976015 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.400032997 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.400038958 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.400635004 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.400686026 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.400693893 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.401061058 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.401109934 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.401117086 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.401726007 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.401776075 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.401782990 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.402410030 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.402462006 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.402468920 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.403088093 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.403140068 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.403147936 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.403760910 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.403810978 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.403817892 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.404524088 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.404583931 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.404591084 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.405117989 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.405163050 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.405172110 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.405823946 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.405877113 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.405884027 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.406514883 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.406563997 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.406572104 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.407135010 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.407177925 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.407185078 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.407876015 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.407929897 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.407938004 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.408482075 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.408529043 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.408535957 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.409121037 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.409171104 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.409178019 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.409780979 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.409828901 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.409836054 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.410413980 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.410469055 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.410475969 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.411051989 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.411103010 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.411112070 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.411736965 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.411787987 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.411794901 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.412425995 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.412460089 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.412467957 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.412473917 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.412507057 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.413341045 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.413391113 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.413435936 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.413444996 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.414330006 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.414357901 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.414382935 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.414390087 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.414469957 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.415276051 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.415329933 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.415375948 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.415384054 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.416234016 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.416264057 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.416281939 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.416290045 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.416338921 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.417140961 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.417795897 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.417829037 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.417850971 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.417856932 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.417906046 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.417912960 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.418859005 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.418888092 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.418914080 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.418921947 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.418981075 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.419704914 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.419756889 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.419801950 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.419809103 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.420650959 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.420682907 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.420697927 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.420705080 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.420749903 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.421576023 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.421631098 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.421674013 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.421680927 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.422523975 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.422554970 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.422576904 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.422585011 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.422632933 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.423412085 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.423470974 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.423506021 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.423512936 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.424334049 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.424365044 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.424387932 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.424396038 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.424463034 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.425261021 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.425309896 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.425350904 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.425357103 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.426115036 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.426145077 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.426162004 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.426168919 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.426219940 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.427015066 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.427069902 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.427115917 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.427124023 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.427922010 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.427953005 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.427974939 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.427982092 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.428031921 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.428828955 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.428877115 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.428926945 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.428936005 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.429722071 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.429753065 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.429774046 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.429780960 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.429836035 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.430557013 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.430617094 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.430659056 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.430665970 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.431444883 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.431476116 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.431493044 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.431499958 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.431538105 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.432374954 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.432430983 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.432478905 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.432486057 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.433207035 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.433248043 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.433264017 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.433270931 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.433337927 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.434060097 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.434111118 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.434161901 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.434169054 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.434897900 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.434930086 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.434957981 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.434964895 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.435004950 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.435709000 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.435760021 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.435803890 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.435811996 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.436564922 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.436608076 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.436615944 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.436621904 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.436676025 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.437381029 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.437439919 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.437488079 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.437494993 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.438256025 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.438290119 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.438322067 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.438330889 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.438383102 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.439049959 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.439110994 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.439152956 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.439162016 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.439882994 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.439913988 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.439934969 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.439941883 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.439980030 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.440715075 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.440762043 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.440809011 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.440815926 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.441539049 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.441567898 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.441596985 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.441603899 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.441653967 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.442343950 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.442389011 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.442445993 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.442452908 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.443159103 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.443203926 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.443211079 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.443217039 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.443255901 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.443955898 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.444003105 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.444048882 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.444056988 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.444786072 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.444813967 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.444844961 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.444853067 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.444900990 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.445544958 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.445588112 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.445633888 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.445642948 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.446362972 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.446393967 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.446429968 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.446438074 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.446485996 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.447168112 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.447206020 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.447257042 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.447263956 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.447961092 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.447988987 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.448014975 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.448021889 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.448065996 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.448697090 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.448745012 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.448790073 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.448797941 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.449476004 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.449506044 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.449529886 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.449537992 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.449589014 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.450212002 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.450274944 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.450333118 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.450340033 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.451030016 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.451057911 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.451083899 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.451092005 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.451141119 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.451801062 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.451843977 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.451889992 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.451899052 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.452586889 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.452604055 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.452649117 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.452656984 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.452702999 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.453318119 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.453357935 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.453403950 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.453416109 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.454008102 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.454041004 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.454051018 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.454057932 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.454097986 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.454777002 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.454823971 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.454869986 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.454875946 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.455553055 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.455595016 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.455611944 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.455619097 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.455667973 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.456247091 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.456310987 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.456361055 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.456368923 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.456954956 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.456980944 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.457010984 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.457017899 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.457066059 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.457658052 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.457741022 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.457775116 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.457782984 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.457792044 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.457834959 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.458667040 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.458704948 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.458730936 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.458756924 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.458767891 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.458808899 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.459620953 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.459893942 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.459923029 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.459943056 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.459948063 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.459956884 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.459995985 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.460899115 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.460947037 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.460948944 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.460954905 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.460984945 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.460992098 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.461853027 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.461889982 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.461908102 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.461915016 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.461955070 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.461963892 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.462745905 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.462774038 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.462801933 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.462805033 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.462814093 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.462857962 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.463704109 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.463743925 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.463759899 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.463772058 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.463819981 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.463825941 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.464644909 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.464678049 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.464704037 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.464704990 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.464715004 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.464764118 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.465502024 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.465553045 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.465563059 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.465596914 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.465639114 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.465646982 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.466454983 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.466485977 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.466511011 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.466516972 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.466562033 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.466568947 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.467367887 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.467398882 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.467418909 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.467423916 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.467432022 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.467461109 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.468286991 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.468327999 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.468353987 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.468358040 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.468364954 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.468425035 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.469228983 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.469271898 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.469281912 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.469290018 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.469352961 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.469358921 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.470133066 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.470169067 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.470191956 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.470197916 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.470231056 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.470237017 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.470917940 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.470943928 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.470971107 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.470980883 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.471020937 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.471652031 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.471704006 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.471730947 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.471754074 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.471761942 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.471801043 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.472471952 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.472532988 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.472584009 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.472671032 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.472687006 CEST	443	49762	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.472698927 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.472733974 CEST	49762	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.478672028 CEST	443	49768	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:35.479043007 CEST	49768	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:35.479074955 CEST	443	49768	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:35.481050014 CEST	443	49768	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:35.481141090 CEST	49768	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:35.481471062 CEST	49768	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:35.481605053 CEST	49768	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:35.481615067 CEST	443	49768	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:35.481676102 CEST	443	49768	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:35.485348940 CEST	443	49767	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.485423088 CEST	443	49767	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.485491991 CEST	49767	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.485949039 CEST	49767	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.486001015 CEST	443	49767	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.527399063 CEST	49768	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:35.527421951 CEST	443	49768	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:35.539064884 CEST	49769	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.539102077 CEST	443	49769	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.539174080 CEST	49769	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.540122032 CEST	49769	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.540141106 CEST	443	49769	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.574393034 CEST	49768	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:35.703649998 CEST	443	49768	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:35.703939915 CEST	443	49768	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:35.704030991 CEST	49768	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:35.704344034 CEST	49768	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:35.704361916 CEST	443	49768	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:35.755672932 CEST	443	49769	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.756042004 CEST	49769	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.756078005 CEST	443	49769	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.756597042 CEST	443	49769	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.756933928 CEST	49769	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.757011890 CEST	443	49769	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.757311106 CEST	49771	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.757337093 CEST	443	49771	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.757405996 CEST	49771	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.757482052 CEST	49772	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.757518053 CEST	443	49772	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.757570028 CEST	49772	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.757630110 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.757667065 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.757725000 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.757793903 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.757823944 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.757889986 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.757891893 CEST	49769	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.757920980 CEST	443	49769	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.758105993 CEST	49771	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.758117914 CEST	443	49771	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.758241892 CEST	49772	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.758254051 CEST	443	49772	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.758363008 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.758380890 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.758486032 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.758503914 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.802658081 CEST	49775	443	192.168.2.16	172.217.215.101
Apr 18, 2024 00:34:35.802685022 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:35.802774906 CEST	49775	443	192.168.2.16	172.217.215.101
Apr 18, 2024 00:34:35.802956104 CEST	49775	443	192.168.2.16	172.217.215.101
Apr 18, 2024 00:34:35.802967072 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:35.808336973 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:35.808373928 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:35.808434963 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:35.808585882 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:35.808613062 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:35.973759890 CEST	443	49772	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.974025011 CEST	49772	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.974040985 CEST	443	49772	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.974152088 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.974322081 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.974329948 CEST	443	49772	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.974340916 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.974620104 CEST	49772	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.974684954 CEST	443	49772	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.974762917 CEST	49772	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.974776983 CEST	443	49772	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.975213051 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.975285053 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.975527048 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.975599051 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.975620985 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.975645065 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.979054928 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.979231119 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.979255915 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.979938030 CEST	443	49771	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.980113029 CEST	49771	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.980120897 CEST	443	49771	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.980149984 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.980216980 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.980448961 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.980516911 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.980560064 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.980562925 CEST	443	49771	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.980592012 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.980825901 CEST	49771	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.980902910 CEST	443	49771	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.980926037 CEST	49771	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.980931044 CEST	443	49771	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.985438108 CEST	443	49769	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.985912085 CEST	49769	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:35.985986948 CEST	443	49769	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:35.986051083 CEST	49769	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.018851995 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:36.019109964 CEST	49775	443	192.168.2.16	172.217.215.101
Apr 18, 2024 00:34:36.019153118 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:36.019680023 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:36.019768000 CEST	49775	443	192.168.2.16	172.217.215.101
Apr 18, 2024 00:34:36.020371914 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.020379066 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.020389080 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.020401955 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.020728111 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:36.020791054 CEST	49775	443	192.168.2.16	172.217.215.101
Apr 18, 2024 00:34:36.021622896 CEST	49775	443	192.168.2.16	172.217.215.101
Apr 18, 2024 00:34:36.021718025 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:36.021758080 CEST	49775	443	192.168.2.16	172.217.215.101
Apr 18, 2024 00:34:36.036353111 CEST	49771	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.041435003 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.041649103 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.041666031 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.042701006 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.042766094 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.043528080 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.043593884 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.043654919 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.043663979 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.064130068 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:36.067357063 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.067392111 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.067394018 CEST	49775	443	192.168.2.16	172.217.215.101
Apr 18, 2024 00:34:36.067425966 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:36.083388090 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.115412951 CEST	49775	443	192.168.2.16	172.217.215.101
Apr 18, 2024 00:34:36.209855080 CEST	443	49771	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.210036039 CEST	443	49771	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.210112095 CEST	49771	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.211468935 CEST	49771	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.211479902 CEST	443	49771	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.211489916 CEST	49771	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.211568117 CEST	49771	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.228307962 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.228349924 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.228379965 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.228420019 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.228446960 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.228462934 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.228492022 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.228543997 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.235496998 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.242897034 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.242966890 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.243007898 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.243035078 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.243098021 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.245280027 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.245419025 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.245496035 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.245513916 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.245628119 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.245683908 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.245692968 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.245768070 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.245822906 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.245831013 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.250346899 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.252156973 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.252253056 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.252262115 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.257637978 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.257738113 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.257755041 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.259557962 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.259624004 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.259633064 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.266469955 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.266525030 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.266549110 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.266588926 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.266622066 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.266670942 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.266709089 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.266729116 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.266788006 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.266900063 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.266961098 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.266971111 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.273837090 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.281183004 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.281208038 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.281256914 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.281274080 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.281347990 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.282572031 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:36.282620907 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:36.282716990 CEST	49775	443	192.168.2.16	172.217.215.101
Apr 18, 2024 00:34:36.282769918 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:36.282838106 CEST	49775	443	192.168.2.16	172.217.215.101
Apr 18, 2024 00:34:36.288710117 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.288764000 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:36.288834095 CEST	49775	443	192.168.2.16	172.217.215.101
Apr 18, 2024 00:34:36.296044111 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:36.296063900 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.296149015 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.296150923 CEST	49775	443	192.168.2.16	172.217.215.101
Apr 18, 2024 00:34:36.296165943 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.303369045 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:36.303459883 CEST	49775	443	192.168.2.16	172.217.215.101
Apr 18, 2024 00:34:36.304367065 CEST	443	49772	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.304424047 CEST	443	49772	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.304466009 CEST	443	49772	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.304476976 CEST	49772	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.304491997 CEST	443	49772	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.304533958 CEST	49772	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.304541111 CEST	443	49772	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.305408001 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.310818911 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:36.310906887 CEST	49775	443	192.168.2.16	172.217.215.101
Apr 18, 2024 00:34:36.313694954 CEST	443	49772	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.313771009 CEST	49772	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.313779116 CEST	443	49772	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.315727949 CEST	443	49772	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.315824986 CEST	49772	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.315886021 CEST	49772	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.315896988 CEST	443	49772	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.318346024 CEST	49778	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:36.318383932 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:36.318432093 CEST	443	49778	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:36.318470955 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:36.318474054 CEST	49775	443	192.168.2.16	172.217.215.101
Apr 18, 2024 00:34:36.318495035 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:36.318568945 CEST	49778	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:36.318603039 CEST	49775	443	192.168.2.16	172.217.215.101
Apr 18, 2024 00:34:36.318763018 CEST	49778	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:36.318805933 CEST	443	49778	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:36.321388960 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.321413994 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.325622082 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:36.325731039 CEST	49775	443	192.168.2.16	172.217.215.101
Apr 18, 2024 00:34:36.333636999 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.337286949 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.337383986 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.337403059 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.337419033 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.337447882 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.337474108 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.344681025 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.350742102 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.350815058 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.350845098 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.352149963 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.352236032 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.352250099 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.352261066 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.352339983 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.354429960 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.354511976 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.354531050 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.359392881 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.361788034 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.361861944 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.361881971 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.366810083 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.366883993 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.366892099 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.369144917 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.369213104 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.369236946 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.371963978 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.374170065 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.374233961 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.374242067 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.375607967 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.375637054 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.375668049 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.375678062 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.375730991 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.376581907 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.376648903 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.376672029 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.381056070 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.381125927 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.381134033 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.383090973 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.383919954 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.383982897 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.384000063 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.387928963 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.387947083 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:36.388019085 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.388026953 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.388140917 CEST	49775	443	192.168.2.16	172.217.215.101
Apr 18, 2024 00:34:36.390470982 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.390499115 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.390851021 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.390866041 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.390958071 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.391340017 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.391397953 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.391419888 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.391565084 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:36.391634941 CEST	49775	443	192.168.2.16	172.217.215.101
Apr 18, 2024 00:34:36.394840002 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.394896030 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.394902945 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.397870064 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.398221016 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.398288965 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.398334026 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.398972034 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:36.399055004 CEST	49775	443	192.168.2.16	172.217.215.101
Apr 18, 2024 00:34:36.401652098 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.401721001 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.401730061 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.405061960 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.405128956 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.405153990 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.405359983 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.405385017 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.405416012 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.405431986 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.405483961 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.406394005 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:36.406462908 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:36.406472921 CEST	49775	443	192.168.2.16	172.217.215.101
Apr 18, 2024 00:34:36.406492949 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:36.406555891 CEST	49775	443	192.168.2.16	172.217.215.101
Apr 18, 2024 00:34:36.408565998 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.408636093 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.408643961 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.411910057 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.411972046 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.411997080 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.412763119 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.414211988 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:36.414293051 CEST	49775	443	192.168.2.16	172.217.215.101
Apr 18, 2024 00:34:36.415452957 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.415513992 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.415520906 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.418761015 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.418832064 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.418859005 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.420212030 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.420238972 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.420279980 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.420294046 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.420363903 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.421139002 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:36.421217918 CEST	49775	443	192.168.2.16	172.217.215.101
Apr 18, 2024 00:34:36.422249079 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.422308922 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.422316074 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.425621986 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.425719023 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.425746918 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.426974058 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.428564072 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:36.432512999 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.432602882 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.432634115 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.433773994 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.433798075 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.433876991 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.433893919 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.433959961 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.435962915 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:36.436038017 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:36.436048985 CEST	49775	443	192.168.2.16	172.217.215.101
Apr 18, 2024 00:34:36.436064005 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:36.436131954 CEST	49775	443	192.168.2.16	172.217.215.101
Apr 18, 2024 00:34:36.438031912 CEST	49780	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.438050985 CEST	443	49780	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.438141108 CEST	49780	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.438375950 CEST	49780	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.438383102 CEST	443	49780	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.439414024 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.439496040 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.439512014 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.439546108 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.439558983 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.439568043 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.440560102 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.442831993 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.442893028 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.442899942 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.443299055 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:36.443597078 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:36.443674088 CEST	49775	443	192.168.2.16	172.217.215.101
Apr 18, 2024 00:34:36.443893909 CEST	49775	443	192.168.2.16	172.217.215.101
Apr 18, 2024 00:34:36.443927050 CEST	443	49775	172.217.215.101	192.168.2.16
Apr 18, 2024 00:34:36.447331905 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.447365046 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.447405100 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.447419882 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.447475910 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.449822903 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.449898005 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.449904919 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.454040051 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.456120968 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.456207991 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.456240892 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.456619024 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.456687927 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.456691980 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.456722021 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.456773043 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.459141016 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.459206104 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.459227085 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.460799932 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.460824966 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.460865974 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.460880041 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.460933924 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.463454008 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.465018034 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.465085983 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.465106964 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.470314980 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.470390081 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.470391035 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.470397949 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.470459938 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.470460892 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.470482111 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.470506907 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.470514059 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.475802898 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.475867987 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.475888014 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.476574898 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.476639986 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.476646900 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.477519035 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.480597973 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.480679989 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.480705976 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.480886936 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.480914116 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.480937004 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.480946064 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.480988979 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.482418060 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.482485056 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.482492924 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.485723019 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.485793114 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.485811949 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.487698078 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.488234043 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.488302946 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.488313913 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.490820885 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.490885019 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.490905046 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.494024038 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.494046926 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.494076967 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.494103909 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.494112968 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.494139910 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.494148970 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.494204998 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.495954990 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.496015072 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.496032000 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.500489950 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.501085997 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.501147985 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.501162052 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.502392054 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.502468109 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.502479076 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.502516031 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.502563000 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.506341934 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.506385088 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.506402969 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.506414890 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.506468058 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.506477118 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.507823944 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.508744001 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.508774996 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.508811951 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.508843899 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.508896112 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.512175083 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.512242079 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.512255907 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.512881994 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.512944937 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.512959003 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.513822079 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.517766953 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.517839909 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.517855883 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.517889977 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.517963886 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.517973900 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.518002033 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.518064976 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.519006014 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.519036055 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.519074917 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.519109964 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.519171000 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.522543907 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.522943974 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.523036957 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.523052931 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.524499893 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.527105093 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.527184010 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.527184963 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.527216911 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.527265072 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.528479099 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.528543949 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.528558016 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.529140949 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.529171944 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.529201031 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.529231071 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.529289007 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.531635046 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.533992052 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.535443068 CEST	443	49778	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:36.535671949 CEST	49778	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:36.535701990 CEST	443	49778	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:36.535845041 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.535907984 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.535926104 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.536216021 CEST	443	49778	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:36.536542892 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.536544085 CEST	49778	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:36.536570072 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.536602974 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.536618948 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.536626101 CEST	443	49778	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:36.536683083 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.536731005 CEST	49778	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:36.538645029 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.538672924 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.538721085 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.538750887 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.538800955 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.540165901 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.540241957 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.540257931 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.542026997 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.543239117 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.544323921 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.544399977 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.544409990 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.547426939 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.547491074 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.547506094 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.547693014 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.547749043 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.547781944 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.548427105 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.548496008 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.548505068 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.552026033 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.552089930 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.552114010 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.552516937 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.552565098 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.552577972 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.552587032 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.552624941 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.552639961 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.556365013 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.556423903 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.556443930 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.557375908 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.557441950 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.557456017 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.557868958 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.557936907 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.557951927 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.560436010 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.560473919 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.560518026 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.560551882 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.560559988 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.560575962 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.560615063 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.560676098 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.560700893 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.561904907 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.561969995 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.561984062 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.562994957 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.563064098 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.563077927 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.565498114 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.565568924 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.565582037 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.566531897 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.566565990 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.566596031 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.566597939 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.566610098 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.566641092 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.566672087 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.566725016 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.568097115 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.568192005 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.568206072 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.570852041 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.570943117 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.571010113 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.571014881 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.571027994 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.571044922 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.571075916 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.571090937 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.571140051 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.573208094 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.573278904 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.573292971 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.574825048 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.574851990 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.574887991 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.574913979 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.574966908 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.575251102 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.575753927 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.575829029 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.575850964 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.577418089 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.578268051 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.578356981 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.578380108 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.579288006 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.579309940 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.579391956 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.579410076 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.579473019 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.579844952 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.579874039 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.579909086 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.579945087 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.579999924 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.580142021 CEST	443	49778	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:36.580770016 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.580849886 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.580862999 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.582353115 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.582465887 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.582525015 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.582665920 CEST	49776	443	192.168.2.16	142.250.9.101
Apr 18, 2024 00:34:36.582695961 CEST	443	49776	142.250.9.101	192.168.2.16
Apr 18, 2024 00:34:36.583442926 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.583669901 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.583734989 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.583749056 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.585880041 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.585952044 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.585963964 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.587594032 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.587615013 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.587671041 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.587686062 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.587747097 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.589544058 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.589575052 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.589606047 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.589615107 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.589660883 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.591689110 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.591986895 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.593013048 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.593091965 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.593158007 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.594597101 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.594624043 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.594685078 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.594692945 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.594738007 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.595688105 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.595758915 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.595782042 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.597168922 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.598180056 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.598246098 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.598259926 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.599837065 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.599920034 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.599922895 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.599951029 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.599997997 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.600716114 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.600779057 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.600794077 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.602178097 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.603280067 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.603358984 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.603373051 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.604691982 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.604754925 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.604763031 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.605798006 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.605861902 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.605875969 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.607124090 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.607184887 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.607192039 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.608369112 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.608439922 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.608455896 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.609582901 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.609649897 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.609658003 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.610940933 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.611006021 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.611042976 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.612097979 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.612181902 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.612190008 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.613455057 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.613528967 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.613569975 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.614458084 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.614518881 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.614526033 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.616007090 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.616070986 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.616091967 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.616936922 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.616997004 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.617003918 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.618613005 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.618685961 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.618716002 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.619291067 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.619360924 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.619368076 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.620640993 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.620722055 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.620728970 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.621057987 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.621085882 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.621120930 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.621140957 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.621213913 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.623051882 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.623121977 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.623128891 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.623605967 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.624850035 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.624953032 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.624984026 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.625509977 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.625575066 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.625582933 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.627388000 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.627490044 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.627518892 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.627806902 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.627876043 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.627883911 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.629954100 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.630028963 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.630029917 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.630045891 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.630090952 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.630098104 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.632216930 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.632268906 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.632287979 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.632297993 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.632370949 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.632385969 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.634416103 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.634474039 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.634481907 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.634764910 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.634816885 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.634830952 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.636701107 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.636756897 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.636765003 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.637248993 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.637317896 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.637335062 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.638986111 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.639041901 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.639050961 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.639632940 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.639700890 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.639724016 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.641192913 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.641251087 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.641258955 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.642047882 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.642127037 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.642163038 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.643414974 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.643470049 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.643477917 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.644465923 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.644536018 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.644568920 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.645535946 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.645590067 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.645596981 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.646848917 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.646931887 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.646948099 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.648905993 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.648972988 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.648979902 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.649271011 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.649348974 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.649363041 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.650983095 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.651010990 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.651045084 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.651053905 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.651098013 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.651618958 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.651685953 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.651716948 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.653194904 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.654001951 CEST	443	49780	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.654232025 CEST	49780	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.654248953 CEST	443	49780	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.654707909 CEST	443	49780	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.655026913 CEST	49780	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.655123949 CEST	443	49780	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.655153036 CEST	49780	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.655245066 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.655272007 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.655316114 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.655322075 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.655335903 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.655363083 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.655384064 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.655392885 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.655416965 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.656007051 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.657377005 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.657433033 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.657479048 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.657485962 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.657608032 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.659486055 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.659535885 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.659543991 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.659904957 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.659941912 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.659960032 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.659976006 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.660032034 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.661669016 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.661726952 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.661735058 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.662273884 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.663604021 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.663655996 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.663664103 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.664575100 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.664609909 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.664658070 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.664689064 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.664752007 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.665571928 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.665622950 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.665631056 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.666862965 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.667587996 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.667644978 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.667651892 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.669159889 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.669190884 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.669229031 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.669285059 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.669361115 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.669394970 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.669440031 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.669447899 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.671257973 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.671317101 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.671324968 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.671494961 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.673646927 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.673675060 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.673708916 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.673738956 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.673799992 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.673830032 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.673866034 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.673871994 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.673877954 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.673918009 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.675627947 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.675854921 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.675981998 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.676048994 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.676206112 CEST	49774	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.676244020 CEST	443	49774	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.677308083 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.677340984 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.677361965 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.677367926 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.677407026 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.678920984 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.679369926 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:36.679402113 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:36.679461956 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:36.679738045 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:36.679754019 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:36.680486917 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.680520058 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.680545092 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.680552959 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.680597067 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.682046890 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.683725119 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.683758974 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.683784962 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.683792114 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.683834076 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.685151100 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.686691046 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.686728001 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.686753035 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.686763048 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.686803102 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.688141108 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.689650059 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.689682961 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.689726114 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.689733982 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.689776897 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.690979958 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.691029072 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.691086054 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.691092968 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.692485094 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.692555904 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.692564011 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.694504976 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.694536924 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.694577932 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.694583893 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.694626093 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.695894003 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.697315931 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.697348118 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.697375059 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.697381973 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.697427034 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.698682070 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.700014114 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.700041056 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.700067997 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.700076103 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.700114012 CEST	443	49780	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.700115919 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.701297998 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.702650070 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.702685118 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.702716112 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.702728033 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.702766895 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.703949928 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.704369068 CEST	49780	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.705241919 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.705276966 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.705363989 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.705377102 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.705432892 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.706573009 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.707796097 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.707827091 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.707870007 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.707880974 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.707930088 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.709034920 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.710248947 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.710280895 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.710316896 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.710324049 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.710517883 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.711467028 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.712198019 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.712258101 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.712272882 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.713367939 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.713432074 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.713440895 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.714579105 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.714638948 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.714646101 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.715728998 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.715787888 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.715795040 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.716948986 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.717009068 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.717017889 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.718055964 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.718122005 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.718135118 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.719182968 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.719248056 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.719259977 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.720390081 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.720446110 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.720458031 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.721462965 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.721529961 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.721543074 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.722577095 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.722645044 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.722657919 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.723752022 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.723817110 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.723829985 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.724817038 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.724880934 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.724894047 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.725970030 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.726039886 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.726054907 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.727570057 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.727606058 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.727638960 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.727653980 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.727727890 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.728754997 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.729873896 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.729902029 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.729948044 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.729960918 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.730030060 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.730856895 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.731944084 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.731976032 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.732009888 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.732023954 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.732089996 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.733028889 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.734105110 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.734133959 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.734165907 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.734179020 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.734244108 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.735188007 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.736166954 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.736213923 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.736267090 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.736279964 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.736378908 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.737194061 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.738182068 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.738212109 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.738250971 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.738262892 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.738322973 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.739212036 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.740252972 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.740289927 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.740325928 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.740339041 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.740398884 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.741189957 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.741713047 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.741775990 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.741787910 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.742706060 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.742773056 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.742786884 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.743714094 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.743779898 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.743792057 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.744702101 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.744764090 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.744776964 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.745661974 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.745728016 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.745740891 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.746644020 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.746711969 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.746723890 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.747589111 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.747656107 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.747668982 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.748600960 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.748670101 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.748682022 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.749522924 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.749589920 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.749602079 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.750497103 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.750562906 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.750575066 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.751429081 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.751496077 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.751508951 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.752351046 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.752420902 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.752433062 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.753278971 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.753362894 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.753376007 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.754275084 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.754357100 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.754370928 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.755122900 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.755188942 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.755201101 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.756091118 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.756177902 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.756192923 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.757044077 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.757108927 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.757121086 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.758095026 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.758162022 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.758173943 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.759320021 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.759391069 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.759403944 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.760319948 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.760385036 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.760397911 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.760631084 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.760689020 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.760703087 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.761557102 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.761620998 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.761635065 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.762856007 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.762887955 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.762923956 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.762938023 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.762993097 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.763745070 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.764767885 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.764831066 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.764836073 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.764852047 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.764909029 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.765505075 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.766443014 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.766469002 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.766535044 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.766549110 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.766628027 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.767255068 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.768126965 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.768146992 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.768198967 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.768213034 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.768270016 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.768984079 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.769851923 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.769885063 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.769918919 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.769932985 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.769989967 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.770720005 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.771512985 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.771543026 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.771579027 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.771594048 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.771651030 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.772402048 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.773248911 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.773267984 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.773310900 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.773324966 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.773387909 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.774061918 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.774914026 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.774938107 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.774980068 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.774993896 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.775047064 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.775774002 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.776588917 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.776617050 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.776654959 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.776669025 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.776743889 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.777419090 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.778197050 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.778244972 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.778281927 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.778295040 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.778361082 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.778995037 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.779850006 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.779870033 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.779916048 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.779930115 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.779987097 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.780662060 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.781459093 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.781563997 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.781579971 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.781871080 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.781929970 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.781944036 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.782701969 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.782766104 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.782778978 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.783462048 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.783525944 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.783540010 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.784328938 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.784410000 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.784423113 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.785090923 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.785161972 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.785176039 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.785888910 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.785959005 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.785972118 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.786680937 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.786782980 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.786797047 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.787482023 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.787549973 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.787564039 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.787623882 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.787683964 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.787867069 CEST	49773	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.787899971 CEST	443	49773	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.808409929 CEST	49783	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.808440924 CEST	443	49783	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.808511972 CEST	49783	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.808851004 CEST	49783	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.808864117 CEST	443	49783	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.810936928 CEST	49784	443	192.168.2.16	64.233.177.102
Apr 18, 2024 00:34:36.810973883 CEST	443	49784	64.233.177.102	192.168.2.16
Apr 18, 2024 00:34:36.811050892 CEST	49784	443	192.168.2.16	64.233.177.102
Apr 18, 2024 00:34:36.811301947 CEST	49784	443	192.168.2.16	64.233.177.102
Apr 18, 2024 00:34:36.811319113 CEST	443	49784	64.233.177.102	192.168.2.16
Apr 18, 2024 00:34:36.849185944 CEST	443	49778	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:36.849314928 CEST	443	49778	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:36.849379063 CEST	49778	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:36.849405050 CEST	443	49778	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:36.849531889 CEST	443	49778	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:36.849575996 CEST	49778	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:36.849582911 CEST	443	49778	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:36.856514931 CEST	443	49778	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:36.856574059 CEST	49778	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:36.856583118 CEST	443	49778	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:36.858339071 CEST	443	49778	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:36.858409882 CEST	49778	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:36.858474016 CEST	49778	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:36.858491898 CEST	443	49778	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:36.869940042 CEST	443	49780	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.870002985 CEST	443	49780	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.870065928 CEST	49780	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.870078087 CEST	443	49780	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.870174885 CEST	443	49780	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.870224953 CEST	49780	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.871454000 CEST	49780	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:36.871467113 CEST	443	49780	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:36.874664068 CEST	49785	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:36.874687910 CEST	443	49785	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:36.874763966 CEST	49785	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:36.875113964 CEST	49785	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:36.875128984 CEST	443	49785	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:36.892857075 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:36.893106937 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:36.893150091 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:36.893438101 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:36.893744946 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:36.893814087 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:36.893861055 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:36.940116882 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:36.944420099 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.025425911 CEST	443	49783	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.025650978 CEST	49783	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.025660038 CEST	443	49783	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.026117086 CEST	443	49783	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.026407003 CEST	49783	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.026493073 CEST	443	49783	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.026786089 CEST	49786	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.026832104 CEST	443	49786	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.026899099 CEST	49786	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.026925087 CEST	49787	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.026958942 CEST	443	49787	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.026997089 CEST	443	49784	64.233.177.102	192.168.2.16
Apr 18, 2024 00:34:37.027009010 CEST	49787	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.027079105 CEST	49788	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.027159929 CEST	443	49788	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.027194023 CEST	49789	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.027211905 CEST	443	49789	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.027216911 CEST	49788	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.027265072 CEST	49789	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.027342081 CEST	49790	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.027375937 CEST	443	49790	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.027432919 CEST	49790	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.027437925 CEST	49783	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.027473927 CEST	443	49783	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.027627945 CEST	49786	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.027647018 CEST	443	49786	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.027759075 CEST	49787	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.027784109 CEST	443	49787	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.027848005 CEST	49784	443	192.168.2.16	64.233.177.102
Apr 18, 2024 00:34:37.027859926 CEST	443	49784	64.233.177.102	192.168.2.16
Apr 18, 2024 00:34:37.027966022 CEST	49788	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.027987957 CEST	443	49788	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.028086901 CEST	49789	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.028096914 CEST	443	49789	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.028196096 CEST	49790	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.028213024 CEST	443	49790	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.028496981 CEST	443	49784	64.233.177.102	192.168.2.16
Apr 18, 2024 00:34:37.028578043 CEST	49784	443	192.168.2.16	64.233.177.102
Apr 18, 2024 00:34:37.029494047 CEST	443	49784	64.233.177.102	192.168.2.16
Apr 18, 2024 00:34:37.029551029 CEST	49784	443	192.168.2.16	64.233.177.102
Apr 18, 2024 00:34:37.030599117 CEST	49784	443	192.168.2.16	64.233.177.102
Apr 18, 2024 00:34:37.030689001 CEST	443	49784	64.233.177.102	192.168.2.16
Apr 18, 2024 00:34:37.030738115 CEST	49784	443	192.168.2.16	64.233.177.102
Apr 18, 2024 00:34:37.030761957 CEST	49784	443	192.168.2.16	64.233.177.102
Apr 18, 2024 00:34:37.030774117 CEST	443	49784	64.233.177.102	192.168.2.16
Apr 18, 2024 00:34:37.071379900 CEST	49784	443	192.168.2.16	64.233.177.102
Apr 18, 2024 00:34:37.095743895 CEST	443	49785	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.095959902 CEST	49785	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.095968008 CEST	443	49785	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.097115040 CEST	443	49785	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.097400904 CEST	49785	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.097574949 CEST	443	49785	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.097601891 CEST	49785	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.144123077 CEST	443	49785	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.151386976 CEST	49785	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.174633980 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.174670935 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.174727917 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.174787045 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.174787045 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.174833059 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.174909115 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.174963951 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.181759119 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.189062119 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.189080954 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.189131021 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.189162016 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.189302921 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.197002888 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.204143047 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.204204082 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.204217911 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.239386082 CEST	443	49783	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.239540100 CEST	443	49783	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.239602089 CEST	49783	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.240242004 CEST	49783	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.240257978 CEST	443	49783	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.241631031 CEST	443	49787	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.241882086 CEST	49787	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.241899014 CEST	443	49787	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.242363930 CEST	443	49787	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.242685080 CEST	49787	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.242826939 CEST	49787	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.242888927 CEST	443	49787	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.243048906 CEST	443	49788	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.243326902 CEST	49792	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.243375063 CEST	443	49792	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.243439913 CEST	49792	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.243482113 CEST	443	49786	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.243522882 CEST	49788	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.243534088 CEST	443	49788	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.243685007 CEST	49792	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.243696928 CEST	443	49792	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.243801117 CEST	49786	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.243858099 CEST	443	49786	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.244538069 CEST	443	49786	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.244801998 CEST	443	49788	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.244832993 CEST	49786	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.244889975 CEST	49788	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.244950056 CEST	49786	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.244952917 CEST	443	49786	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.245179892 CEST	49788	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.245242119 CEST	443	49788	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.245291948 CEST	49788	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.245312929 CEST	443	49788	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.245932102 CEST	443	49789	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.246129036 CEST	49789	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.246140003 CEST	443	49789	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.246373892 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.247570992 CEST	443	49789	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.247649908 CEST	49789	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.247899055 CEST	49789	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.247984886 CEST	443	49789	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.248002052 CEST	49789	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.248008013 CEST	443	49789	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.248337030 CEST	443	49790	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.248517036 CEST	49790	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.248533010 CEST	443	49790	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.249541044 CEST	443	49790	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.249596119 CEST	49790	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.249825954 CEST	49790	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.249876976 CEST	443	49790	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.249907017 CEST	49790	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.249912977 CEST	443	49790	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.263200045 CEST	443	49784	64.233.177.102	192.168.2.16
Apr 18, 2024 00:34:37.263669968 CEST	443	49784	64.233.177.102	192.168.2.16
Apr 18, 2024 00:34:37.263729095 CEST	49784	443	192.168.2.16	64.233.177.102
Apr 18, 2024 00:34:37.264209032 CEST	49784	443	192.168.2.16	64.233.177.102
Apr 18, 2024 00:34:37.264223099 CEST	443	49784	64.233.177.102	192.168.2.16
Apr 18, 2024 00:34:37.279298067 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.282860994 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.282886028 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.282916069 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.282932043 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.282970905 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.288130045 CEST	443	49786	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.290148020 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.293365002 CEST	49790	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.293366909 CEST	49788	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.293378115 CEST	443	49790	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.293384075 CEST	49789	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.293389082 CEST	49787	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.293390036 CEST	49786	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.293395042 CEST	443	49788	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.293402910 CEST	443	49789	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.297431946 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.297473907 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.297489882 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.297499895 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.297539949 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.304832935 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.312016964 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.312057018 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.312073946 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.312088966 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.312129974 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.317847967 CEST	443	49785	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.317917109 CEST	443	49785	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.317965031 CEST	49785	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.317986965 CEST	443	49785	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.318092108 CEST	443	49785	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.318139076 CEST	49785	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.318584919 CEST	49785	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.318593979 CEST	443	49785	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.319339037 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.326145887 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.326181889 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.326209068 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.326227903 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.326291084 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.333111048 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.339770079 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.339798927 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.339828968 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.339839935 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.339884043 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.341365099 CEST	49790	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.341368914 CEST	49788	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.341820002 CEST	49789	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.346642971 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.353449106 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.353472948 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.353503942 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.353518963 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.353574991 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.360326052 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.367110014 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.367131948 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.367166042 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.367181063 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.367233038 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.374151945 CEST	49793	443	192.168.2.16	142.250.105.100
Apr 18, 2024 00:34:37.374182940 CEST	443	49793	142.250.105.100	192.168.2.16
Apr 18, 2024 00:34:37.374253035 CEST	49793	443	192.168.2.16	142.250.105.100
Apr 18, 2024 00:34:37.374443054 CEST	49793	443	192.168.2.16	142.250.105.100
Apr 18, 2024 00:34:37.374455929 CEST	443	49793	142.250.105.100	192.168.2.16
Apr 18, 2024 00:34:37.384382963 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.387204885 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.387237072 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.387273073 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.387295961 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.387352943 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.392468929 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.397480965 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.397507906 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.397548914 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.397566080 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.397615910 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.402240038 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.406970978 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.407022953 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.407027960 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.407042027 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.407093048 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.411698103 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.416480064 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.416528940 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.416557074 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.416572094 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.416620970 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.421878099 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.425930023 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.425954103 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.425992966 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.426002026 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.426045895 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.430708885 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.433135033 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.433192015 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.433201075 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.437819004 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.437849045 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.437880993 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.437890053 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.437939882 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.442550898 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.447422981 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.447448969 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.447487116 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.447501898 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.447654009 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.452053070 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.454359055 CEST	443	49787	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.454396009 CEST	443	49787	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.454458952 CEST	49787	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.454483032 CEST	443	49787	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.454524994 CEST	443	49787	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.454545021 CEST	49787	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.454560041 CEST	443	49787	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.454607010 CEST	49787	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.456845045 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.456873894 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.456908941 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.456923962 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.456979036 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.458333969 CEST	443	49792	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.458555937 CEST	49792	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.458569050 CEST	443	49792	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.459068060 CEST	443	49792	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.459316969 CEST	49792	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.459393024 CEST	443	49792	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.459430933 CEST	49792	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.461544037 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.461617947 CEST	443	49787	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.466111898 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.466142893 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.466228962 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.466242075 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.466294050 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.468913078 CEST	443	49787	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.468943119 CEST	443	49787	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.469001055 CEST	49787	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.469021082 CEST	443	49787	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.469080925 CEST	49787	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.470663071 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.471175909 CEST	443	49786	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.471246004 CEST	49786	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.471407890 CEST	443	49786	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.471467972 CEST	443	49786	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.471514940 CEST	49786	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.471848965 CEST	49786	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.471870899 CEST	443	49786	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.471883059 CEST	49786	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.471919060 CEST	49786	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.472763062 CEST	443	49789	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.472850084 CEST	443	49789	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.472903967 CEST	49789	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.473323107 CEST	49789	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.473337889 CEST	443	49789	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.473376036 CEST	49789	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.473395109 CEST	49789	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.473737955 CEST	443	49790	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.473925114 CEST	443	49790	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.473978996 CEST	49790	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.474185944 CEST	49790	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.474200010 CEST	443	49790	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.474210978 CEST	49790	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.474261999 CEST	49790	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.475094080 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.475172997 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.475186110 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.476212978 CEST	443	49787	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.479336977 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.479432106 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.479444981 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.482682943 CEST	443	49788	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.483556032 CEST	443	49787	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.483627081 CEST	49787	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.483627081 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.483637094 CEST	443	49787	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.483699083 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.483716965 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.489705086 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.489732027 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.489780903 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.489795923 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.489857912 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.490726948 CEST	443	49788	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.490788937 CEST	49788	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.491439104 CEST	49788	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.491450071 CEST	443	49788	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.493782997 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.493828058 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.493885040 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.493902922 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.494050980 CEST	49794	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.494071960 CEST	443	49794	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.494143963 CEST	49794	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.494352102 CEST	49794	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.494359970 CEST	443	49794	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.496705055 CEST	49795	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.496735096 CEST	443	49795	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.496813059 CEST	49795	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.497106075 CEST	49795	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.497123003 CEST	443	49795	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.497898102 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.497963905 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.497977018 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.499391079 CEST	49792	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.499398947 CEST	443	49792	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.500456095 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.500530958 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.500543118 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.502943993 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.503011942 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.503024101 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.505444050 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.505517960 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.505530119 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.507882118 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.507947922 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.507961035 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.510420084 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.510487080 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.510499001 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.512937069 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.513003111 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.513015985 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.515300989 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.515408993 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.515420914 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.517633915 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.517705917 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.517714024 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.520056009 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.520082951 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.520117044 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.520124912 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.520176888 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.522445917 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.523653984 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.523708105 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.523715973 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.525966883 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.526036024 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.526043892 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.528347015 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.528409958 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.528417110 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.530716896 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.530776978 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.530783892 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.531405926 CEST	49787	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.533063889 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.533127069 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.533135891 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.535320044 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.535382986 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.535391092 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.537599087 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.537673950 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.537681103 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.539824963 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.539882898 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.539891958 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.542068005 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.542121887 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.542129040 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.544336081 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.544397116 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.544404984 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.546556950 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.546614885 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.546622992 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.548707962 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.548778057 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.548790932 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.551881075 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.551908016 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.551951885 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.551968098 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.552032948 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.554003000 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.556118965 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.556169987 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.556185961 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.556202888 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.556253910 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.558151007 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.558334112 CEST	443	49787	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.560226917 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.560252905 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.560293913 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.560309887 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.560362101 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.562205076 CEST	443	49787	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.562236071 CEST	443	49787	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.562274933 CEST	49787	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.562290907 CEST	443	49787	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.562305927 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.562345982 CEST	49787	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.564315081 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.564363956 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.564384937 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.564399958 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.564450026 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.566334963 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.568360090 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.568378925 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.568423033 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.568438053 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.568490028 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.569277048 CEST	443	49787	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.570313931 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.570431948 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.570494890 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.570657015 CEST	49782	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.570683002 CEST	443	49782	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.576621056 CEST	443	49787	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.576685905 CEST	49787	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.576695919 CEST	443	49787	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.576709986 CEST	443	49787	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.576761961 CEST	49787	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.577017069 CEST	49787	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.577032089 CEST	443	49787	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.594393969 CEST	443	49793	142.250.105.100	192.168.2.16
Apr 18, 2024 00:34:37.594619036 CEST	49793	443	192.168.2.16	142.250.105.100
Apr 18, 2024 00:34:37.594645023 CEST	443	49793	142.250.105.100	192.168.2.16
Apr 18, 2024 00:34:37.595856905 CEST	443	49793	142.250.105.100	192.168.2.16
Apr 18, 2024 00:34:37.596046925 CEST	49793	443	192.168.2.16	142.250.105.100
Apr 18, 2024 00:34:37.598354101 CEST	443	49793	142.250.105.100	192.168.2.16
Apr 18, 2024 00:34:37.598423004 CEST	49793	443	192.168.2.16	142.250.105.100
Apr 18, 2024 00:34:37.598587990 CEST	49793	443	192.168.2.16	142.250.105.100
Apr 18, 2024 00:34:37.598706007 CEST	49793	443	192.168.2.16	142.250.105.100
Apr 18, 2024 00:34:37.598715067 CEST	443	49793	142.250.105.100	192.168.2.16
Apr 18, 2024 00:34:37.598766088 CEST	443	49793	142.250.105.100	192.168.2.16
Apr 18, 2024 00:34:37.643534899 CEST	49793	443	192.168.2.16	142.250.105.100
Apr 18, 2024 00:34:37.643558979 CEST	443	49793	142.250.105.100	192.168.2.16
Apr 18, 2024 00:34:37.683928967 CEST	443	49792	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.684127092 CEST	443	49792	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.684185028 CEST	49792	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.684676886 CEST	49792	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.684689045 CEST	443	49792	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.691406965 CEST	49793	443	192.168.2.16	142.250.105.100
Apr 18, 2024 00:34:37.707628965 CEST	443	49794	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.707868099 CEST	49794	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.707885027 CEST	443	49794	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.708400011 CEST	443	49794	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.708800077 CEST	49794	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.708911896 CEST	443	49794	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.708972931 CEST	49794	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.708992958 CEST	443	49794	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.709850073 CEST	443	49795	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.710042953 CEST	49795	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.710056067 CEST	443	49795	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.710483074 CEST	443	49795	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.710767984 CEST	49795	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.710827112 CEST	443	49795	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.711138010 CEST	49796	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.711169004 CEST	443	49796	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.711235046 CEST	49796	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.711292982 CEST	49797	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.711321115 CEST	443	49797	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.711380959 CEST	49797	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.711396933 CEST	49795	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.711421967 CEST	443	49795	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.711563110 CEST	49796	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.711577892 CEST	443	49796	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.711689949 CEST	49797	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.711700916 CEST	443	49797	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.755382061 CEST	49794	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.807204008 CEST	443	49793	142.250.105.100	192.168.2.16
Apr 18, 2024 00:34:37.807250977 CEST	443	49793	142.250.105.100	192.168.2.16
Apr 18, 2024 00:34:37.807308912 CEST	49793	443	192.168.2.16	142.250.105.100
Apr 18, 2024 00:34:37.807334900 CEST	443	49793	142.250.105.100	192.168.2.16
Apr 18, 2024 00:34:37.808274031 CEST	49793	443	192.168.2.16	142.250.105.100
Apr 18, 2024 00:34:37.808315992 CEST	443	49793	142.250.105.100	192.168.2.16
Apr 18, 2024 00:34:37.808376074 CEST	49793	443	192.168.2.16	142.250.105.100
Apr 18, 2024 00:34:37.926285982 CEST	443	49797	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.926534891 CEST	49797	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.926556110 CEST	443	49797	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.926846027 CEST	443	49796	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.927020073 CEST	49796	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.927037954 CEST	443	49796	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.927084923 CEST	443	49797	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.927378893 CEST	49797	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.927472115 CEST	443	49797	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.927511930 CEST	49797	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.927534103 CEST	443	49797	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.927544117 CEST	443	49796	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.927810907 CEST	49796	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.927889109 CEST	443	49796	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.927896976 CEST	49796	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.927951097 CEST	443	49796	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.934161901 CEST	443	49795	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.934232950 CEST	443	49795	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.934286118 CEST	49795	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.934645891 CEST	49795	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.934664965 CEST	443	49795	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:37.934689999 CEST	49795	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.934714079 CEST	49795	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.955404043 CEST	443	49794	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.964956999 CEST	443	49794	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.965020895 CEST	49794	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.966109991 CEST	49794	443	192.168.2.16	172.253.124.147
Apr 18, 2024 00:34:37.966120958 CEST	443	49794	172.253.124.147	192.168.2.16
Apr 18, 2024 00:34:37.976412058 CEST	49796	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:37.976413012 CEST	49797	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:38.083133936 CEST	49800	443	192.168.2.16	64.233.177.102
Apr 18, 2024 00:34:38.083169937 CEST	443	49800	64.233.177.102	192.168.2.16
Apr 18, 2024 00:34:38.083272934 CEST	49800	443	192.168.2.16	64.233.177.102
Apr 18, 2024 00:34:38.083549976 CEST	49800	443	192.168.2.16	64.233.177.102
Apr 18, 2024 00:34:38.083564043 CEST	443	49800	64.233.177.102	192.168.2.16
Apr 18, 2024 00:34:38.138571978 CEST	443	49797	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:38.138669014 CEST	443	49797	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:38.138730049 CEST	49797	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:38.138736963 CEST	443	49797	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:38.138746977 CEST	443	49797	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:38.138816118 CEST	49797	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:38.139698029 CEST	49797	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:38.139703989 CEST	443	49797	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:38.142838001 CEST	49801	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:38.142878056 CEST	443	49801	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:38.142975092 CEST	49801	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:38.143273115 CEST	49801	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:38.143290043 CEST	443	49801	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:38.150487900 CEST	443	49796	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:38.150595903 CEST	443	49796	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:38.150654078 CEST	49796	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:38.150940895 CEST	49796	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:38.150955915 CEST	443	49796	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:38.150964022 CEST	49796	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:38.151002884 CEST	49796	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:38.296796083 CEST	443	49800	64.233.177.102	192.168.2.16
Apr 18, 2024 00:34:38.297633886 CEST	49800	443	192.168.2.16	64.233.177.102
Apr 18, 2024 00:34:38.297647953 CEST	443	49800	64.233.177.102	192.168.2.16
Apr 18, 2024 00:34:38.298150063 CEST	443	49800	64.233.177.102	192.168.2.16
Apr 18, 2024 00:34:38.298223972 CEST	49800	443	192.168.2.16	64.233.177.102
Apr 18, 2024 00:34:38.299149990 CEST	443	49800	64.233.177.102	192.168.2.16
Apr 18, 2024 00:34:38.299201965 CEST	49800	443	192.168.2.16	64.233.177.102
Apr 18, 2024 00:34:38.309674978 CEST	49800	443	192.168.2.16	64.233.177.102
Apr 18, 2024 00:34:38.309760094 CEST	443	49800	64.233.177.102	192.168.2.16
Apr 18, 2024 00:34:38.309856892 CEST	49800	443	192.168.2.16	64.233.177.102
Apr 18, 2024 00:34:38.309871912 CEST	443	49800	64.233.177.102	192.168.2.16
Apr 18, 2024 00:34:38.356775999 CEST	443	49801	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:38.357040882 CEST	49801	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:38.357078075 CEST	443	49801	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:38.357537031 CEST	443	49801	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:38.357826948 CEST	49801	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:38.357917070 CEST	443	49801	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:38.357969046 CEST	49801	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:38.357990026 CEST	443	49801	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:38.359370947 CEST	49800	443	192.168.2.16	64.233.177.102
Apr 18, 2024 00:34:38.407386065 CEST	49801	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:38.513183117 CEST	443	49800	64.233.177.102	192.168.2.16
Apr 18, 2024 00:34:38.513577938 CEST	443	49800	64.233.177.102	192.168.2.16
Apr 18, 2024 00:34:38.513592005 CEST	49800	443	192.168.2.16	64.233.177.102
Apr 18, 2024 00:34:38.513613939 CEST	443	49800	64.233.177.102	192.168.2.16
Apr 18, 2024 00:34:38.513631105 CEST	49800	443	192.168.2.16	64.233.177.102
Apr 18, 2024 00:34:38.513659954 CEST	49800	443	192.168.2.16	64.233.177.102
Apr 18, 2024 00:34:38.514458895 CEST	49802	443	192.168.2.16	64.233.177.102
Apr 18, 2024 00:34:38.514488935 CEST	443	49802	64.233.177.102	192.168.2.16
Apr 18, 2024 00:34:38.514554977 CEST	49802	443	192.168.2.16	64.233.177.102
Apr 18, 2024 00:34:38.514962912 CEST	49802	443	192.168.2.16	64.233.177.102
Apr 18, 2024 00:34:38.514980078 CEST	443	49802	64.233.177.102	192.168.2.16
Apr 18, 2024 00:34:38.569231987 CEST	443	49801	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:38.569360971 CEST	443	49801	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:38.569428921 CEST	49801	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:38.569451094 CEST	443	49801	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:38.569463968 CEST	443	49801	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:38.569520950 CEST	49801	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:38.572901011 CEST	49801	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:38.572921038 CEST	443	49801	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:38.596365929 CEST	49803	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:38.596399069 CEST	443	49803	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:38.596461058 CEST	49803	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:38.597035885 CEST	49803	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:38.597052097 CEST	443	49803	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:38.701078892 CEST	49805	443	192.168.2.16	64.233.176.157
Apr 18, 2024 00:34:38.701164007 CEST	443	49805	64.233.176.157	192.168.2.16
Apr 18, 2024 00:34:38.701261997 CEST	49805	443	192.168.2.16	64.233.176.157
Apr 18, 2024 00:34:38.701452971 CEST	49805	443	192.168.2.16	64.233.176.157
Apr 18, 2024 00:34:38.701487064 CEST	443	49805	64.233.176.157	192.168.2.16
Apr 18, 2024 00:34:38.733387947 CEST	443	49802	64.233.177.102	192.168.2.16
Apr 18, 2024 00:34:38.733671904 CEST	49802	443	192.168.2.16	64.233.177.102
Apr 18, 2024 00:34:38.733709097 CEST	443	49802	64.233.177.102	192.168.2.16
Apr 18, 2024 00:34:38.734230995 CEST	443	49802	64.233.177.102	192.168.2.16
Apr 18, 2024 00:34:38.734540939 CEST	49802	443	192.168.2.16	64.233.177.102
Apr 18, 2024 00:34:38.734626055 CEST	443	49802	64.233.177.102	192.168.2.16
Apr 18, 2024 00:34:38.734667063 CEST	49802	443	192.168.2.16	64.233.177.102
Apr 18, 2024 00:34:38.734874964 CEST	49802	443	192.168.2.16	64.233.177.102
Apr 18, 2024 00:34:38.734893084 CEST	443	49802	64.233.177.102	192.168.2.16
Apr 18, 2024 00:34:38.809612036 CEST	443	49803	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:38.809922934 CEST	49803	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:38.809947014 CEST	443	49803	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:38.810236931 CEST	443	49803	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:38.810544968 CEST	49803	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:38.810596943 CEST	443	49803	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:38.810811996 CEST	49803	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:38.810832024 CEST	443	49803	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:38.917314053 CEST	443	49805	64.233.176.157	192.168.2.16
Apr 18, 2024 00:34:38.917671919 CEST	49805	443	192.168.2.16	64.233.176.157
Apr 18, 2024 00:34:38.917691946 CEST	443	49805	64.233.176.157	192.168.2.16
Apr 18, 2024 00:34:38.918206930 CEST	443	49805	64.233.176.157	192.168.2.16
Apr 18, 2024 00:34:38.918354034 CEST	49805	443	192.168.2.16	64.233.176.157
Apr 18, 2024 00:34:38.919209003 CEST	443	49805	64.233.176.157	192.168.2.16
Apr 18, 2024 00:34:38.919274092 CEST	49805	443	192.168.2.16	64.233.176.157
Apr 18, 2024 00:34:38.920397997 CEST	49805	443	192.168.2.16	64.233.176.157
Apr 18, 2024 00:34:38.920479059 CEST	443	49805	64.233.176.157	192.168.2.16
Apr 18, 2024 00:34:38.920553923 CEST	49805	443	192.168.2.16	64.233.176.157
Apr 18, 2024 00:34:38.920562029 CEST	443	49805	64.233.176.157	192.168.2.16
Apr 18, 2024 00:34:38.961411953 CEST	49805	443	192.168.2.16	64.233.176.157
Apr 18, 2024 00:34:38.968983889 CEST	443	49802	64.233.177.102	192.168.2.16
Apr 18, 2024 00:34:38.969299078 CEST	443	49802	64.233.177.102	192.168.2.16
Apr 18, 2024 00:34:38.969386101 CEST	49802	443	192.168.2.16	64.233.177.102
Apr 18, 2024 00:34:38.970204115 CEST	49802	443	192.168.2.16	64.233.177.102
Apr 18, 2024 00:34:38.970221996 CEST	443	49802	64.233.177.102	192.168.2.16
Apr 18, 2024 00:34:38.972981930 CEST	49806	443	192.168.2.16	142.250.105.100
Apr 18, 2024 00:34:38.973046064 CEST	443	49806	142.250.105.100	192.168.2.16
Apr 18, 2024 00:34:38.973139048 CEST	49806	443	192.168.2.16	142.250.105.100
Apr 18, 2024 00:34:38.973381042 CEST	49806	443	192.168.2.16	142.250.105.100
Apr 18, 2024 00:34:38.973402977 CEST	443	49806	142.250.105.100	192.168.2.16
Apr 18, 2024 00:34:39.034677982 CEST	443	49803	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:39.034868002 CEST	443	49803	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:39.034930944 CEST	49803	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:39.035345078 CEST	49803	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:39.035362959 CEST	443	49803	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:39.035372019 CEST	49803	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:39.035423040 CEST	49803	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:39.133191109 CEST	443	49805	64.233.176.157	192.168.2.16
Apr 18, 2024 00:34:39.133295059 CEST	443	49805	64.233.176.157	192.168.2.16
Apr 18, 2024 00:34:39.133407116 CEST	49805	443	192.168.2.16	64.233.176.157
Apr 18, 2024 00:34:39.133951902 CEST	49805	443	192.168.2.16	64.233.176.157
Apr 18, 2024 00:34:39.133972883 CEST	443	49805	64.233.176.157	192.168.2.16
Apr 18, 2024 00:34:39.133985043 CEST	49805	443	192.168.2.16	64.233.176.157
Apr 18, 2024 00:34:39.134021997 CEST	49805	443	192.168.2.16	64.233.176.157
Apr 18, 2024 00:34:39.189866066 CEST	443	49806	142.250.105.100	192.168.2.16
Apr 18, 2024 00:34:39.190160036 CEST	49806	443	192.168.2.16	142.250.105.100
Apr 18, 2024 00:34:39.190177917 CEST	443	49806	142.250.105.100	192.168.2.16
Apr 18, 2024 00:34:39.190685034 CEST	443	49806	142.250.105.100	192.168.2.16
Apr 18, 2024 00:34:39.190752983 CEST	49806	443	192.168.2.16	142.250.105.100
Apr 18, 2024 00:34:39.191696882 CEST	443	49806	142.250.105.100	192.168.2.16
Apr 18, 2024 00:34:39.191790104 CEST	49806	443	192.168.2.16	142.250.105.100
Apr 18, 2024 00:34:39.191960096 CEST	49806	443	192.168.2.16	142.250.105.100
Apr 18, 2024 00:34:39.192023993 CEST	443	49806	142.250.105.100	192.168.2.16
Apr 18, 2024 00:34:39.192090988 CEST	49806	443	192.168.2.16	142.250.105.100
Apr 18, 2024 00:34:39.192097902 CEST	443	49806	142.250.105.100	192.168.2.16
Apr 18, 2024 00:34:39.247421980 CEST	49806	443	192.168.2.16	142.250.105.100
Apr 18, 2024 00:34:39.404366970 CEST	443	49806	142.250.105.100	192.168.2.16
Apr 18, 2024 00:34:39.404407024 CEST	443	49806	142.250.105.100	192.168.2.16
Apr 18, 2024 00:34:39.404467106 CEST	49806	443	192.168.2.16	142.250.105.100
Apr 18, 2024 00:34:39.404479980 CEST	443	49806	142.250.105.100	192.168.2.16
Apr 18, 2024 00:34:39.405189991 CEST	49806	443	192.168.2.16	142.250.105.100
Apr 18, 2024 00:34:39.405232906 CEST	443	49806	142.250.105.100	192.168.2.16
Apr 18, 2024 00:34:39.405287981 CEST	49806	443	192.168.2.16	142.250.105.100
Apr 18, 2024 00:34:42.564042091 CEST	49809	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:42.564090014 CEST	443	49809	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:42.564187050 CEST	49809	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:42.564426899 CEST	49809	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:42.564455032 CEST	443	49809	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:42.779481888 CEST	443	49809	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:42.779835939 CEST	49809	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:42.779860020 CEST	443	49809	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:42.780340910 CEST	443	49809	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:42.780730009 CEST	49809	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:42.780812025 CEST	443	49809	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:42.780970097 CEST	49809	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:42.781002998 CEST	443	49809	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:43.007878065 CEST	443	49809	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:43.008086920 CEST	443	49809	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:43.008156061 CEST	49809	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:43.008371115 CEST	49809	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:43.008389950 CEST	443	49809	74.125.138.147	192.168.2.16
Apr 18, 2024 00:34:43.008399010 CEST	49809	443	192.168.2.16	74.125.138.147
Apr 18, 2024 00:34:43.008435965 CEST	49809	443	192.168.2.16	74.125.138.147

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 18, 2024 00:32:48.800571918 CEST	64623	53	192.168.2.16	1.1.1.1
Apr 18, 2024 00:32:48.800772905 CEST	59288	53	192.168.2.16	1.1.1.1
Apr 18, 2024 00:32:48.922249079 CEST	53	64324	1.1.1.1	192.168.2.16
Apr 18, 2024 00:32:48.934597969 CEST	53	52453	1.1.1.1	192.168.2.16
Apr 18, 2024 00:32:49.131196022 CEST	53	64623	1.1.1.1	192.168.2.16
Apr 18, 2024 00:32:49.135468006 CEST	53	59288	1.1.1.1	192.168.2.16
Apr 18, 2024 00:32:49.382905006 CEST	59888	53	192.168.2.16	1.1.1.1
Apr 18, 2024 00:32:49.383054018 CEST	64259	53	192.168.2.16	1.1.1.1
Apr 18, 2024 00:32:49.489104986 CEST	53	59888	1.1.1.1	192.168.2.16
Apr 18, 2024 00:32:49.489468098 CEST	53	64259	1.1.1.1	192.168.2.16
Apr 18, 2024 00:32:49.536176920 CEST	53	57639	1.1.1.1	192.168.2.16
Apr 18, 2024 00:32:50.188762903 CEST	63016	53	192.168.2.16	1.1.1.1
Apr 18, 2024 00:32:50.188909054 CEST	55671	53	192.168.2.16	1.1.1.1
Apr 18, 2024 00:32:50.292896986 CEST	53	55671	1.1.1.1	192.168.2.16
Apr 18, 2024 00:32:50.292983055 CEST	53	63016	1.1.1.1	192.168.2.16
Apr 18, 2024 00:32:51.303945065 CEST	53	51645	1.1.1.1	192.168.2.16
Apr 18, 2024 00:32:52.520150900 CEST	53	60082	1.1.1.1	192.168.2.16
Apr 18, 2024 00:32:53.707036018 CEST	53	61394	1.1.1.1	192.168.2.16
Apr 18, 2024 00:32:54.157120943 CEST	53	59185	1.1.1.1	192.168.2.16
Apr 18, 2024 00:32:54.626487970 CEST	63877	53	192.168.2.16	1.1.1.1
Apr 18, 2024 00:32:54.626650095 CEST	57067	53	192.168.2.16	1.1.1.1
Apr 18, 2024 00:32:54.730559111 CEST	53	63877	1.1.1.1	192.168.2.16
Apr 18, 2024 00:32:54.731118917 CEST	53	57067	1.1.1.1	192.168.2.16
Apr 18, 2024 00:33:06.519638062 CEST	53	62540	1.1.1.1	192.168.2.16
Apr 18, 2024 00:33:25.480673075 CEST	53	60235	1.1.1.1	192.168.2.16
Apr 18, 2024 00:33:48.095758915 CEST	53	58463	1.1.1.1	192.168.2.16
Apr 18, 2024 00:33:48.866658926 CEST	53	51489	1.1.1.1	192.168.2.16
Apr 18, 2024 00:33:55.083937883 CEST	138	138	192.168.2.16	192.168.2.255
Apr 18, 2024 00:34:12.569884062 CEST	53	59219	1.1.1.1	192.168.2.16
Apr 18, 2024 00:34:12.591140032 CEST	53	54451	1.1.1.1	192.168.2.16
Apr 18, 2024 00:34:13.109667063 CEST	53	53500	1.1.1.1	192.168.2.16
Apr 18, 2024 00:34:16.739727974 CEST	53	59593	1.1.1.1	192.168.2.16
Apr 18, 2024 00:34:32.074477911 CEST	50620	53	192.168.2.16	1.1.1.1
Apr 18, 2024 00:34:32.074630976 CEST	53022	53	192.168.2.16	1.1.1.1
Apr 18, 2024 00:34:32.180118084 CEST	53	50620	1.1.1.1	192.168.2.16
Apr 18, 2024 00:34:32.180550098 CEST	53	53022	1.1.1.1	192.168.2.16
Apr 18, 2024 00:34:35.647106886 CEST	53	50171	1.1.1.1	192.168.2.16
Apr 18, 2024 00:34:35.695626974 CEST	55433	53	192.168.2.16	1.1.1.1
Apr 18, 2024 00:34:35.695780039 CEST	59574	53	192.168.2.16	1.1.1.1
Apr 18, 2024 00:34:35.700546980 CEST	62749	53	192.168.2.16	1.1.1.1
Apr 18, 2024 00:34:35.700722933 CEST	59948	53	192.168.2.16	1.1.1.1
Apr 18, 2024 00:34:35.801063061 CEST	53	55433	1.1.1.1	192.168.2.16
Apr 18, 2024 00:34:35.802171946 CEST	53	59574	1.1.1.1	192.168.2.16
Apr 18, 2024 00:34:35.805911064 CEST	53	62749	1.1.1.1	192.168.2.16
Apr 18, 2024 00:34:35.808020115 CEST	53	59948	1.1.1.1	192.168.2.16
Apr 18, 2024 00:34:36.398268938 CEST	53	55116	1.1.1.1	192.168.2.16
Apr 18, 2024 00:34:36.705146074 CEST	62818	53	192.168.2.16	1.1.1.1
Apr 18, 2024 00:34:36.705528021 CEST	50120	53	192.168.2.16	1.1.1.1
Apr 18, 2024 00:34:36.809873104 CEST	53	62818	1.1.1.1	192.168.2.16
Apr 18, 2024 00:34:36.810461044 CEST	53	50120	1.1.1.1	192.168.2.16
Apr 18, 2024 00:34:37.267796040 CEST	59975	53	192.168.2.16	1.1.1.1
Apr 18, 2024 00:34:37.268115997 CEST	62335	53	192.168.2.16	1.1.1.1
Apr 18, 2024 00:34:37.372564077 CEST	53	59975	1.1.1.1	192.168.2.16
Apr 18, 2024 00:34:37.373753071 CEST	53	62335	1.1.1.1	192.168.2.16
Apr 18, 2024 00:34:38.595664978 CEST	65181	53	192.168.2.16	1.1.1.1
Apr 18, 2024 00:34:38.595909119 CEST	57138	53	192.168.2.16	1.1.1.1
Apr 18, 2024 00:34:38.700292110 CEST	53	65181	1.1.1.1	192.168.2.16
Apr 18, 2024 00:34:38.700577974 CEST	53	57138	1.1.1.1	192.168.2.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 18, 2024 00:32:48.800571918 CEST	192.168.2.16	1.1.1.1	0xea1d	Standard query (0)	makeupenumerate.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:32:48.800772905 CEST	192.168.2.16	1.1.1.1	0x957d	Standard query (0)	makeupenumerate.com	65	IN (0x0001)	false
Apr 18, 2024 00:32:49.382905006 CEST	192.168.2.16	1.1.1.1	0xd82f	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:32:49.383054018 CEST	192.168.2.16	1.1.1.1	0x8a52	Standard query (0)	google.com	65	IN (0x0001)	false
Apr 18, 2024 00:32:50.188762903 CEST	192.168.2.16	1.1.1.1	0x4dd4	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:32:50.188909054 CEST	192.168.2.16	1.1.1.1	0x9c06	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 18, 2024 00:32:54.626487970 CEST	192.168.2.16	1.1.1.1	0xee14	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:32:54.626650095 CEST	192.168.2.16	1.1.1.1	0x40f9	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 18, 2024 00:34:32.074477911 CEST	192.168.2.16	1.1.1.1	0x1bb2	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:32.074630976 CEST	192.168.2.16	1.1.1.1	0x26ce	Standard query (0)	google.com	65	IN (0x0001)	false
Apr 18, 2024 00:34:35.695626974 CEST	192.168.2.16	1.1.1.1	0xc43d	Standard query (0)	ogs.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:35.695780039 CEST	192.168.2.16	1.1.1.1	0x132b	Standard query (0)	ogs.google.com	65	IN (0x0001)	false
Apr 18, 2024 00:34:35.700546980 CEST	192.168.2.16	1.1.1.1	0x4881	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:35.700722933 CEST	192.168.2.16	1.1.1.1	0xc806	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Apr 18, 2024 00:34:36.705146074 CEST	192.168.2.16	1.1.1.1	0xd529	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:36.705528021 CEST	192.168.2.16	1.1.1.1	0x705c	Standard query (0)	play.google.com	65	IN (0x0001)	false
Apr 18, 2024 00:34:37.267796040 CEST	192.168.2.16	1.1.1.1	0xf4f7	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:37.268115997 CEST	192.168.2.16	1.1.1.1	0x1d1c	Standard query (0)	play.google.com	65	IN (0x0001)	false
Apr 18, 2024 00:34:38.595664978 CEST	192.168.2.16	1.1.1.1	0xedcd	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:38.595909119 CEST	192.168.2.16	1.1.1.1	0x5f78	Standard query (0)	adservice.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 18, 2024 00:32:49.131196022 CEST	1.1.1.1	192.168.2.16	0xea1d	No error (0)	makeupenumerate.com		172.240.108.76	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:32:49.131196022 CEST	1.1.1.1	192.168.2.16	0xea1d	No error (0)	makeupenumerate.com		192.243.59.20	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:32:49.131196022 CEST	1.1.1.1	192.168.2.16	0xea1d	No error (0)	makeupenumerate.com		172.240.253.132	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:32:49.131196022 CEST	1.1.1.1	192.168.2.16	0xea1d	No error (0)	makeupenumerate.com		192.243.61.225	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:32:49.131196022 CEST	1.1.1.1	192.168.2.16	0xea1d	No error (0)	makeupenumerate.com		192.243.61.227	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:32:49.131196022 CEST	1.1.1.1	192.168.2.16	0xea1d	No error (0)	makeupenumerate.com		192.243.59.13	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:32:49.131196022 CEST	1.1.1.1	192.168.2.16	0xea1d	No error (0)	makeupenumerate.com		172.240.108.84	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:32:49.131196022 CEST	1.1.1.1	192.168.2.16	0xea1d	No error (0)	makeupenumerate.com		192.243.59.12	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:32:49.131196022 CEST	1.1.1.1	192.168.2.16	0xea1d	No error (0)	makeupenumerate.com		172.240.108.68	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:32:49.131196022 CEST	1.1.1.1	192.168.2.16	0xea1d	No error (0)	makeupenumerate.com		172.240.127.234	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:32:49.489104986 CEST	1.1.1.1	192.168.2.16	0xd82f	No error (0)	google.com		74.125.136.101	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:32:49.489104986 CEST	1.1.1.1	192.168.2.16	0xd82f	No error (0)	google.com		74.125.136.100	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:32:49.489104986 CEST	1.1.1.1	192.168.2.16	0xd82f	No error (0)	google.com		74.125.136.102	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:32:49.489104986 CEST	1.1.1.1	192.168.2.16	0xd82f	No error (0)	google.com		74.125.136.113	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:32:49.489104986 CEST	1.1.1.1	192.168.2.16	0xd82f	No error (0)	google.com		74.125.136.138	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:32:49.489104986 CEST	1.1.1.1	192.168.2.16	0xd82f	No error (0)	google.com		74.125.136.139	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:32:49.489468098 CEST	1.1.1.1	192.168.2.16	0x8a52	No error (0)	google.com			65	IN (0x0001)	false
Apr 18, 2024 00:32:50.292896986 CEST	1.1.1.1	192.168.2.16	0x9c06	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 18, 2024 00:32:50.292983055 CEST	1.1.1.1	192.168.2.16	0x4dd4	No error (0)	www.google.com		74.125.138.147	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:32:50.292983055 CEST	1.1.1.1	192.168.2.16	0x4dd4	No error (0)	www.google.com		74.125.138.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:32:50.292983055 CEST	1.1.1.1	192.168.2.16	0x4dd4	No error (0)	www.google.com		74.125.138.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:32:50.292983055 CEST	1.1.1.1	192.168.2.16	0x4dd4	No error (0)	www.google.com		74.125.138.106	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:32:50.292983055 CEST	1.1.1.1	192.168.2.16	0x4dd4	No error (0)	www.google.com		74.125.138.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:32:50.292983055 CEST	1.1.1.1	192.168.2.16	0x4dd4	No error (0)	www.google.com		74.125.138.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:32:54.730559111 CEST	1.1.1.1	192.168.2.16	0xee14	No error (0)	www.google.com		172.253.124.147	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:32:54.730559111 CEST	1.1.1.1	192.168.2.16	0xee14	No error (0)	www.google.com		172.253.124.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:32:54.730559111 CEST	1.1.1.1	192.168.2.16	0xee14	No error (0)	www.google.com		172.253.124.106	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:32:54.730559111 CEST	1.1.1.1	192.168.2.16	0xee14	No error (0)	www.google.com		172.253.124.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:32:54.730559111 CEST	1.1.1.1	192.168.2.16	0xee14	No error (0)	www.google.com		172.253.124.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:32:54.730559111 CEST	1.1.1.1	192.168.2.16	0xee14	No error (0)	www.google.com		172.253.124.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:32:54.731118917 CEST	1.1.1.1	192.168.2.16	0x40f9	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 18, 2024 00:34:32.180118084 CEST	1.1.1.1	192.168.2.16	0x1bb2	No error (0)	google.com		74.125.136.113	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:32.180118084 CEST	1.1.1.1	192.168.2.16	0x1bb2	No error (0)	google.com		74.125.136.138	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:32.180118084 CEST	1.1.1.1	192.168.2.16	0x1bb2	No error (0)	google.com		74.125.136.100	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:32.180118084 CEST	1.1.1.1	192.168.2.16	0x1bb2	No error (0)	google.com		74.125.136.101	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:32.180118084 CEST	1.1.1.1	192.168.2.16	0x1bb2	No error (0)	google.com		74.125.136.102	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:32.180118084 CEST	1.1.1.1	192.168.2.16	0x1bb2	No error (0)	google.com		74.125.136.139	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:32.180550098 CEST	1.1.1.1	192.168.2.16	0x26ce	No error (0)	google.com			65	IN (0x0001)	false
Apr 18, 2024 00:34:35.801063061 CEST	1.1.1.1	192.168.2.16	0xc43d	No error (0)	ogs.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 00:34:35.801063061 CEST	1.1.1.1	192.168.2.16	0xc43d	No error (0)	www3.l.google.com		172.217.215.101	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:35.801063061 CEST	1.1.1.1	192.168.2.16	0xc43d	No error (0)	www3.l.google.com		172.217.215.100	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:35.801063061 CEST	1.1.1.1	192.168.2.16	0xc43d	No error (0)	www3.l.google.com		172.217.215.139	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:35.801063061 CEST	1.1.1.1	192.168.2.16	0xc43d	No error (0)	www3.l.google.com		172.217.215.138	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:35.801063061 CEST	1.1.1.1	192.168.2.16	0xc43d	No error (0)	www3.l.google.com		172.217.215.102	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:35.801063061 CEST	1.1.1.1	192.168.2.16	0xc43d	No error (0)	www3.l.google.com		172.217.215.113	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:35.802171946 CEST	1.1.1.1	192.168.2.16	0x132b	No error (0)	ogs.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 00:34:35.805911064 CEST	1.1.1.1	192.168.2.16	0x4881	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 00:34:35.805911064 CEST	1.1.1.1	192.168.2.16	0x4881	No error (0)	plus.l.google.com		142.250.9.101	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:35.805911064 CEST	1.1.1.1	192.168.2.16	0x4881	No error (0)	plus.l.google.com		142.250.9.139	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:35.805911064 CEST	1.1.1.1	192.168.2.16	0x4881	No error (0)	plus.l.google.com		142.250.9.138	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:35.805911064 CEST	1.1.1.1	192.168.2.16	0x4881	No error (0)	plus.l.google.com		142.250.9.100	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:35.805911064 CEST	1.1.1.1	192.168.2.16	0x4881	No error (0)	plus.l.google.com		142.250.9.113	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:35.805911064 CEST	1.1.1.1	192.168.2.16	0x4881	No error (0)	plus.l.google.com		142.250.9.102	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:35.808020115 CEST	1.1.1.1	192.168.2.16	0xc806	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 00:34:36.809873104 CEST	1.1.1.1	192.168.2.16	0xd529	No error (0)	play.google.com		64.233.177.102	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:36.809873104 CEST	1.1.1.1	192.168.2.16	0xd529	No error (0)	play.google.com		64.233.177.138	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:36.809873104 CEST	1.1.1.1	192.168.2.16	0xd529	No error (0)	play.google.com		64.233.177.139	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:36.809873104 CEST	1.1.1.1	192.168.2.16	0xd529	No error (0)	play.google.com		64.233.177.113	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:36.809873104 CEST	1.1.1.1	192.168.2.16	0xd529	No error (0)	play.google.com		64.233.177.100	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:36.809873104 CEST	1.1.1.1	192.168.2.16	0xd529	No error (0)	play.google.com		64.233.177.101	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:37.372564077 CEST	1.1.1.1	192.168.2.16	0xf4f7	No error (0)	play.google.com		142.250.105.100	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:37.372564077 CEST	1.1.1.1	192.168.2.16	0xf4f7	No error (0)	play.google.com		142.250.105.102	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:37.372564077 CEST	1.1.1.1	192.168.2.16	0xf4f7	No error (0)	play.google.com		142.250.105.113	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:37.372564077 CEST	1.1.1.1	192.168.2.16	0xf4f7	No error (0)	play.google.com		142.250.105.138	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:37.372564077 CEST	1.1.1.1	192.168.2.16	0xf4f7	No error (0)	play.google.com		142.250.105.139	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:37.372564077 CEST	1.1.1.1	192.168.2.16	0xf4f7	No error (0)	play.google.com		142.250.105.101	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:38.700292110 CEST	1.1.1.1	192.168.2.16	0xedcd	No error (0)	adservice.google.com		64.233.176.157	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:38.700292110 CEST	1.1.1.1	192.168.2.16	0xedcd	No error (0)	adservice.google.com		64.233.176.154	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:38.700292110 CEST	1.1.1.1	192.168.2.16	0xedcd	No error (0)	adservice.google.com		64.233.176.156	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:38.700292110 CEST	1.1.1.1	192.168.2.16	0xedcd	No error (0)	adservice.google.com		64.233.176.155	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:34:38.700577974 CEST	1.1.1.1	192.168.2.16	0x5f78	No error (0)	adservice.google.com			65	IN (0x0001)	false

HTTP Request Dependency Graph

google.com

www.google.com

https:

ogs.google.com

apis.google.com

play.google.com

adservice.google.com

fs.microsoft.com

slscr.update.microsoft.com

makeupenumerate.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49703	172.240.108.76	80	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 18, 2024 00:32:49.257554054 CEST	434	OUT	GET / HTTP/1.1 Host: makeupenumerate.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 18, 2024 00:32:49.380263090 CEST	363	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.21.6 Date: Wed, 17 Apr 2024 22:32:49 GMT Content-Type: text/html Content-Length: 169 Connection: keep-alive Location: https://google.com Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache X-Request-ID: c4e0cc4d81e30d2da4eff93c3837afa1 Strict-Transport-Security: max-age=0; includeSubdomains
Apr 18, 2024 00:32:49.380275011 CEST	169	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.21.6</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49704	172.240.108.76	80	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 18, 2024 00:33:34.264086008 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49705	74.125.136.101	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:32:49 UTC	653	OUT	GET / HTTP/1.1 Host: google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:32:50 UTC	2158	IN	HTTP/1.1 302 Found Location: https://www.google.com/sorry/index?continue=https://google.com/&q=EgRRtTk0GJGcgbEGIjB9gZIilngADswQwHXor1YLbOOeBYuAYH92knL1CCi8WEjYnI0WU-XARvX0oE6qvSUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM x-hallmonitor-challenge: CgsIkpyBsQYQv9fcKxIEUbU5NA Content-Type: text/html; charset=UTF-8 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-JIKpsgAN1AgDzn5s6pRnzg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Wed, 17 Apr 2024 22:32:50 GMT Server: gws Content-Length: 394 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-04-17-22; expires=Fri, 17-May-2024 22:32:50 GMT; path=/; domain=.google.com; Secure; SameSite=none Set-Cookie: AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; expires=Mon, 14-Oct-2024 22:32:50 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax Set-Cookie: NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY; expires=Thu, 17-Oct-2024 22:32:49 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:32:50 UTC	394	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 6f 72 72 79 2f 69 6e 64 65 78 3f 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 26 61 6d 70 3b 71 3d 45 67 52 52 74 54 6b 30 47 4a 47 63 67 62 45 47 49 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/sorry/index?continue=https://google.com/&q=EgRRtTk0GJGcgbEGI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49706	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:32:50 UTC	1102	OUT	GET /sorry/index?continue=https://google.com/&q=EgRRtTk0GJGcgbEGIjB9gZIilngADswQwHXor1YLbOOeBYuAYH92knL1CCi8WEjYnI0WU-XARvX0oE6qvSUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1 Host: www.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
2024-04-17 22:32:50 UTC	356	IN	HTTP/1.1 429 Too Many Requests Date: Wed, 17 Apr 2024 22:32:50 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html Server: HTTP server (unknown) Content-Length: 3042 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:32:50 UTC	899	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 66 61 6d Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><meta name="viewport" content="initial-scale=1"><title>https://google.com/</title></head><body style="font-fam
2024-04-17 22:32:50 UTC	1255	IN	Data Raw: 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 61 70 74 63 68 61 2d 66 6f 72 6d 27 29 2e 73 75 62 6d 69 74 28 29 3b 7d 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 64 69 76 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 22 20 63 6c 61 73 73 3d 22 67 2d 72 65 63 61 70 74 63 68 61 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 36 4c 66 77 75 79 55 54 41 41 41 41 41 4f 41 6d 6f 53 30 66 64 71 69 6a 43 32 50 62 62 64 48 34 6b 6a 71 36 32 59 31 62 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 22 20 64 61 74 61 2d 73 3d 22 33 69 51 6d 4f 6f 51 78 6c 36 4a 47 6e 53 64 34 4b 54 30 48 57 39 72 54 67 55 66 63 6d 77 4f 6d 69 53 6d 61 44 48 78 41 6d 47 4b 73 5f 44 4e 52 57 72 78 46 6f 36 59 77 Data Ascii: ) {document.getElementById('captcha-form').submit();};</script><div id="recaptcha" class="g-recaptcha" data-sitekey="6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b" data-callback="submitCallback" data-s="3iQmOoQxl6JGnSd4KT0HW9rTgUfcmwOmiSmaDHxAmGKs_DNRWrxFo6Yw
2024-04-17 22:32:50 UTC	888	IN	Data Raw: 6d 20 79 6f 75 72 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 20 77 68 69 63 68 20 61 70 70 65 61 72 20 74 6f 20 62 65 20 69 6e 20 76 69 6f 6c 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 3c 61 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 6f 6c 69 63 69 65 73 2f 74 65 72 6d 73 2f 22 3e 54 65 72 6d 73 20 6f 66 20 53 65 72 76 69 63 65 3c 2f 61 3e 2e 20 54 68 65 20 62 6c 6f 63 6b 20 77 69 6c 6c 20 65 78 70 69 72 65 20 73 68 6f 72 74 6c 79 20 61 66 74 65 72 20 74 68 6f 73 65 20 72 65 71 75 65 73 74 73 20 73 74 6f 70 2e 20 20 49 6e 20 74 68 65 20 6d 65 61 6e 74 69 6d 65 2c 20 73 6f 6c 76 69 6e 67 20 74 68 65 20 61 62 6f 76 65 20 43 41 50 54 43 48 41 20 77 69 6c 6c 20 6c 65 74 20 79 6f 75 20 63 6f 6e 74 69 6e 75 65 20 74 6f 20 75 Data Ascii: m your computer network which appear to be in violation of the <a href="//www.google.com/policies/terms/">Terms of Service</a>. The block will expire shortly after those requests stop. In the meantime, solving the above CAPTCHA will let you continue to u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49707	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:32:50 UTC	1131	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/sorry/index?continue=https://google.com/&q=EgRRtTk0GJGcgbEGIjB9gZIilngADswQwHXor1YLbOOeBYuAYH92knL1CCi8WEjYnI0WU-XARvX0oE6qvSUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
2024-04-17 22:32:51 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Wed, 17 Apr 2024 22:32:51 GMT Date: Wed, 17 Apr 2024 22:32:51 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-17 22:32:51 UTC	727	IN	Data Raw: 34 63 36 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 4c6/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-04-17 22:32:51 UTC	502	IN	Data Raw: 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 27 61 6e 6f 6e 79 6d 6f 75 73 27 3b 70 6f 2e 69 6e 74 65 67 72 69 74 79 3d 27 73 68 61 33 38 34 2d 41 32 33 36 4a 2f 5a 55 67 55 2b 30 2f 4f 36 62 2f Data Ascii: cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-A236J/ZUgU+0/O6b/
2024-04-17 22:32:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49710	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:32:52 UTC	1738	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=normal&s=3iQmOoQxl6JGnSd4KT0HW9rTgUfcmwOmiSmaDHxAmGKs_DNRWrxFo6YwPbDyhgnRHj2BTCkySoHbyw-yJRfqRSqmhn6oG_ysK_kejghKuZCMyNyV_bYgrJ5XBClKeOsCfET5sLT20Qm7rEBZz2Xw57s8bc9BxWL9ydupkHoZx_tribj7aqktjbn73eSj6ABDxwRFszyvWkQeJRL38VzK-X6sbZ3xWEMDvfKlQS58Z804KT6MvHuUPaLAk3ZmmiyUQB3KZLmgnSQyLt4r9hPMJzGKgNzE5vQ&cb=b7ivx7j11it0 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.google.com/sorry/index?continue=https://google.com/&q=EgRRtTk0GJGcgbEGIjB9gZIilngADswQwHXor1YLbOOeBYuAYH92knL1CCi8WEjYnI0WU-XARvX0oE6qvSUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
2024-04-17 22:32:52 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 17 Apr 2024 22:32:52 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-cUStgRheFdfGaCMcp7rftg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-17 22:32:52 UTC	364	IN	Data Raw: 32 61 64 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2ad1<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-17 22:32:52 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-17 22:32:52 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-17 22:32:52 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-17 22:32:52 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-17 22:32:52 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-17 22:32:52 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 63 55 53 74 67 52 68 65 46 64 66 47 61 43 4d 63 70 37 72 66 74 67 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/styles__ltr.css"><script nonce="cUStgRheFdfGaCMcp7rftg" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-17 22:32:52 UTC	1255	IN	Data Raw: 4e 32 70 70 45 34 7a 61 39 58 6e 6f 56 58 46 36 41 5a 5f 56 7a 72 41 5a 43 6d 4d 79 38 61 4a 35 63 32 33 33 58 39 55 6d 78 4c 51 68 50 69 4e 32 4c 50 49 49 2d 31 50 4f 53 6f 73 38 63 70 4a 51 59 43 5a 62 48 64 52 56 6b 53 70 42 4b 6c 64 46 58 71 7a 54 66 67 7a 74 6b 59 64 4e 5a 53 4e 50 32 39 35 4b 69 4c 31 49 67 73 6e 47 71 46 48 37 54 51 6d 34 42 6a 52 52 6d 6c 52 5f 72 75 62 75 77 6e 47 51 65 72 76 4b 53 6a 50 51 48 59 55 45 36 6b 32 37 47 50 64 52 7a 4d 70 44 5f 76 56 33 63 67 54 7a 57 75 79 39 33 74 5a 38 36 4d 36 35 41 6f 4f 64 41 36 4c 36 54 75 7a 44 46 45 56 63 76 45 49 48 5a 52 74 38 35 69 54 68 31 56 58 37 47 38 70 4d 64 75 2d 46 4a 50 77 74 36 66 55 35 5f 32 38 62 75 6b 58 4d 65 65 4e 6e 42 48 34 39 36 4c 57 61 4b 6c 34 72 46 6a 51 66 53 69 39 Data Ascii: N2ppE4za9XnoVXF6AZ_VzrAZCmMy8aJ5c233X9UmxLQhPiN2LPII-1POSos8cpJQYCZbHdRVkSpBKldFXqzTfgztkYdNZSNP295KiL1IgsnGqFH7TQm4BjRRmlR_rubuwnGQervKSjPQHYUE6k27GPdRzMpD_vV3cgTzWuy93tZ86M65AoOdA6L6TuzDFEVcvEIHZRt85iTh1VX7G8pMdu-FJPwt6fU5_28bukXMeeNnBH496LWaKl4rFjQfSi9
2024-04-17 22:32:52 UTC	1255	IN	Data Raw: 36 42 51 69 4a 4d 58 2d 6b 59 55 79 79 54 56 39 70 53 6f 4e 6a 4d 65 4b 57 58 68 64 6d 44 63 53 51 6f 77 67 6c 34 35 4c 6c 65 44 55 69 76 53 50 55 49 4d 38 57 2d 49 76 57 78 45 6a 4a 69 41 58 4f 71 46 4e 39 78 75 46 6d 56 35 43 6c 64 46 2d 62 70 55 78 6d 36 4e 35 65 54 65 75 31 4c 51 2d 77 44 4e 67 69 6d 4b 55 5a 39 49 46 5a 31 68 48 42 46 38 57 71 53 48 61 36 38 74 57 48 4d 41 2d 43 31 71 61 4f 6d 44 56 6f 30 75 6c 2d 4f 46 68 68 66 36 6f 54 6f 63 41 6b 77 78 65 61 54 68 79 5a 31 36 72 43 53 30 30 79 6f 4d 74 63 4c 70 45 33 54 55 57 35 58 61 57 67 51 6f 73 6a 32 54 6a 37 58 4b 51 53 50 6a 6d 2d 42 5f 38 64 7a 35 35 5a 62 44 4e 63 65 51 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d Data Ascii: 6BQiJMX-kYUyyTV9pSoNjMeKWXhdmDcSQowgl45LleDUivSPUIM8W-IvWxEjJiAXOqFN9xuFmV5CldF-bpUxm6N5eTeu1LQ-wDNgimKUZ9IFZ1hHBF8WqSHa68tWHMA-C1qaOmDVo0ul-OFhhf6oTocAkwxeaThyZ16rCS00yoMtcLpE3TUW5XaWgQosj2Tj7XKQSPjm-B_8dz55ZbDNceQ"><script type="text/javascript" nonce=
2024-04-17 22:32:52 UTC	565	IN	Data Raw: 6c 4a 55 55 45 31 4d 6b 4e 6c 56 6c 45 32 65 6a 52 55 55 32 39 52 57 6d 56 78 56 46 5a 59 53 47 46 6e 65 56 6c 6b 61 48 46 57 4c 32 56 45 56 46 4e 6c 65 6c 56 72 63 58 45 30 53 6b 68 72 63 6b 70 6a 56 48 4e 48 52 44 6b 7a 57 6c 46 55 53 6d 5a 45 51 31 67 79 4d 57 56 78 61 58 4e 6d 5a 6b 4a 31 51 6b 46 42 52 33 68 7a 59 55 70 43 5a 55 68 35 56 45 74 55 65 6d 4a 35 59 32 4d 77 4e 55 4d 32 4f 44 51 79 65 55 4d 78 5a 30 49 35 5a 54 55 7a 52 46 49 35 4b 32 4a 79 62 58 5a 61 53 48 5a 33 4d 7a 4e 47 55 32 74 36 56 56 56 79 65 69 39 6a 4c 32 67 78 62 7a 49 76 54 44 67 30 63 47 52 4f 63 55 70 6c 52 48 46 70 65 45 4a 53 52 6e 5a 50 4f 54 64 44 56 6b 35 68 62 6c 5a 33 4f 48 42 74 56 54 5a 31 64 54 5a 31 55 7a 68 44 5a 55 55 7a 54 57 39 78 64 6d 31 4d 55 46 46 54 4f Data Ascii: lJUUE1MkNlVlE2ejRUU29RWmVxVFZYSGFneVlkaHFWL2VEVFNlelVrcXE0SkhrckpjVHNHRDkzWlFUSmZEQ1gyMWVxaXNmZkJ1QkFBR3hzYUpCZUh5VEtUemJ5Y2MwNUM2ODQyeUMxZ0I5ZTUzRFI5K2JybXZaSHZ3MzNGU2t6VVVyei9jL2gxbzIvTDg0cGROcUplRHFpeEJSRnZPOTdDVk5hblZ3OHBtVTZ1dTZ1UzhDZUUzTW9xdm1MUFFTO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49714	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:32:53 UTC	1457	OUT	GET /js/bg/rIjZlM8ZNfOeVQTojtt5OPuY9YnE0CAT82tG0V-YUX0.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=normal&s=3iQmOoQxl6JGnSd4KT0HW9rTgUfcmwOmiSmaDHxAmGKs_DNRWrxFo6YwPbDyhgnRHj2BTCkySoHbyw-yJRfqRSqmhn6oG_ysK_kejghKuZCMyNyV_bYgrJ5XBClKeOsCfET5sLT20Qm7rEBZz2Xw57s8bc9BxWL9ydupkHoZx_tribj7aqktjbn73eSj6ABDxwRFszyvWkQeJRL38VzK-X6sbZ3xWEMDvfKlQS58Z804KT6MvHuUPaLAk3ZmmiyUQB3KZLmgnSQyLt4r9hPMJzGKgNzE5vQ&cb=b7ivx7j11it0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
2024-04-17 22:32:53 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18291 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 17 Apr 2024 00:04:34 GMT Expires: Thu, 17 Apr 2025 00:04:34 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 04 Apr 2024 18:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 80899 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:32:53 UTC	444	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 4b 3d 66 75 6e 63 74 69 6f 6e 28 7a 2c 77 29 7b 69 66 28 21 28 77 3d 28 7a 3d 6e 75 6c 6c 2c 61 2e 74 72 75 73 74 65 64 54 79 70 65 73 29 2c 77 29 7c 7c 21 77 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 7a 3b 74 72 79 7b 7a 3d 77 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 6d 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 6d 2c 63 72 65 61 74 Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var a=this\|\|self,K=function(z,w){if(!(w=(z=null,a.trustedTypes),w)\|\|!w.createPolicy)return z;try{z=w.createPolicy("bg",{createHTML:m,createScript:m,creat
2024-04-17 22:32:53 UTC	1255	IN	Data Raw: 65 61 74 65 53 63 72 69 70 74 28 46 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 46 29 7b 72 65 74 75 72 6e 22 22 2b 46 7d 7d 28 61 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 5b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 27 2c 0a 27 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 69 73 3d 66 75 6e 63 74 69 6f 6e 28 7a 2c 77 29 7b 28 28 77 2e 70 75 73 68 28 7a 5b 30 5d 3c 3c 32 34 7c 7a 5b 31 5d 3c 3c 31 36 7c 7a 5b 32 5d 3c 3c 38 7c 7a 5b 33 5d 29 2c 77 29 2e 70 75 73 68 28 7a 5b 34 5d 3c 3c 32 34 7c 7a 5b 35 5d 3c 3c 31 36 7c 7a 5b 36 5d 3c 3c 38 7c 7a 5b 37 5d 29 2c 77 Data Ascii: eateScript(F)}:function(F){return""+F}}(a)(Array(7824Math.random()\|0).join("\n")+['(function(){/','',' SPDX-License-Identifier: Apache-2.0','*/','var is=function(z,w){((w.push(z[0]<<24\|z[1]<<16\|z[2]<<8\|z[3]),w).push(z[4]<<24\|z[5]<<16\|z[6]<<8\|z[7]),w
2024-04-17 22:32:53 UTC	1255	IN	Data Raw: 35 2c 61 3e 3e 3e 32 34 26 32 35 35 2c 61 3e 3e 3e 31 36 26 32 35 35 2c 61 3e 3e 3e 38 26 32 35 35 2c 61 3e 3e 3e 30 26 32 35 35 5d 7d 2c 73 36 3d 66 75 6e 63 74 69 6f 6e 28 7a 2c 77 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 74 68 69 73 2e 43 3d 74 68 69 73 2e 50 3d 74 68 69 73 2e 6e 3d 30 7d 72 65 74 75 72 6e 20 77 3d 28 61 2e 70 72 6f 74 6f 74 79 70 65 2e 4e 68 3d 28 61 2e 70 72 6f 74 6f 74 79 70 65 2e 62 50 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 74 68 69 73 2e 6e 3f 30 3a 4d 61 74 68 2e 73 71 72 74 28 74 68 69 73 2e 43 2f 74 68 69 73 2e 6e 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 6d 2c 71 29 7b 28 74 68 69 73 2e 50 2b 3d 28 71 3d 6d 2d 74 68 69 73 2e 50 2c 74 68 69 73 2e 6e 2b 2b 2c 71 29 2f 74 68 69 73 2e 6e 2c 74 68 69 73 Data Ascii: 5,a>>>24&255,a>>>16&255,a>>>8&255,a>>>0&255]},s6=function(z,w){function a(){this.C=this.P=this.n=0}return w=(a.prototype.Nh=(a.prototype.bP=function(){return 0===this.n?0:Math.sqrt(this.C/this.n)},function(m,q){(this.P+=(q=m-this.P,this.n++,q)/this.n,this
2024-04-17 22:32:53 UTC	1255	IN	Data Raw: 29 2c 4d 29 2e 52 3d 5b 5d 2c 7a 2e 5a 3d 3d 7a 3f 28 76 28 7a 29 7c 30 29 2d 31 3a 31 29 2c 42 28 7a 29 29 2c 30 29 3b 71 3c 77 3b 71 2b 2b 29 4d 2e 52 2e 70 75 73 68 28 42 28 7a 29 29 3b 66 6f 72 28 3b 77 2d 2d 3b 29 4d 2e 52 5b 77 5d 3d 47 28 7a 2c 4d 2e 52 5b 77 5d 29 3b 72 65 74 75 72 6e 28 4d 2e 6b 74 3d 47 28 7a 2c 61 29 2c 4d 29 2e 4f 4f 3d 47 28 7a 2c 6d 29 2c 4d 7d 2c 47 63 3d 66 75 6e 63 74 69 6f 6e 28 7a 2c 77 2c 61 2c 6d 2c 71 2c 4d 29 7b 69 66 28 21 77 2e 44 29 7b 77 2e 4b 2b 2b 3b 74 72 79 7b 66 6f 72 28 71 3d 28 61 3d 28 4d 3d 76 6f 69 64 20 30 2c 77 2e 57 29 2c 30 29 3b 2d 2d 7a 3b 29 74 72 79 7b 69 66 28 6d 3d 76 6f 69 64 20 30 2c 77 2e 47 29 4d 3d 4b 49 28 77 2c 77 2e 47 29 3b 65 6c 73 65 7b 69 66 28 71 3d 47 28 77 2c 36 34 29 2c 71 3e Data Ascii: ),M).R=[],z.Z==z?(v(z)\|0)-1:1),B(z)),0);q<w;q++)M.R.push(B(z));for(;w--;)M.R[w]=G(z,M.R[w]);return(M.kt=G(z,a),M).OO=G(z,m),M},Gc=function(z,w,a,m,q,M){if(!w.D){w.K++;try{for(q=(a=(M=void 0,w.W),0);--z;)try{if(m=void 0,w.G)M=KI(w,w.G);else{if(q=G(w,64),q>
2024-04-17 22:32:53 UTC	1255	IN	Data Raw: 2c 66 61 6c 73 65 2c 7a 29 2c 61 7d 2c 50 3d 7b 70 61 73 73 69 76 65 3a 74 72 75 65 2c 63 61 70 74 75 72 65 3a 74 72 75 65 7d 2c 79 4d 3d 66 75 6e 63 74 69 6f 6e 28 7a 2c 77 2c 61 2c 6d 29 7b 66 6f 72 28 3b 7a 2e 6c 2e 6c 65 6e 67 74 68 3b 29 7b 6d 3d 28 7a 2e 67 3d 6e 75 6c 6c 2c 7a 2e 6c 29 2e 70 6f 70 28 29 3b 74 72 79 7b 61 3d 62 73 28 7a 2c 6d 29 7d 63 61 74 63 68 28 71 29 7b 6e 28 7a 2c 71 29 7d 69 66 28 77 26 26 7a 2e 67 29 7b 77 3d 7a 2e 67 2c 77 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4f 28 7a 2c 74 72 75 65 2c 74 72 75 65 29 7d 29 3b 62 72 65 61 6b 7d 7d 72 65 74 75 72 6e 20 61 7d 2c 78 34 3d 66 75 6e 63 74 69 6f 6e 28 7a 2c 77 2c 61 2c 6d 2c 71 2c 4d 2c 74 29 7b 66 6f 72 28 4d 3d 28 7a 2e 64 31 3d 28 7a 2e 67 31 3d 61 57 28 7b 67 65 74 3a 66 75 6e Data Ascii: ,false,z),a},P={passive:true,capture:true},yM=function(z,w,a,m){for(;z.l.length;){m=(z.g=null,z.l).pop();try{a=bs(z,m)}catch(q){n(z,q)}if(w&&z.g){w=z.g,w(function(){O(z,true,true)});break}}return a},x4=function(z,w,a,m,q,M,t){for(M=(z.d1=(z.g1=aW({get:fun
2024-04-17 22:32:53 UTC	1255	IN	Data Raw: 29 29 2c 7a 29 2c 7a 29 2c 30 29 2c 7a 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 46 2c 4b 2c 79 29 7b 28 4b 3d 47 28 28 79 3d 30 21 3d 47 28 46 2c 28 79 3d 42 28 46 29 2c 4b 3d 42 28 46 29 2c 79 29 29 2c 46 29 2c 4b 29 2c 79 29 26 26 41 28 36 34 2c 46 2c 4b 29 7d 29 29 2c 30 29 2c 30 5d 29 2c 67 29 29 2c 7a 29 2c 66 75 6e 63 74 69 6f 6e 28 46 2c 4b 2c 79 2c 62 29 7b 21 44 28 74 72 75 65 2c 66 61 6c 73 65 2c 4b 2c 46 29 26 26 28 4b 3d 57 74 28 46 29 2c 79 3d 4b 2e 4f 4f 2c 62 3d 4b 2e 6b 74 2c 46 2e 5a 3d 3d 46 7c 7c 79 3d 3d 46 2e 48 5a 26 26 62 3d 3d 46 29 26 26 28 41 28 4b 2e 56 6f 2c 46 2c 79 2e 61 70 70 6c 79 28 62 2c 4b 2e 52 29 29 2c 46 2e 41 3d 46 2e 59 28 29 29 7d 29 2c 7a 29 2c 5b 5d 29 2c 66 75 6e 63 74 69 6f 6e Data Ascii: )),z),z),0),z),function(){}),function(F,K,y){(K=G((y=0!=G(F,(y=B(F),K=B(F),y)),F),K),y)&&A(64,F,K)})),0),0]),g)),z),function(F,K,y,b){!D(true,false,K,F)&&(K=Wt(F),y=K.OO,b=K.kt,F.Z==F\|\|y==F.HZ&&b==F)&&(A(K.Vo,F,y.apply(b,K.R)),F.A=F.Y())}),z),[]),function
2024-04-17 22:32:53 UTC	1255	IN	Data Raw: 28 46 2c 42 28 46 29 29 29 3b 49 28 62 2c 46 2c 66 75 6e 63 74 69 6f 6e 28 59 2c 5a 2c 78 2c 66 2c 72 29 7b 66 6f 72 28 72 3d 28 5a 3d 28 66 3d 5b 5d 2c 30 29 2c 5b 5d 29 3b 5a 3c 53 3b 5a 2b 2b 29 7b 69 66 28 21 28 78 3d 6c 5b 5a 5d 2c 57 5b 5a 5d 29 29 7b 66 6f 72 28 3b 78 3e 3d 66 2e 6c 65 6e 67 74 68 3b 29 66 2e 70 75 73 68 28 42 28 59 29 29 3b 78 3d 66 5b 78 5d 7d 72 2e 70 75 73 68 28 78 29 7d 59 2e 48 3d 55 36 28 28 59 2e 47 3d 55 36 28 64 2e 73 6c 69 63 65 28 29 2c 59 29 2c 72 29 2c 59 29 7d 29 7d 29 29 2c 7a 29 2e 50 5a 3d 30 2c 66 75 6e 63 74 69 6f 6e 28 46 2c 4b 2c 79 2c 62 29 7b 41 28 28 4b 3d 42 28 28 79 3d 28 62 3d 42 28 46 29 2c 42 29 28 46 29 2c 46 29 29 2c 4b 29 2c 46 2c 47 28 46 2c 62 29 7c 7c 47 28 46 2c 79 29 29 7d 29 29 2c 37 34 29 2c Data Ascii: (F,B(F)));I(b,F,function(Y,Z,x,f,r){for(r=(Z=(f=[],0),[]);Z<S;Z++){if(!(x=l[Z],W[Z])){for(;x>=f.length;)f.push(B(Y));x=f[x]}r.push(x)}Y.H=U6((Y.G=U6(d.slice(),Y),r),Y)})})),z).PZ=0,function(F,K,y,b){A((K=B((y=(b=B(F),B)(F),F)),K),F,G(F,b)\|\|G(F,y))})),74),
2024-04-17 22:32:53 UTC	1255	IN	Data Raw: 73 65 20 41 28 36 34 2c 46 2c 46 2e 57 29 7d 29 2c 7a 29 2c 66 75 6e 63 74 69 6f 6e 28 46 2c 4b 2c 79 2c 62 2c 57 2c 64 2c 6c 29 7b 66 6f 72 28 62 3d 28 6c 3d 28 57 3d 28 4b 3d 28 64 3d 42 28 46 29 2c 4d 78 28 46 29 29 2c 22 22 29 2c 47 28 46 2c 31 33 35 29 29 2c 6c 2e 6c 65 6e 67 74 68 29 2c 79 3d 30 3b 4b 2d 2d 3b 29 79 3d 28 28 79 7c 30 29 2b 28 4d 78 28 46 29 7c 30 29 29 25 62 2c 57 2b 3d 74 5b 6c 5b 79 5d 5d 3b 41 28 64 2c 46 2c 57 29 7d 29 2c 41 29 28 33 30 32 2c 7a 2c 30 29 2c 66 75 6e 63 74 69 6f 6e 28 46 29 7b 74 73 28 46 2c 31 29 7d 29 29 2c 7a 29 2c 7b 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 46 2c 4b 29 7b 28 46 3d 28 4b 3d 42 28 46 29 2c 47 28 46 2e 5a 2c 4b 29 29 2c 46 29 5b 30 5d 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 46 Data Ascii: se A(64,F,F.W)}),z),function(F,K,y,b,W,d,l){for(b=(l=(W=(K=(d=B(F),Mx(F)),""),G(F,135)),l.length),y=0;K--;)y=((y\|0)+(Mx(F)\|0))%b,W+=t[l[y]];A(d,F,W)}),A)(302,z,0),function(F){ts(F,1)})),z),{}),function(F,K){(F=(K=B(F),G(F.Z,K)),F)[0].removeEventListener(F
2024-04-17 22:32:53 UTC	1255	IN	Data Raw: 7a 2e 42 3d 74 72 75 65 29 2c 77 5b 34 5d 26 26 28 7a 2e 69 3d 74 72 75 65 29 2c 77 5b 35 5d 26 26 28 7a 2e 49 3d 74 72 75 65 29 2c 77 5b 36 5d 26 26 28 7a 2e 54 3d 74 72 75 65 29 2c 7a 2e 6a 28 77 29 3b 65 6c 73 65 20 69 66 28 71 3d 3d 6b 34 29 7a 2e 42 3d 74 72 75 65 2c 7a 2e 6a 28 77 29 3b 65 6c 73 65 20 69 66 28 71 3d 3d 63 74 29 7b 7a 2e 49 3d 74 72 75 65 3b 74 72 79 7b 66 6f 72 28 6d 3d 30 3b 6d 3c 7a 2e 46 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 74 72 79 7b 61 3d 7a 2e 46 5b 6d 5d 2c 61 5b 30 5d 5b 61 5b 31 5d 5d 28 61 5b 32 5d 29 7d 63 61 74 63 68 28 4d 29 7b 7d 7d 63 61 74 63 68 28 4d 29 7b 7d 28 30 2c 77 5b 31 5d 29 28 66 75 6e 63 74 69 6f 6e 28 4d 2c 74 29 7b 7a 2e 6f 73 28 4d 2c 74 72 75 65 2c 74 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 4d 29 7b 28 28 Data Ascii: z.B=true),w[4]&&(z.i=true),w[5]&&(z.I=true),w[6]&&(z.T=true),z.j(w);else if(q==k4)z.B=true,z.j(w);else if(q==ct){z.I=true;try{for(m=0;m<z.F.length;m++)try{a=z.F[m],a[0][a[1]](a[2])}catch(M){}}catch(M){}(0,w[1])(function(M,t){z.os(M,true,t)},function(M){((
2024-04-17 22:32:53 UTC	1255	IN	Data Raw: 5b 6d 5d 29 7d 2c 41 73 3d 66 75 6e 63 74 69 6f 6e 28 7a 2c 77 29 7b 69 66 28 28 77 3d 67 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 7a 3d 6e 75 6c 6c 2c 21 77 29 7c 7c 21 77 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 7a 3b 74 72 79 7b 7a 3d 77 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 53 45 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 53 45 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 53 45 7d 29 7d 63 61 74 63 68 28 61 29 7b 67 2e 63 6f 6e 73 6f 6c 65 26 26 67 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 61 2e 6d 65 73 73 61 67 65 29 7d 72 65 74 75 72 6e 20 7a 7d 2c 44 3d 66 75 6e 63 74 69 6f 6e 28 7a 2c 77 2c 61 2c 6d 2c 71 2c 4d 2c 74 2c 46 2c 4b 29 7b 69 66 28 28 28 28 74 3d 28 Data Ascii: [m])},As=function(z,w){if((w=g.trustedTypes,z=null,!w)\|\|!w.createPolicy)return z;try{z=w.createPolicy("bg",{createHTML:SE,createScript:SE,createScriptURL:SE})}catch(a){g.console&&g.console.error(a.message)}return z},D=function(z,w,a,m,q,M,t,F,K){if((((t=(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49716	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:32:53 UTC	1469	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=normal&s=3iQmOoQxl6JGnSd4KT0HW9rTgUfcmwOmiSmaDHxAmGKs_DNRWrxFo6YwPbDyhgnRHj2BTCkySoHbyw-yJRfqRSqmhn6oG_ysK_kejghKuZCMyNyV_bYgrJ5XBClKeOsCfET5sLT20Qm7rEBZz2Xw57s8bc9BxWL9ydupkHoZx_tribj7aqktjbn73eSj6ABDxwRFszyvWkQeJRL38VzK-X6sbZ3xWEMDvfKlQS58Z804KT6MvHuUPaLAk3ZmmiyUQB3KZLmgnSQyLt4r9hPMJzGKgNzE5vQ&cb=b7ivx7j11it0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
2024-04-17 22:32:54 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Wed, 17 Apr 2024 22:32:54 GMT Date: Wed, 17 Apr 2024 22:32:54 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-17 22:32:54 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js');
2024-04-17 22:32:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49721	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:32:54 UTC	1186	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/sorry/index?continue=https://google.com/&q=EgRRtTk0GJGcgbEGIjB9gZIilngADswQwHXor1YLbOOeBYuAYH92knL1CCi8WEjYnI0WU-XARvX0oE6qvSUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
2024-04-17 22:32:54 UTC	705	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 17 Apr 2024 21:38:04 GMT Expires: Thu, 25 Apr 2024 21:38:04 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 3290 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:32:54 UTC	550	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-04-17 22:32:54 UTC	1255	IN	Data Raw: ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 a6 75 ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff 0b be fb ff 05 bc fb ff b6 ec fe ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 aa 7b ff ff ff ff ff fd fd fd f9 fd fd fd db ff ff ff ff 35 c9 fc ff 0a b2 f9 ff 6b a4 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb Data Ascii: BBBBBuBBBBB{5k7R8F2Vb5C;I
2024-04-17 22:32:54 UTC	1255	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 fe fe fe 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 24 fd fd fd ea ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff eb f5 e7 ff 8f c6 7b ff 54 a9 36 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 7e be 67 ff dd ee d7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 ff ff ff 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd d3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c4 e1 b9 ff 5c ac 3e ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 Data Ascii: /${T6S4S4S4S4S4S4S4S4S4~g"\>S4S4S4S4S4S4S4S4S4S4S4S
2024-04-17 22:32:54 UTC	1255	IN	Data Raw: ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fa c8 aa ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBB}BBBBBBBBBBB}
2024-04-17 22:32:54 UTC	1115	IN	Data Raw: 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 81 8a f2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 0b fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b5 ba f7 ff 3e 4b eb ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 3f 4c eb ff ba bf f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 26 fd fd fd eb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: C5C5C5C5C5C5C5C5C5C5C5C5C5C>K5C5C5C5C5C5C5C5C5C5C5C5C?L&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49723	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:32:54 UTC	1375	OUT	GET /recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.google.com/sorry/index?continue=https://google.com/&q=EgRRtTk0GJGcgbEGIjB9gZIilngADswQwHXor1YLbOOeBYuAYH92knL1CCi8WEjYnI0WU-XARvX0oE6qvSUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
2024-04-17 22:32:54 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 17 Apr 2024 22:32:54 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-IWIthwoqNcXhP83z1hAG3g' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-17 22:32:54 UTC	364	IN	Data Raw: 31 64 31 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1d11<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-04-17 22:32:54 UTC	1255	IN	Data Raw: 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e Data Ascii: v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fon
2024-04-17 22:32:54 UTC	1255	IN	Data Raw: 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 Data Ascii: 20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E0
2024-04-17 22:32:54 UTC	1255	IN	Data Raw: 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b Data Ascii: U+04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-17 22:32:54 UTC	1255	IN	Data Raw: 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b Data Ascii: ce { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+
2024-04-17 22:32:54 UTC	1255	IN	Data Raw: 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 Data Ascii: tic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight
2024-04-17 22:32:54 UTC	810	IN	Data Raw: 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 49 57 49 74 68 77 6f 71 4e 63 58 68 50 38 33 7a 31 68 41 47 33 67 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f Data Ascii: }</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/styles__ltr.css"><script nonce="IWIthwoqNcXhP83z1hAG3g" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.co
2024-04-17 22:32:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49724	172.253.124.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:32:54 UTC	717	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
2024-04-17 22:32:55 UTC	707	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 12 Apr 2024 14:48:14 GMT Expires: Sat, 20 Apr 2024 14:48:14 GMT Cache-Control: public, max-age=691200 Age: 459881 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:32:55 UTC	548	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-04-17 22:32:55 UTC	1255	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 a6 75 ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff 0b be fb ff 05 bc fb ff b6 ec fe ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 aa 7b ff ff ff ff ff fd fd fd f9 fd fd fd db ff ff ff ff 35 c9 fc ff 0a b2 f9 ff 6b a4 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b Data Ascii: BBBBBuBBBBB{5k7R8F2Vb5C;
2024-04-17 22:32:55 UTC	1255	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 fe fe fe 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 24 fd fd fd ea ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff eb f5 e7 ff 8f c6 7b ff 54 a9 36 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 7e be 67 ff dd ee d7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 ff ff ff 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd d3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c4 e1 b9 ff 5c ac 3e ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff Data Ascii: /${T6S4S4S4S4S4S4S4S4S4~g"\>S4S4S4S4S4S4S4S4S4S4S4
2024-04-17 22:32:55 UTC	1255	IN	Data Raw: ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fa c8 aa ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBB}BBBBBBBBBBB}
2024-04-17 22:32:55 UTC	1117	IN	Data Raw: ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 81 8a f2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 0b fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b5 ba f7 ff 3e 4b eb ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 3f 4c eb ff ba bf f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 26 fd fd fd eb ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: 5C5C5C5C5C5C5C5C5C5C5C5C5C5C>K5C5C5C5C5C5C5C5C5C5C5C5C?L&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49726	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:32:58 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-17 22:32:58 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/079C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=30681 Date: Wed, 17 Apr 2024 22:32:58 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49727	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:32:58 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-17 22:32:59 UTC	804	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 52EA27DBDE0C4533B819423583F6692E Ref B: CH1AA2040902052 Ref C: 2023-07-09T23:10:08Z X-MSEdge-Ref: Ref A: 528BB8D443C042AA9AEA4EC3F75C7762 Ref B: CHI30EDGE0111 Ref C: 2023-07-09T23:11:11Z Content-Type: application/octet-stream X-Azure-Ref: 01uvbYwAAAACkqWtaEMjWQL/4cpisZkorTUVNMzBFREdFMDgxMQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=30617 Date: Wed, 17 Apr 2024 22:32:59 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-17 22:32:59 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49728	40.127.169.103	443

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:03 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=1ddwsw5A7NX36h3&MD=dTM7w9l7 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-17 22:33:03 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 363134b0-ccbf-4d51-b212-756e8a4f009a MS-RequestId: a584ba75-bdb0-447c-8aeb-eb70b2e93758 MS-CV: kD0TdOlFaEWLb9ND.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 17 Apr 2024 22:33:03 GMT Connection: close Content-Length: 24490
2024-04-17 22:33:03 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-04-17 22:33:03 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49729	40.127.169.103	443

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:33:40 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=1ddwsw5A7NX36h3&MD=dTM7w9l7 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-17 22:33:41 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: e09eca8e-7c5e-4b09-bb61-8c92bad7e6f5 MS-RequestId: be1456be-b8c6-49f4-b936-4e2a4323d786 MS-CV: ddaMd2eRkkKMisTg.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 17 Apr 2024 22:33:40 GMT Connection: close Content-Length: 25457
2024-04-17 22:33:41 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-04-17 22:33:41 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49732	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:12 UTC	1198	OUT	POST /recaptcha/api2/reload?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 7356 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
2024-04-17 22:34:12 UTC	7356	OUT	Data Raw: 0a 18 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 12 e4 10 30 33 41 46 63 57 65 41 35 5f 4a 57 64 6b 57 73 55 4b 48 70 4e 4a 70 6f 54 77 62 43 68 73 6c 2d 38 48 44 4b 6f 59 36 6f 70 68 50 73 6b 67 57 67 6c 71 38 73 6c 34 35 4f 44 76 5f 76 31 33 5f 6b 4a 57 44 65 31 4c 69 49 36 75 61 61 47 52 79 66 45 57 45 47 32 46 31 54 38 59 73 69 4e 72 42 7a 43 65 6d 71 37 35 58 4c 66 35 64 32 66 58 54 5f 62 75 63 46 4a 5f 68 66 63 59 78 4e 74 73 31 54 37 65 35 64 4f 37 6a 55 54 7a 65 48 55 4f 69 7a 65 56 77 41 67 66 4b 59 5f 6f 75 47 51 30 56 7a 6a 6d 64 63 37 67 4b 34 6e 4d 71 38 76 52 35 53 72 4e 32 43 76 69 64 73 47 58 43 72 32 43 71 4b 31 6b 77 76 58 79 77 6d 41 37 46 38 4f 71 70 46 4a 30 73 36 62 2d 69 2d 4b 6f 48 76 2d 42 61 48 2d 6d Data Ascii: QoukH5jSO3sKFzVEA7Vc8VgC03AFcWeA5_JWdkWsUKHpNJpoTwbChsl-8HDKoY6ophPskgWglq8sl45ODv_v13_kJWDe1LiI6uaaGRyfEWEG2F1T8YsiNrBzCemq75XLf5d2fXT_bucFJ_hfcYxNts1T7e5dO7jUTzeHUOizeVwAgfKY_ouGQ0Vzjmdc7gK4nMq8vR5SrN2CvidsGXCr2CqK1kwvXywmA7F8OqpFJ0s6b-i-KoHv-BaH-m
2024-04-17 22:34:12 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Wed, 17 Apr 2024 22:34:12 GMT Expires: Wed, 17 Apr 2024 22:34:12 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09AH0dGfTDjo_6lo3yKf_fGIOK96eTV7k8EIGuODrjGz3yWFhwKVrzS5C5ULq1AFMLv0u6vTtvIzg_xSdPlfvX168;Path=/recaptcha;Expires=Mon, 14-Oct-2024 22:34:12 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-17 22:34:12 UTC	559	IN	Data Raw: 32 33 31 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 37 4a 43 76 47 73 6b 64 36 32 55 5a 58 75 72 30 65 6e 33 68 69 58 48 55 51 4a 38 42 4e 4a 73 5a 78 38 43 41 70 38 68 2d 77 4b 5f 32 44 66 5f 44 5f 7a 4b 5f 5a 38 73 62 6b 47 32 6e 4f 70 75 34 35 75 43 64 67 70 61 6e 5f 52 4a 4a 70 6b 72 68 50 46 54 71 71 70 50 34 76 37 65 4c 51 53 53 6b 35 49 52 4d 64 48 79 39 72 57 4e 6d 2d 66 44 55 5a 65 66 35 72 58 7a 7a 68 78 53 43 79 55 78 47 6d 4b 49 41 7a 38 4f 36 4d 50 43 54 63 30 39 6e 4b 70 70 35 31 54 39 39 73 75 71 74 6d 70 55 48 4c 61 6a 45 76 72 55 4f 46 31 33 5f 2d 64 63 6c 62 48 36 6d 43 48 37 4b 48 77 75 63 57 72 47 79 68 62 65 30 6a 57 69 41 43 68 75 77 56 6b 5f 4c 6c 34 31 78 78 4e 2d 44 41 62 52 5a 45 63 4b 67 41 4a 49 Data Ascii: 231)]}'["rresp","03AFcWeA7JCvGskd62UZXur0en3hiXHUQJ8BNJsZx8CAp8h-wK_2Df_D_zK_Z8sbkG2nOpu45uCdgpan_RJJpkrhPFTqqpP4v7eLQSSk5IRMdHy9rWNm-fDUZef5rXzzhxSCyUxGmKIAz8O6MPCTc09nKpp51T99suqtmpUHLajEvrUOF13_-dclbH6mCH7KHwucWrGyhbe0jWiAChuwVk_Ll41xxN-DAbRZEcKgAJI
2024-04-17 22:34:12 UTC	9	IN	Data Raw: 32 70 32 54 69 4e 79 0d 0a Data Ascii: 2p2TiNy
2024-04-17 22:34:12 UTC	1255	IN	Data Raw: 61 34 33 0d 0a 71 6f 45 54 79 4c 42 49 77 42 64 56 5f 71 37 55 6c 6e 5f 74 6d 30 5a 41 57 35 4b 58 77 4a 65 51 42 56 34 41 69 4b 57 6a 49 42 6f 44 4c 62 47 64 4c 34 75 69 35 74 57 6f 75 6a 52 78 51 59 5a 48 41 39 4b 73 34 76 77 57 4a 54 47 37 7a 6f 46 34 48 4b 30 45 63 59 61 66 47 6a 38 34 59 6f 69 54 5f 73 63 6d 76 65 38 76 67 65 6a 68 56 6e 54 32 79 46 2d 58 65 47 41 79 51 30 78 4f 74 57 48 6b 41 78 79 34 45 34 33 37 41 78 61 57 41 4a 56 67 6d 35 70 4b 74 75 74 44 63 75 58 44 4e 57 33 63 67 35 69 62 4f 48 44 32 66 79 65 59 49 6a 78 45 66 53 35 31 74 30 6e 58 47 35 33 64 38 32 65 4e 5a 73 4a 64 2d 4c 6b 59 71 52 58 69 35 31 65 7a 4e 52 52 4f 46 51 73 70 48 35 62 36 30 46 76 77 6c 63 75 65 6b 79 4c 41 51 33 48 63 37 75 5f 4c 43 69 4b 4d 35 34 55 35 4e 46 Data Ascii: a43qoETyLBIwBdV_q7Uln_tm0ZAW5KXwJeQBV4AiKWjIBoDLbGdL4ui5tWoujRxQYZHA9Ks4vwWJTG7zoF4HK0EcYafGj84YoiT_scmve8vgejhVnT2yF-XeGAyQ0xOtWHkAxy4E437AxaWAJVgm5pKtutDcuXDNW3cg5ibOHD2fyeYIjxEfS51t0nXG53d82eNZsJd-LkYqRXi51ezNRROFQspH5b60FvwlcuekyLAQ3Hc7u_LCiKM54U5NF
2024-04-17 22:34:12 UTC	1255	IN	Data Raw: 51 71 5a 54 77 31 35 2d 71 4e 76 76 59 43 72 41 78 67 61 6a 41 55 45 77 31 46 37 4e 61 6b 56 68 6a 6d 70 45 48 48 5f 35 48 55 65 67 66 42 37 6d 6b 39 51 70 34 61 44 74 4d 39 59 47 58 7a 45 66 74 32 71 46 63 52 2d 67 4c 64 48 79 65 4c 50 46 59 75 34 41 74 4b 5a 42 46 77 66 75 6e 7a 72 75 34 45 37 67 63 4b 64 66 4e 50 6d 37 4f 50 51 74 74 30 68 4c 6c 6b 4c 7a 4c 6d 56 33 72 6a 6f 59 4e 53 35 61 63 4d 74 52 54 46 30 49 61 49 42 59 37 32 63 6f 76 69 47 43 55 72 43 47 53 44 42 75 6b 6f 79 68 41 72 4c 4d 51 30 6a 70 67 7a 7a 54 4f 57 44 72 6f 71 4b 58 7a 32 69 50 51 4e 69 30 75 73 4c 74 44 6d 4d 45 36 4c 63 4e 36 53 2d 79 4b 74 43 41 71 38 71 55 39 4b 64 57 56 46 62 61 51 34 6f 5f 50 45 54 52 72 51 51 4a 61 46 48 59 48 73 7a 46 43 6a 37 44 30 42 5f 45 72 58 62 Data Ascii: QqZTw15-qNvvYCrAxgajAUEw1F7NakVhjmpEHH_5HUegfB7mk9Qp4aDtM9YGXzEft2qFcR-gLdHyeLPFYu4AtKZBFwfunzru4E7gcKdfNPm7OPQtt0hLlkLzLmV3rjoYNS5acMtRTF0IaIBY72coviGCUrCGSDBukoyhArLMQ0jpgzzTOWDroqKXz2iPQNi0usLtDmME6LcN6S-yKtCAq8qU9KdWVFbaQ4o_PETRrQQJaFHYHszFCj7D0B_ErXb
2024-04-17 22:34:12 UTC	124	IN	Data Raw: 73 74 62 4c 32 73 66 6d 36 50 48 63 6e 56 64 53 36 71 47 4d 65 47 50 38 46 47 79 45 58 55 74 6b 70 55 55 45 2d 4e 49 4d 77 55 73 46 63 47 56 7a 46 31 73 4a 31 78 7a 70 75 47 61 58 57 49 6e 35 34 47 4e 38 52 49 45 41 62 4c 74 4a 39 54 75 74 59 75 58 51 6e 51 4b 64 6e 6c 64 49 37 73 49 32 46 4b 7a 4c 6d 6e 7a 43 61 63 55 76 78 49 72 31 47 6e 46 62 32 6b 44 6d 34 33 0d 0a Data Ascii: stbL2sfm6PHcnVdS6qGMeGP8FGyEXUtkpUUE-NIMwUsFcGVzF1sJ1xzpuGaXWIn54GN8RIEAbLtJ9TutYuXQnQKdnldI7sI2FKzLmnzCacUvxIr1GnFb2kDm43
2024-04-17 22:34:12 UTC	1255	IN	Data Raw: 31 35 61 38 0d 0a 31 79 66 42 5a 74 6f 77 6d 44 38 6d 65 6d 4a 39 4f 65 74 34 74 79 2d 4b 71 4f 4a 51 36 64 6e 75 33 56 71 6b 4d 64 57 4b 57 78 77 71 6c 6f 6a 45 61 63 66 67 62 41 34 38 39 36 4f 42 6d 65 67 6c 52 33 55 7a 4a 74 74 4c 33 4c 44 73 30 36 62 65 6a 7a 55 5f 49 34 56 6f 47 73 6c 79 59 2d 6b 74 67 6a 6c 45 4a 75 6a 52 32 79 77 76 72 70 68 79 61 6d 6c 39 53 45 55 78 4f 58 69 6d 47 76 6e 38 30 38 36 38 2d 35 5a 4d 72 70 4d 2d 64 7a 52 41 42 58 77 77 45 30 79 62 57 6d 63 59 6d 54 36 57 4f 48 45 49 4c 41 47 6b 69 58 35 59 37 42 63 78 62 6b 46 6c 35 4b 63 67 61 56 66 59 2d 4e 50 4e 64 4a 52 6d 63 63 69 52 44 42 4d 6c 38 79 63 49 6f 6f 67 6b 63 53 54 53 53 44 6e 51 4c 72 73 43 66 62 41 62 4e 57 32 47 69 33 54 41 4f 48 4b 4e 55 5f 6b 38 6e 6b 6b 53 4a Data Ascii: 15a81yfBZtowmD8memJ9Oet4ty-KqOJQ6dnu3VqkMdWKWxwqlojEacfgbA4896OBmeglR3UzJttL3LDs06bejzU_I4VoGslyY-ktgjlEJujR2ywvrphyaml9SEUxOXimGvn80868-5ZMrpM-dzRABXwwE0ybWmcYmT6WOHEILAGkiX5Y7BcxbkFl5KcgaVfY-NPNdJRmcciRDBMl8ycIoogkcSTSSDnQLrsCfbAbNW2Gi3TAOHKNU_k8nkkSJ
2024-04-17 22:34:12 UTC	1255	IN	Data Raw: 76 56 61 41 77 4c 45 39 76 6f 56 4b 44 55 58 51 51 5f 75 64 55 74 6c 30 55 4a 4b 5f 7a 6f 39 36 70 68 43 48 5a 6b 49 64 47 39 31 75 6e 65 67 32 6b 6b 4f 34 69 2d 34 54 73 5f 6a 4d 47 61 42 6b 6b 36 49 4e 35 43 67 31 31 51 45 79 66 4f 72 79 70 6e 7a 63 37 31 31 33 53 58 6e 36 32 5f 50 6d 30 72 65 53 56 53 39 75 48 4c 51 59 72 55 62 53 49 5a 36 78 35 34 36 37 55 46 38 6a 63 46 55 36 4c 72 6e 72 6c 30 65 41 69 39 69 76 48 6c 68 6b 4c 71 76 73 67 71 54 61 42 34 75 65 48 38 55 68 4d 69 44 5a 73 31 52 68 53 32 52 4e 65 4e 39 56 4c 58 31 64 36 52 4a 6c 6b 73 4e 6f 30 72 43 49 64 73 4b 53 4d 66 56 55 6b 65 72 63 78 51 31 32 4e 6e 50 79 37 58 47 42 61 67 39 32 79 74 50 4d 52 35 62 53 4d 43 6e 67 6e 54 78 30 62 52 43 61 46 50 65 59 4f 72 73 73 6e 6b 50 65 67 5a 68 Data Ascii: vVaAwLE9voVKDUXQQ_udUtl0UJK_zo96phCHZkIdG91uneg2kkO4i-4Ts_jMGaBkk6IN5Cg11QEyfOrypnzc7113SXn62_Pm0reSVS9uHLQYrUbSIZ6x5467UF8jcFU6Lrnrl0eAi9ivHlhkLqvsgqTaB4ueH8UhMiDZs1RhS2RNeN9VLX1d6RJlksNo0rCIdsKSMfVUkercxQ12NnPy7XGBag92ytPMR5bSMCngnTx0bRCaFPeYOrssnkPegZh
2024-04-17 22:34:12 UTC	1255	IN	Data Raw: 71 4f 57 52 70 53 33 68 4b 55 7a 4e 4a 64 31 52 4d 54 47 74 54 4e 31 5a 35 4d 56 68 36 56 6e 6c 75 62 47 52 4e 65 46 64 47 51 6a 4a 52 55 6b 78 79 63 54 51 72 4d 32 56 55 63 6b 4a 58 62 6d 4a 77 59 31 42 6f 59 7a 4e 73 4f 56 5a 55 4d 45 4a 75 53 31 4e 51 51 32 56 7a 53 6e 68 45 52 45 49 78 62 47 68 6c 5a 6e 56 50 4e 6b 51 77 56 46 6c 46 54 48 5a 59 4b 30 70 77 53 46 46 48 56 56 42 34 64 48 4a 76 61 47 4e 35 52 47 4d 78 65 58 63 77 55 6b 49 33 54 30 46 69 51 32 34 77 64 55 68 34 5a 55 74 46 63 6a 52 52 53 44 6c 31 4b 32 52 45 61 55 31 7a 54 6c 4a 4e 63 57 4e 42 63 45 6c 34 57 45 68 76 54 57 31 47 61 33 6c 6e 5a 7a 52 71 54 6e 4d 30 56 47 67 76 4e 48 56 34 4f 48 46 4d 59 33 4e 54 4f 44 4e 6b 54 6b 64 51 4c 30 5a 33 64 6a 68 71 56 6b 52 53 54 45 6b 32 5a 55 Data Ascii: qOWRpS3hKUzNJd1RMTGtTN1Z5MVh6VnlubGRNeFdGQjJRUkxycTQrM2VUckJXbmJwY1BoYzNsOVZUMEJuS1NQQ2VzSnhEREIxbGhlZnVPNkQwVFlFTHZYK0pwSFFHVVB4dHJvaGN5RGMxeXcwUkI3T0FiQ24wdUh4ZUtFcjRRSDl1K2REaU1zTlJNcWNBcEl4WEhvTW1Ga3lnZzRqTnM0VGgvNHV4OHFMY3NTODNkTkdQL0Z3djhqVkRSTEk2ZU
2024-04-17 22:34:12 UTC	1255	IN	Data Raw: 49 77 4e 33 42 4b 61 48 4a 6c 59 6b 63 35 62 33 41 30 4b 32 4a 52 64 45 70 59 64 45 63 31 64 6b 5a 47 57 6c 56 72 4e 58 5a 54 61 32 52 76 4c 30 49 7a 62 47 39 7a 62 43 38 72 4e 57 74 59 51 32 35 5a 54 58 42 43 4d 55 56 47 5a 57 78 49 64 55 52 52 54 45 4a 79 51 33 68 44 56 43 74 72 54 47 68 33 52 56 46 6f 54 7a 68 47 62 69 39 4d 5a 56 5a 4a 54 6a 4a 52 54 33 64 55 61 45 39 69 4f 55 78 54 4b 30 52 5a 4e 33 68 75 56 48 4a 48 5a 58 5a 71 52 53 74 53 57 6c 70 73 56 58 42 4c 54 55 64 4b 52 47 63 78 64 57 64 52 61 57 34 34 54 6b 67 31 61 7a 56 6f 4c 32 52 59 4e 44 52 4f 51 6d 56 6c 4e 33 68 47 61 54 42 75 59 57 52 7a 4b 30 45 77 4d 7a 4a 6f 5a 32 31 6d 62 56 59 7a 56 57 4e 32 64 33 5a 33 56 54 68 31 51 6a 59 33 63 6e 46 55 52 6d 56 54 54 33 70 4a 4e 43 39 33 4f Data Ascii: IwN3BKaHJlYkc5b3A0K2JRdEpYdEc1dkZGWlVrNXZTa2RvL0IzbG9zbC8rNWtYQ25ZTXBCMUVGZWxIdURRTEJyQ3hDVCtrTGh3RVFoTzhGbi9MZVZJTjJRT3dUaE9iOUxTK0RZN3huVHJHZXZqRStSWlpsVXBLTUdKRGcxdWdRaW44Tkg1azVoL2RYNDROQmVlN3hGaTBuYWRzK0EwMzJoZ21mbVYzVWN2d3Z3VTh1QjY3cnFURmVTT3pJNC93O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49733	172.253.124.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:12 UTC	873	OUT	GET /recaptcha/api2/reload?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AH0dGfTDjo_6lo3yKf_fGIOK96eTV7k8EIGuODrjGz3yWFhwKVrzS5C5ULq1AFMLv0u6vTtvIzg_xSdPlfvX168; 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
2024-04-17 22:34:12 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Wed, 17 Apr 2024 22:34:12 GMT Expires: Wed, 17 Apr 2024 22:34:12 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-17 22:34:12 UTC	244	IN	Data Raw: 65 65 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: ee<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-04-17 22:34:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49734	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:12 UTC	1479	OUT	GET /recaptcha/api2/payload?p=06AFcWeA6390MQ8DygnJXJAL-TvHzhHeRJJhWSF1gDG6WF7wqk1KcpTF_O5TM7dY_ThYz9TWd7mUeaisqz6LyOJPlXda1gbp1HXHQkcHszzImEvsCk8rLwcyaY5fSuP6b9rSkVMKBjIXAQFm8iKh306ouedLCgZGwd6w6vlO7CNRI4MAsuO7XLnDkONHVnTZhpyAC0UVFJpXAl&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AH0dGfTDjo_6lo3yKf_fGIOK96eTV7k8EIGuODrjGz3yWFhwKVrzS5C5ULq1AFMLv0u6vTtvIzg_xSdPlfvX168; 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
2024-04-17 22:34:12 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Wed, 17 Apr 2024 22:34:12 GMT Date: Wed, 17 Apr 2024 22:34:12 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:34:12 UTC	6	IN	Data Raw: 41 46 38 45 0d 0a Data Ascii: AF8E
2024-04-17 22:34:12 UTC	1255	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC!"$"$C"}!1AQa"q2
2024-04-17 22:34:12 UTC	1255	IN	Data Raw: 2b 73 2c 4d 87 c0 c9 c0 ef f5 aa ff 00 12 fe 1a 49 e1 bd 20 df a6 af 6f 79 19 3f 75 09 c8 f5 eb 5d 5c 7f 11 7c 05 2f c4 8b 3d 46 1d 57 59 b6 d3 ed ad 7c b5 95 ce 65 46 00 80 07 1d 39 ae 7f e2 c7 8a 7c 33 aa c5 bb 47 d7 ef af 9d dd bc d5 b8 00 0d b9 18 3c 0a 22 a5 19 f9 58 7c ca 32 d4 f2 79 2e 92 08 c5 a9 89 41 99 c2 ab 91 82 b8 1f ca b1 a7 86 21 13 84 24 e1 b3 c7 7a d5 bc 78 a4 ba cc 2a a4 f5 04 1e 05 55 bb 2b e6 08 d5 cb 30 ee 46 2b 9d 46 ce e5 32 93 5a ae 77 79 7f 2b 9e 98 fe 55 32 5a 2a 48 02 82 b9 4e f5 3c d1 94 08 be 62 e5 bb 9e d4 b1 5c c7 05 c0 8e 64 f3 4b 2e df 94 f4 ad 5b 6c 49 09 a3 07 de 51 d0 36 09 1c 9e 38 35 b1 73 6f 15 e8 12 25 d2 a8 c7 31 9a cb 92 58 cb ca 55 56 31 d3 19 aa f0 4c eb 73 b1 40 db b3 2a d9 e9 5c d3 4e a3 2a 33 b6 84 b7 51 45 Data Ascii: +s,MI oy?u]\\|/=FWY\|eF9\|3G<"X\|2y.A!$zxU+0F+F2Zwy+U2ZHN<b\dK.[lIQ685so%1XUV1Ls@\N3QE
2024-04-17 22:34:12 UTC	1255	IN	Data Raw: 54 ea cd 1b 45 23 0a 1d c1 41 c6 7b 0c 54 73 5b ae 46 43 67 1d 33 57 82 92 a4 86 c6 7b d4 52 0d ab 87 24 fb 8e d5 7b 98 3b b3 3e 0b 74 37 01 72 58 60 e4 74 ab 29 6d 16 70 39 f6 a6 c6 a4 dc e0 f0 00 cf 15 6d a3 05 47 38 f7 e9 50 e0 fb 89 2b 19 cf 11 f3 f0 06 07 a5 37 ec d9 53 bb 24 56 81 8d 04 b9 dd b8 a9 ed 49 28 c0 18 e0 74 c7 f5 a6 93 46 b6 45 01 6e 42 65 46 71 eb cd 3d 22 6c 96 04 f3 c9 35 65 91 b1 85 c7 d3 34 6d 2a 70 c4 0e bf 4a 53 da c4 4d 5d 94 5a df 76 14 16 c0 18 eb de 95 ed ca 31 54 e0 95 15 71 7e 52 73 83 f3 76 fa 52 15 24 16 2c 37 0a 6e 3a 59 8d a8 ad cc f3 04 98 68 d9 db 96 f5 a6 25 b9 f3 02 f2 9d 06 41 c1 e2 b4 63 4c 92 49 0d ce 78 a6 39 21 b7 63 20 7a 52 e5 6b 66 69 15 16 33 55 b4 48 c2 cd 14 bb b6 a8 e4 03 96 3d c5 61 b5 ea 09 52 30 1b 79 Data Ascii: TE#A{Ts[FCg3W{R${;>t7rX`t)mp9mG8P+7S$VI(tFEnBeFq="l5e4m*pJSM]Zv1Tq~RsvR$,7n:Yh%AcLIx9!c zRkfi3UH=aR0y
2024-04-17 22:34:12 UTC	333	IN	Data Raw: 8e 1a db 19 e3 23 9a 2b 5f 69 1e e6 7e c1 10 fc ce 4e 24 00 63 ad 35 37 05 c1 90 8c 7a 53 c4 43 27 77 5f ad 22 a8 0e df 37 ff 00 5a b2 b1 d5 d4 51 82 84 3e 4d 20 da 4e 14 71 8a 70 2c 10 00 db 97 06 99 1e f0 fe f8 f4 e2 93 2a 4f 51 a4 30 1c 63 9e dd a9 b2 0f 94 67 9c d4 ca af 9e a0 9f a7 14 c9 09 d9 c7 2d 9e 94 10 56 8e 3c 5c b1 cf 1b 7d 71 56 18 fc bd 7f 2e 6a a3 e5 e7 90 b1 da c1 7a 55 3c 38 c6 24 3d 7f c8 aa 26 f6 34 d8 8c b6 e1 d5 7a 8e b4 d1 10 19 00 36 d1 8e 09 a5 72 4a e7 b8 51 92 05 26 4b 06 26 26 6c 81 c8 3c 52 2f 97 cc 64 99 32 96 42 06 06 39 a2 5d 8c a0 9c e4 e7 81 ef 52 fc bf 74 37 cc 46 70 46 69 a8 bb 9b e6 1c d1 a0 45 6a 34 2e 23 dc 39 c9 eb 4a a7 0a 77 83 cf 1c f5 a5 61 91 85 3c 67 a5 46 76 b3 03 bb 6e df 7c d4 b4 db 14 f7 12 40 71 ce 07 bd Data Ascii: #+_i~N$c57zSC'w_"7ZQ>M Nqp,*OQ0cg-V<\}qV.jzU<8$=&4z6rJQ&K&&l<R/d2B9]Rt7FpFiEj4.#9Jwa<gFvn\|@q
2024-04-17 22:34:12 UTC	1255	IN	Data Raw: 89 4c e0 23 b6 c8 c1 24 b9 ea 4f a5 65 cd 7d 07 29 2e 5b a2 18 e0 89 a3 8e 46 4c 1c 0d b8 a9 d8 91 85 5e be f4 ec a9 da 37 03 18 e1 6a 36 04 1d 87 93 eb 55 15 60 8c ae 81 4b 3b 62 55 e9 d0 8a 19 10 96 19 3b 87 3c fa d2 0f 9f e5 2a c0 8e 86 9e cc 55 95 32 39 53 b8 d5 14 35 d4 b4 62 25 6c 30 e7 8a c8 d4 19 7c c6 57 21 99 7e 60 07 5a d6 2d 85 66 dc 19 98 01 9e 9c 56 54 8e 86 46 04 ab 36 79 e3 b5 67 ca ee 44 88 83 02 63 96 35 db 81 c8 3c fe 75 5a 46 91 e4 2c 58 29 dd d0 2d 5e 69 40 8d 0c 61 32 0f 20 76 a8 ae a3 ca 09 b2 07 3c 8c d4 92 4f 02 95 4f 91 c6 f6 eb e9 4d 4b 62 ce 1f 8c 82 08 38 a4 12 41 1c 64 ee 52 cd c5 3a 22 c9 6b 96 00 91 d3 9a 06 45 a9 45 2b 5d 93 cf 96 06 38 1d e9 f6 e5 51 86 e5 e4 0c 13 8e 7e b5 37 da d6 3b 74 12 c3 91 de 9d 1c 4b 72 3c e0 be Data Ascii: L#$Oe}).[FL^7j6U`K;bU;<*U29S5b%l0\|W!~`Z-fVTF6ygDc5<uZF,X)-^i@a2 v<OOMKb8AdR:"kEE+]8Q~7;tKr<
2024-04-17 22:34:12 UTC	1255	IN	Data Raw: 35 62 48 01 81 39 e6 9d fb cc e0 60 7a d3 18 f7 6c e0 75 c5 67 ec 89 b0 15 28 38 c6 0f 4c 76 a6 4d cc 60 67 07 b5 2a b2 9e f8 07 d4 d3 61 8e 49 a6 54 41 92 df 77 1c e7 da 8e 5b 75 1c 64 a2 ec 2c 51 cb 25 c2 c6 85 42 90 3f 79 9e 05 5b 9e d3 64 ae aa cb 2a a8 da 5c 77 24 76 a6 cd 6b 3d 9f 0f 32 09 1c ff 00 a9 fe 30 3f dd a6 c5 7d 6f 6b 2c cf 73 1c ac 42 e0 20 18 20 fb 83 f5 a8 ab a3 d0 dc 93 51 b5 87 4e 55 b2 9e 04 33 7c af b9 65 de 40 23 a1 ae 5d ce fb f7 86 2c 02 17 70 38 ea 3b fd 6b 66 66 98 7c af 1b af 9a 43 6e 64 ce 10 1c e3 9a a3 7d a8 1b bb f7 97 0b 14 48 36 0f 29 70 42 e3 91 f8 d6 69 b2 24 47 6d 6e 96 c7 cb 90 b3 e4 f0 dd 85 35 ed 9c 17 8c b4 6c a7 90 de b5 72 10 5a 13 34 65 4c 00 e3 6f 7c 7a d5 7b 86 85 e5 df 14 8d b5 38 03 14 12 57 92 c8 f9 01 11 Data Ascii: 5bH9`zlug(8LvM`gaITAw[ud,Q%B?y[d\w$vk=20?}ok,sB QNU3\|e@#],p8;kff\|Cnd}H6)pBi$Gmn5lrZ4eLo\|z{8W
2024-04-17 22:34:12 UTC	1255	IN	Data Raw: da 26 2d 19 a2 9b 03 82 f8 39 38 1e d5 2b 3c 96 d7 51 be 32 55 77 60 71 bc 75 ea 2b 2c b9 94 05 ce 09 ab 41 58 b2 2c b3 05 65 8c f3 f8 54 cb 5d 44 e1 ad d1 0d cd fd cb df c7 72 24 36 ee cd 84 39 dc 7e 99 ab df db 2a 27 64 16 10 c8 d2 45 e4 b4 9b 06 4b 0e af 9f 5a c6 79 62 69 15 02 9d 83 18 3f de 38 eb 4c 91 e5 88 99 06 36 ee c6 47 53 50 dd d0 e9 b9 5f 53 47 55 9d 85 c9 89 ef 0b c8 00 71 22 af 6e cb cd 65 c1 24 33 5b c8 86 47 59 9e 41 85 51 f7 86 79 3f 5a b9 7a 43 5a e5 d8 60 8f bd de b2 46 eb 7d 8e 8e 58 31 fb fe 95 09 1a b4 bb 97 9a 3b 9b 26 58 66 5d 8e 46 40 07 a8 a4 28 a0 b0 dc e0 30 cf d3 d6 a4 d3 a0 7d 52 e0 db 0b b1 f2 9e 19 8f de e3 38 1e 95 66 ee c3 ec 96 bb 24 01 59 94 32 22 c9 d4 fb d3 4b 51 4a 16 57 33 5d 96 35 1e 51 52 cd c6 73 d2 af d8 c6 90 Data Ascii: &-98+<Q2Uw`qu+,AX,eT]Dr$69~*'dEKZybi?8L6GSP_SGUq"ne$3[GYAQy?ZzCZ`F}X1;&Xf]F@(0}R8f$Y2"KQJW3]5QRs
2024-04-17 22:34:12 UTC	1255	IN	Data Raw: 84 67 d3 82 dd 69 b3 ff 00 68 da b0 f9 9d 01 05 0f b8 35 cd 2f 7d dd 1b c6 1c b1 b1 cb 02 8f c1 72 29 dc 46 36 a3 06 07 9a ae 65 21 88 68 f3 ce 38 a9 e3 40 f1 ef 42 31 e9 45 b9 4c 39 52 57 ea 38 4b 87 56 61 9c 1e d5 35 c3 46 db f6 39 66 08 4b 73 50 28 00 6e 62 30 3a 8e f4 8f 28 4c a2 2f c9 b7 83 dc fd 69 26 db 1c 62 da 24 8e 4d c3 3b 03 10 a3 23 1e d4 8c 55 80 8d 41 63 d6 a2 32 e1 0f 08 8d 81 8c 76 a3 73 1c 6c 70 33 d7 34 a6 9a 7a 03 83 43 ae b2 d1 90 a0 86 1d 41 e9 59 e5 dc b2 85 e3 6f e5 5a 26 42 51 c1 c0 e2 ab 33 2a c7 b4 20 dd 9e d5 29 cb aa 27 95 93 68 f0 28 76 68 66 65 96 5c b0 d8 38 5f 5c d4 d3 a2 c6 ad 1c 77 49 2a e4 10 c0 92 37 7b 55 3b 19 02 b3 be 0e 1b a7 38 c5 2f ef 04 7f 2b 28 c7 7c 73 9a d5 2d 4d 25 f0 9a f6 30 b7 98 4b b0 32 b7 cc 49 1c 8a Data Ascii: gih5/}r)F6e!h8@B1EL9RW8KVa5F9fKsP(nb0:(L/i&b$M;#UAc2vslp34zCAYoZ&BQ3* )'h(vhfe\8_\wI*7{U;8/+(\|s-M%0K2I
2024-04-17 22:34:12 UTC	1255	IN	Data Raw: 8a ac b2 34 67 20 61 47 eb 57 fc 4d b3 fb 48 32 90 4f de 20 0e f5 96 25 c0 c7 1c f3 cd 56 fa 9e 75 58 d9 dc 90 c8 ce fb c7 dd 14 84 96 3f 31 fe 1a 8f 71 19 6e bc 53 66 62 c3 8c 0e 29 a1 d3 7a 0f 0a db 8f 3d a9 af b8 38 24 e0 fa 54 4c ec 07 ca 72 71 48 64 77 95 01 18 a6 55 c9 d6 46 da e1 ce 06 05 05 e3 0d 95 6e 6a 0b 80 44 6e 77 67 8a 82 d5 7c c9 70 4e 28 b0 16 ad dc 95 6a b3 6e ca c3 63 1c 8e c6 ab 47 88 d0 f3 d7 81 4b 1a ed 50 29 01 6a db 1e 6b 04 1b 8e 78 15 34 a6 58 b7 3a be d9 87 07 d3 1e 9f 5a a4 a4 a9 dc 0e 31 4f b6 92 42 8f f3 64 ff 00 5e d5 7c e4 38 23 6f 4f bb da 8a 8f 30 0a 40 dd ea 4d 6c 27 fa a1 b3 6e d6 fb a4 75 fc 6b 8e 57 ce 19 08 07 bd 6b 69 97 d1 ab ed 2c db f6 fa 64 55 c6 a6 bb 19 25 66 6e 6e 2c 02 af de 1e 95 3c 65 c0 0a 06 0b 0e f5 ce Data Ascii: 4g aGWMH2O %VuX?1qnSfb)z=8$TLrqHdwUFnjDnwg\|pN(jncGKP)jkx4X:Z1OBd^\|8#oO0@Ml'nukWki,dU%fnn,<e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49743	172.253.124.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:13 UTC	1083	OUT	GET /recaptcha/api2/payload?p=06AFcWeA6390MQ8DygnJXJAL-TvHzhHeRJJhWSF1gDG6WF7wqk1KcpTF_O5TM7dY_ThYz9TWd7mUeaisqz6LyOJPlXda1gbp1HXHQkcHszzImEvsCk8rLwcyaY5fSuP6b9rSkVMKBjIXAQFm8iKh306ouedLCgZGwd6w6vlO7CNRI4MAsuO7XLnDkONHVnTZhpyAC0UVFJpXAl&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AH0dGfTDjo_6lo3yKf_fGIOK96eTV7k8EIGuODrjGz3yWFhwKVrzS5C5ULq1AFMLv0u6vTtvIzg_xSdPlfvX168; 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
2024-04-17 22:34:13 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Wed, 17 Apr 2024 22:34:13 GMT Date: Wed, 17 Apr 2024 22:34:13 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:34:13 UTC	1255	IN	Data Raw: 41 46 38 45 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: AF8EJFIFC!"$"$C"}!1AQa"q
2024-04-17 22:34:13 UTC	1255	IN	Data Raw: 2d ef a4 16 ed 19 2b 73 2c 4d 87 c0 c9 c0 ef f5 aa ff 00 12 fe 1a 49 e1 bd 20 df a6 af 6f 79 19 3f 75 09 c8 f5 eb 5d 5c 7f 11 7c 05 2f c4 8b 3d 46 1d 57 59 b6 d3 ed ad 7c b5 95 ce 65 46 00 80 07 1d 39 ae 7f e2 c7 8a 7c 33 aa c5 bb 47 d7 ef af 9d dd bc d5 b8 00 0d b9 18 3c 0a 22 a5 19 f9 58 7c ca 32 d4 f2 79 2e 92 08 c5 a9 89 41 99 c2 ab 91 82 b8 1f ca b1 a7 86 21 13 84 24 e1 b3 c7 7a d5 bc 78 a4 ba cc 2a a4 f5 04 1e 05 55 bb 2b e6 08 d5 cb 30 ee 46 2b 9d 46 ce e5 32 93 5a ae 77 79 7f 2b 9e 98 fe 55 32 5a 2a 48 02 82 b9 4e f5 3c d1 94 08 be 62 e5 bb 9e d4 b1 5c c7 05 c0 8e 64 f3 4b 2e df 94 f4 ad 5b 6c 49 09 a3 07 de 51 d0 36 09 1c 9e 38 35 b1 73 6f 15 e8 12 25 d2 a8 c7 31 9a cb 92 58 cb ca 55 56 31 d3 19 aa f0 4c eb 73 b1 40 db b3 2a d9 e9 5c d3 4e a3 2a Data Ascii: -+s,MI oy?u]\\|/=FWY\|eF9\|3G<"X\|2y.A!$zxU+0F+F2Zwy+U2ZHN<b\dK.[lIQ685so%1XUV1Ls@\N
2024-04-17 22:34:13 UTC	1255	IN	Data Raw: 15 2a 7e 53 d0 60 54 ea cd 1b 45 23 0a 1d c1 41 c6 7b 0c 54 73 5b ae 46 43 67 1d 33 57 82 92 a4 86 c6 7b d4 52 0d ab 87 24 fb 8e d5 7b 98 3b b3 3e 0b 74 37 01 72 58 60 e4 74 ab 29 6d 16 70 39 f6 a6 c6 a4 dc e0 f0 00 cf 15 6d a3 05 47 38 f7 e9 50 e0 fb 89 2b 19 cf 11 f3 f0 06 07 a5 37 ec d9 53 bb 24 56 81 8d 04 b9 dd b8 a9 ed 49 28 c0 18 e0 74 c7 f5 a6 93 46 b6 45 01 6e 42 65 46 71 eb cd 3d 22 6c 96 04 f3 c9 35 65 91 b1 85 c7 d3 34 6d 2a 70 c4 0e bf 4a 53 da c4 4d 5d 94 5a df 76 14 16 c0 18 eb de 95 ed ca 31 54 e0 95 15 71 7e 52 73 83 f3 76 fa 52 15 24 16 2c 37 0a 6e 3a 59 8d a8 ad cc f3 04 98 68 d9 db 96 f5 a6 25 b9 f3 02 f2 9d 06 41 c1 e2 b4 63 4c 92 49 0d ce 78 a6 39 21 b7 63 20 7a 52 e5 6b 66 69 15 16 33 55 b4 48 c2 cd 14 bb b6 a8 e4 03 96 3d c5 61 b5 Data Ascii: ~S`TE#A{Ts[FCg3W{R${;>t7rX`t)mp9mG8P+7S$VI(tFEnBeFq="l5e4mpJSM]Zv1Tq~RsvR$,7n:Yh%AcLIx9!c zRkfi3UH=a
2024-04-17 22:34:13 UTC	1255	IN	Data Raw: 03 34 50 da 44 3b 8e 1a db 19 e3 23 9a 2b 5f 69 1e e6 7e c1 10 fc ce 4e 24 00 63 ad 35 37 05 c1 90 8c 7a 53 c4 43 27 77 5f ad 22 a8 0e df 37 ff 00 5a b2 b1 d5 d4 51 82 84 3e 4d 20 da 4e 14 71 8a 70 2c 10 00 db 97 06 99 1e f0 fe f8 f4 e2 93 2a 4f 51 a4 30 1c 63 9e dd a9 b2 0f 94 67 9c d4 ca af 9e a0 9f a7 14 c9 09 d9 c7 2d 9e 94 10 56 8e 3c 5c b1 cf 1b 7d 71 56 18 fc bd 7f 2e 6a a3 e5 e7 90 b1 da c1 7a 55 3c 38 c6 24 3d 7f c8 aa 26 f6 34 d8 8c b6 e1 d5 7a 8e b4 d1 10 19 00 36 d1 8e 09 a5 72 4a e7 b8 51 92 05 26 4b 06 26 26 6c 81 c8 3c 52 2f 97 cc 64 99 32 96 42 06 06 39 a2 5d 8c a0 9c e4 e7 81 ef 52 fc bf 74 37 cc 46 70 46 69 a8 bb 9b e6 1c d1 a0 45 6a 34 2e 23 dc 39 c9 eb 4a a7 0a 77 83 cf 1c f5 a5 61 91 85 3c 67 a5 46 76 b3 03 bb 6e df 7c d4 b4 db 14 f7 Data Ascii: 4PD;#+_i~N$c57zSC'w_"7ZQ>M Nqp,*OQ0cg-V<\}qV.jzU<8$=&4z6rJQ&K&&l<R/d2B9]Rt7FpFiEj4.#9Jwa<gFvn\|
2024-04-17 22:34:13 UTC	1255	IN	Data Raw: aa f2 ea 30 d9 cf 25 aa 79 be 59 40 a7 0c 31 9a c3 0f 24 57 a1 b0 c3 69 39 4d 9f ad 25 c4 92 5d dc 31 8e 12 7b e0 0c 9a a8 b5 d4 96 ae 68 33 26 e3 fe 91 27 5f f9 e9 45 40 ba 16 a2 ca 18 40 30 46 79 61 45 5d e1 dc 5c ac e9 81 70 bc 28 61 d3 34 c5 39 4d d8 21 89 e7 8c 52 f2 54 72 7f 0a 71 5c 80 33 9c d7 51 a8 cc b2 b0 03 1d 0d 39 5b 91 f2 9e 9f 30 c7 5a 59 55 8c 9d 41 5c 74 ef 4d c0 67 52 5b a7 50 69 59 33 29 b7 71 50 fc a1 87 46 3d 09 a6 b0 21 98 86 27 f0 a9 02 a0 50 d8 ce 7a 63 b5 30 91 b7 8c 93 9e f4 59 1a 14 a3 52 f7 32 87 03 38 a7 8b 58 fb 2e 3b f1 4e b7 1f e9 4e 78 e3 a5 4f 21 0a f8 eb c7 d6 9b 44 91 28 f9 c8 19 00 f2 7d e9 c0 29 4d a3 a0 e4 8f 7a 48 f2 64 2a 4f d4 77 14 64 28 32 0e c6 a3 95 80 6c 6e 49 19 1d b1 4c 1b b7 15 00 77 e7 d2 9e ac df 78 f4 Data Ascii: 0%yY@1$Wi9M%]1{h3&'_E@@0FyaE]\p(a49M!RTrq\3Q9[0ZYUA\tMgR[PiY3)qPF=!'Pzc0YR28X.;NNxO!D(})MzHd*Owd(2lnILwx
2024-04-17 22:34:13 UTC	1255	IN	Data Raw: d6 0f fb e4 51 58 5f 67 b8 3c f9 a0 7e 26 8a 83 6d 4d 1d a0 92 37 63 1c e0 53 10 61 49 f4 39 e6 9c 87 08 58 1c 93 fa d2 99 14 86 cf 27 18 e9 5e 8d cc 14 86 36 09 c1 1c 8e 73 40 19 5c 87 ce 0e 48 14 f4 c9 04 67 23 3f 4c d4 4c 02 a1 ff 00 e2 bf 4a 64 4f 72 40 18 20 ea 78 e0 d2 1c 95 ea 0f 1d aa 87 f6 94 69 20 89 d5 b0 7a 1f 4f f1 ab 71 cb 1c 89 e6 44 c3 69 e8 09 a9 4d 8d 4f 42 0b 74 dd 75 20 e7 ff 00 af 56 08 c1 cf a7 af 15 05 b3 31 9e 4c 8c fd 2a d8 7d be 83 eb 55 70 8c af b1 56 25 2d 21 60 79 ee 3b d2 b2 b6 4a 9c 63 af d2 85 43 97 7c 8e 4d 35 a5 54 62 ae 01 15 45 5c 92 2d a7 e4 27 1c 71 ce 33 45 c1 55 18 2d fd 6a bb cb f3 82 13 77 61 8a 64 6d 22 b6 4a b9 cb 67 9e d5 9c d6 a4 b9 a4 5b 07 29 c3 1d de b5 0b a1 07 04 86 e3 ad 3e 36 c8 0d 22 9e 4f 4f ad 42 d2 Data Ascii: QX_g<~&mM7cSaI9X'^6s@\Hg#?LLJdOr@ xi zOqDiMOBtu V1L*}UpV%-!`y;JcC\|M5TbE\-'q3EU-jwadm"Jg[)>6"OOB
2024-04-17 22:34:13 UTC	1255	IN	Data Raw: 5d fc ac cd 6e 32 6e e7 3f fd 6a a5 73 ba 2b 76 94 80 e3 d0 55 d9 99 51 8e 06 73 f9 55 69 90 34 25 73 df 91 4e c2 9b d4 e6 ee 92 69 60 66 5d c3 1c af 5e 3e 95 4a d6 ee 61 72 37 4a f1 92 42 e3 b1 ae a4 24 6c 76 80 d8 f7 e9 59 f7 f6 69 2b ef 00 a9 51 c6 3d 6b 36 df 41 cd 27 1d 0b da 34 c8 f2 4a 4b 9c 81 ce 4e 2a ea 49 bb 2d 80 e3 b0 27 93 5c b5 8f da 21 60 cc 49 ce 41 1e be 94 92 dc 5c db 48 0e e2 1c 9f b9 bb ee fe 35 31 9a be ac 50 d5 1b b3 dd 88 23 6c 8c 6d e4 d6 2a ea 66 49 5e 65 38 c8 c0 26 a8 bd dd c3 86 2f 82 18 f3 cf 6a 6b bc 45 d1 55 30 98 ea 29 d4 9a fb 2c d1 2d 0d 18 ae ee 77 fe ef 32 31 1d 6b 5b 4d 2c 6d c4 85 58 3e d2 1b 27 b9 ac 0f b4 c9 1a 32 46 40 43 dc f0 6b 46 d7 52 0c c2 de 25 60 d8 1f 31 e8 6b 35 37 d4 56 49 ea 8d 69 24 db 18 dc 41 60 31 Data Ascii: ]n2n?js+vUQsUi4%sNi`f]^>Jar7JB$lvYi+Q=k6A'4JKNI-'\!`IA\H51P#lmfI^e8&/jkEU0),-w21k[M,mX>'2F@CkFR%`1k57VIi$A`1
2024-04-17 22:34:13 UTC	1255	IN	Data Raw: e9 9a ab 3c f1 24 65 dc ec 3e 84 d5 a7 66 20 1c 93 81 c0 22 b3 f5 05 59 17 32 a0 ce 09 1e d5 96 cc 6d e8 65 1b 97 37 7b 83 66 31 9e 33 fe 79 a6 4b 27 da 26 5c 61 82 ff 00 17 f7 7e b5 59 e1 10 91 2a 3e e0 c4 e5 6a 4b 59 55 03 a7 97 f7 ab 91 c3 de b9 74 a1 cd 12 b4 8c 76 11 d7 9a 55 39 51 9a 46 91 77 1e a3 9a 74 41 26 3b 4f 04 74 34 cd 23 0b 31 bb b7 30 46 27 6d 4c 97 1b 58 18 87 23 bd 43 20 02 36 f3 08 f3 14 f0 7b 7e 14 c4 7e ff 00 77 fd 9f 5a 4d 0e 50 bb 35 ad 6e e4 90 46 c5 ce 49 c3 03 5d ff 00 83 12 57 b4 b8 f2 44 8a ac cb 19 61 8c b0 e0 e3 3e 9d 2b ce 6c 5c f9 91 c6 83 f7 ae c1 55 4f 72 4d 7b 9d ac 1a 3f 86 7c 35 05 b4 a5 67 b8 54 32 48 c1 b2 4b e3 91 9f 6e 95 ad 49 7b 96 0a 16 93 bb 30 6e b4 fb 1b 06 9a 76 52 ce 0a 86 c8 24 28 27 27 3d ba 03 fa 53 65 Data Ascii: <$e>f "Y2me7{f13yK'&\a~Y*>jKYUtvU9QFwtA&;Ot4#10F'mLX#C 6{~~wZMP5nFI]WDa>+l\UOrM{?\|5gT2HKnI{0nvR$(''=Se
2024-04-17 22:34:13 UTC	1255	IN	Data Raw: 3b 7a 91 59 ca 1d 51 64 8c e9 23 98 8a e4 2f 4e 6a e6 8b a4 dd 6a 7a 82 5a 5b 5b cb 3c 92 10 a8 10 65 8b 7a 55 1b 52 a4 bb 6d c0 1d 4d 7d 0f fb 37 f8 5a 3b 3d 26 e3 c6 3a 8e d1 2b 65 6c 23 6f 4e ef 8f 5e d5 31 8b 94 b9 51 13 9a 82 d4 db f8 7d f0 57 40 d1 ad 60 be f1 94 cd 71 76 df 3a da 2b 82 a9 c7 1b 8e 39 a3 c5 3a 2e 98 6e e6 7b 18 23 41 92 15 14 70 33 5b 5a ae ab 74 c5 cb ce 5f 77 63 d0 57 3b 1c ac f3 62 47 fb c7 f0 af a1 c3 e0 e3 4e 2f 9b 53 8a 75 5d ee 91 e6 13 69 b2 2e ad 74 8f 23 ad d3 a0 8c 92 c0 85 c1 c8 c0 3f 87 f9 e6 b7 75 4d 3e 6b 7d 0f ed 2b 34 c8 ec 00 90 9e 00 03 07 91 cf 3c 1e 9f 9d 74 77 fa 54 0b ad 8d 51 55 59 bc 93 13 2f fb 59 eb f9 55 95 b5 b6 b9 d3 a4 d3 ae 94 b2 dc 21 46 e3 38 cf 7a e1 9e 0a 1c d7 3b 16 2d bb 24 8f 9f 75 69 04 b7 f2 Data Ascii: ;zYQd#/NjjzZ[[<ezURmM}7Z;=&:+el#oN^1Q}W@`qv:+9:.n{#Ap3[Zt_wcW;bGN/Su]i.t#?uM>k}+4<twTQUY/YU!F8z;-$ui
2024-04-17 22:34:13 UTC	1003	IN	Data Raw: fc bc 48 ee 1c 73 59 5a cc a8 c1 c7 a9 9b 1a ae c2 f1 b0 dc 7a 52 c6 8e b9 0e 33 93 9c d4 d2 20 98 65 47 43 49 e4 a6 42 10 73 8a 6d 96 6b 78 1b c3 b3 f8 8f c4 56 9a 55 b1 64 13 4a 03 b7 f7 54 72 4f e5 5f 49 ea f7 10 58 a5 b6 9d 62 e2 2b 5b 28 c4 31 28 38 e0 0c 64 d7 0b fb 3c f8 75 6d 74 cd 43 5e 93 02 7b 9c 43 6a f9 fb aa 39 6f d7 03 f3 ae b3 57 f2 2d 64 2c ec 8f 30 27 f1 af 4f 2f a2 9c 5c ce 1a f3 77 d8 6d d4 c9 2a 06 0f bf e9 54 d5 02 ca 08 00 8c e7 04 d3 74 fb b7 96 e0 43 29 c2 37 0a 71 d0 fa 55 7f 15 ea 91 e9 56 4f 35 b5 9b de 3a 91 c0 fb a3 df de bb 55 47 b1 36 7b 23 57 cb 85 ae a0 6b a9 92 08 19 82 ef 73 81 93 d0 7d 49 a6 f8 96 cc e9 97 8b 3a 65 a2 23 00 8e 6b c9 7c 57 e2 5d 53 c4 5a 49 b2 91 62 8a 44 90 4d 6f e5 ae 30 57 b1 35 77 45 f8 a3 2b 78 7a Data Ascii: HsYZzR3 eGCIBsmkxVUdJTrO_IXb+[(1(8d<umtC^{Cj9oW-d,0'O/\wm*TtC)7qUVO5:UG6{#Wks}I:e#k\|W]SZIbDMo0W5wE+xz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49745	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:19 UTC	1329	OUT	POST /recaptcha/api2/replaceimage?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 5150 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AH0dGfTDjo_6lo3yKf_fGIOK96eTV7k8EIGuODrjGz3yWFhwKVrzS5C5ULq1AFMLv0u6vTtvIzg_xSdPlfvX168; 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
2024-04-17 22:34:19 UTC	5150	OUT	Data Raw: 76 3d 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 26 63 3d 30 33 41 46 63 57 65 41 37 4a 43 76 47 73 6b 64 36 32 55 5a 58 75 72 30 65 6e 33 68 69 58 48 55 51 4a 38 42 4e 4a 73 5a 78 38 43 41 70 38 68 2d 77 4b 5f 32 44 66 5f 44 5f 7a 4b 5f 5a 38 73 62 6b 47 32 6e 4f 70 75 34 35 75 43 64 67 70 61 6e 5f 52 4a 4a 70 6b 72 68 50 46 54 71 71 70 50 34 76 37 65 4c 51 53 53 6b 35 49 52 4d 64 48 79 39 72 57 4e 6d 2d 66 44 55 5a 65 66 35 72 58 7a 7a 68 78 53 43 79 55 78 47 6d 4b 49 41 7a 38 4f 36 4d 50 43 54 63 30 39 6e 4b 70 70 35 31 54 39 39 73 75 71 74 6d 70 55 48 4c 61 6a 45 76 72 55 4f 46 31 33 5f 2d 64 63 6c 62 48 36 6d 43 48 37 4b 48 77 75 63 57 72 47 79 68 62 65 30 6a 57 69 41 43 68 75 77 56 6b 5f 4c 6c 34 31 78 78 4e 2d 44 41 62 Data Ascii: v=QoukH5jSO3sKFzVEA7Vc8VgC&c=03AFcWeA7JCvGskd62UZXur0en3hiXHUQJ8BNJsZx8CAp8h-wK_2Df_D_zK_Z8sbkG2nOpu45uCdgpan_RJJpkrhPFTqqpP4v7eLQSSk5IRMdHy9rWNm-fDUZef5rXzzhxSCyUxGmKIAz8O6MPCTc09nKpp51T99suqtmpUHLajEvrUOF13_-dclbH6mCH7KHwucWrGyhbe0jWiAChuwVk_Ll41xxN-DAb
2024-04-17 22:34:19 UTC	483	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Date: Wed, 17 Apr 2024 22:34:19 GMT Expires: Wed, 17 Apr 2024 22:34:19 GMT Cache-Control: private, max-age=0 X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-17 22:34:19 UTC	772	IN	Data Raw: 31 34 64 35 0d 0a 29 5d 7d 27 0a 5b 22 64 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 35 47 44 33 48 77 57 4b 63 6b 37 74 5f 45 34 6f 64 6b 36 6b 34 53 34 53 42 32 35 50 42 48 31 74 64 42 6a 6e 71 34 62 6c 66 48 33 6a 7a 32 72 76 74 4a 68 32 59 71 35 4e 5f 78 43 44 75 44 74 6a 6c 4e 52 74 77 42 36 78 73 46 35 6c 70 4d 67 57 45 77 6e 74 45 37 54 38 62 6e 39 63 47 48 4e 6c 67 57 68 37 53 4d 53 79 50 45 67 71 5f 57 2d 61 2d 39 35 69 39 36 58 5f 78 5f 77 53 78 4c 31 6a 66 46 33 45 30 58 4a 63 4c 44 41 48 4f 44 6e 6e 52 47 65 53 4f 4c 32 6f 4f 52 6d 63 48 6f 45 49 54 4d 70 5a 33 64 4f 6b 62 4f 65 37 39 73 53 38 74 39 61 68 67 48 61 6b 36 6e 43 4d 62 58 39 43 48 44 4e 49 59 65 54 69 63 6f 58 58 47 6a 35 49 79 6f 4c 6e 64 59 4d 45 52 5f 63 5f 56 2d 54 7a 70 5a Data Ascii: 14d5)]}'["dresp","03AFcWeA5GD3HwWKck7t_E4odk6k4S4SB25PBH1tdBjnq4blfH3jz2rvtJh2Yq5N_xCDuDtjlNRtwB6xsF5lpMgWEwntE7T8bn9cGHNlgWh7SMSyPEgq_W-a-95i96X_x_wSxL1jfF3E0XJcLDAHODnnRGeSOL2oORmcHoEITMpZ3dOkbOe79sS8t9ahgHak6nCMbX9CHDNIYeTicoXXGj5IyoLndYMER_c_V-TzpZ
2024-04-17 22:34:19 UTC	1255	IN	Data Raw: 68 32 58 37 36 79 52 67 71 2d 30 4f 32 72 62 4d 72 67 6f 39 50 36 6d 65 4e 30 63 58 38 57 76 53 4d 35 6e 49 61 43 68 52 5f 76 65 59 37 35 52 6e 78 64 30 61 65 2d 61 37 58 68 47 4c 71 62 72 68 6a 34 69 6d 52 68 50 57 7a 50 59 7a 33 45 51 30 42 75 42 6a 49 5a 45 2d 6d 69 61 6d 2d 35 5f 53 62 44 63 47 50 52 75 76 5f 34 61 58 68 65 64 56 45 58 69 78 7a 6a 73 69 52 69 59 42 4a 34 78 52 4f 63 4d 4a 76 61 4c 32 41 4b 51 64 4f 74 4c 57 6e 74 4f 73 5f 30 5a 70 75 51 58 30 78 30 7a 70 5f 79 5f 38 76 76 6f 5f 6a 4b 42 5f 55 54 50 4d 66 43 7a 6b 42 31 72 39 73 4f 31 76 35 35 74 66 73 48 69 30 74 6c 5f 77 58 63 36 30 33 46 49 2d 46 37 44 56 42 53 36 30 73 78 5f 47 5a 4c 66 70 4f 72 62 5f 6f 33 6a 33 4f 54 68 49 38 53 44 4a 6d 79 76 55 52 57 77 66 35 31 4f 69 43 69 42 Data Ascii: h2X76yRgq-0O2rbMrgo9P6meN0cX8WvSM5nIaChR_veY75Rnxd0ae-a7XhGLqbrhj4imRhPWzPYz3EQ0BuBjIZE-miam-5_SbDcGPRuv_4aXhedVEXixzjsiRiYBJ4xROcMJvaL2AKQdOtLWntOs_0ZpuQX0x0zp_y_8vvo_jKB_UTPMfCzkB1r9sO1v55tfsHi0tl_wXc603FI-F7DVBS60sx_GZLfpOrb_o3j3OThI8SDJmyvURWwf51OiCiB
2024-04-17 22:34:19 UTC	1255	IN	Data Raw: 36 46 53 42 56 44 43 47 72 4a 56 58 42 54 6c 30 6a 30 4a 46 6f 34 45 66 69 62 77 32 30 6f 61 4a 4f 4c 67 49 59 65 47 61 53 77 48 64 61 4d 39 49 35 31 38 42 57 48 2d 6f 4b 61 79 74 55 35 68 77 75 39 42 51 36 59 42 34 4e 47 61 4b 79 6c 2d 72 61 31 5a 75 47 57 79 63 35 2d 47 6b 6a 35 6a 58 66 39 4c 79 33 53 7a 77 49 74 65 45 71 62 55 31 5a 4d 6b 51 50 76 37 4c 44 30 7a 54 64 50 63 44 4d 44 5f 71 6a 68 66 30 74 78 55 5a 2d 31 41 50 61 2d 47 6c 68 33 5a 51 69 37 73 6a 57 63 79 6c 4a 61 5f 4b 35 74 4b 74 51 72 37 47 33 6f 53 55 42 4e 58 6a 38 66 6a 73 5a 59 55 4e 42 6a 68 50 56 61 61 73 43 6f 51 58 34 4e 57 54 37 77 65 59 7a 51 64 75 59 35 72 4a 57 71 69 50 54 4d 4d 33 54 66 74 56 73 6b 6f 75 51 38 76 77 47 41 50 78 65 64 57 6e 50 56 7a 6b 5f 5a 35 58 77 46 67 Data Ascii: 6FSBVDCGrJVXBTl0j0JFo4Efibw20oaJOLgIYeGaSwHdaM9I518BWH-oKaytU5hwu9BQ6YB4NGaKyl-ra1ZuGWyc5-Gkj5jXf9Ly3SzwIteEqbU1ZMkQPv7LD0zTdPcDMD_qjhf0txUZ-1APa-Glh3ZQi7sjWcylJa_K5tKtQr7G3oSUBNXj8fjsZYUNBjhPVaasCoQX4NWT7weYzQduY5rJWqiPTMM3TftVskouQ8vwGAPxedWnPVzk_Z5XwFg
2024-04-17 22:34:19 UTC	1255	IN	Data Raw: 6c 66 78 48 44 73 77 62 71 6b 4d 61 6d 35 6f 6c 46 64 42 73 45 63 78 53 33 79 53 34 70 6f 64 49 63 38 61 48 53 33 4d 57 62 6e 45 47 6e 5f 42 31 6b 59 63 65 74 58 74 61 41 39 6d 64 73 79 55 63 38 4d 59 52 53 34 70 33 70 36 6b 4e 77 64 76 4f 77 70 37 49 52 77 62 77 64 64 56 52 46 6c 4b 73 73 6d 31 63 5f 61 6d 48 75 6f 46 41 63 58 39 37 54 57 42 77 66 46 45 77 44 37 4d 55 52 4a 55 35 59 69 31 61 44 6b 35 34 4e 4f 55 75 41 65 36 7a 6a 44 53 5f 46 31 6c 4c 79 30 6a 6f 34 45 65 6e 5f 55 32 68 6b 47 59 37 73 68 6c 6a 44 56 4b 4a 4d 4f 67 53 6c 4c 71 71 4a 45 66 74 6f 2d 5f 34 35 44 71 43 50 39 47 37 44 77 6e 58 56 39 6e 41 5a 5f 75 5f 71 53 43 48 69 36 45 73 76 47 63 59 79 47 59 66 68 4f 37 34 69 31 68 4f 7a 43 33 71 4e 64 42 4a 4e 6b 47 6a 2d 7a 6f 42 4f 53 31 Data Ascii: lfxHDswbqkMam5olFdBsEcxS3yS4podIc8aHS3MWbnEGn_B1kYcetXtaA9mdsyUc8MYRS4p3p6kNwdvOwp7IRwbwddVRFlKssm1c_amHuoFAcX97TWBwfFEwD7MURJU5Yi1aDk54NOUuAe6zjDS_F1lLy0jo4Een_U2hkGY7shljDVKJMOgSlLqqJEfto-_45DqCP9G7DwnXV9nAZ_u_qSCHi6EsvGcYyGYfhO74i1hOzC3qNdBJNkGj-zoBOS1
2024-04-17 22:34:19 UTC	804	IN	Data Raw: 47 49 70 4e 58 5f 73 65 56 71 73 54 4b 65 37 55 57 4b 55 33 62 44 6d 61 4e 5f 55 70 6a 74 54 6f 74 4a 6f 4f 74 47 70 42 77 41 78 57 66 78 62 53 53 39 5a 46 4b 73 78 45 42 57 72 33 64 71 30 4a 41 47 66 79 4f 34 70 62 78 6e 6d 31 47 44 4a 79 56 51 57 52 31 33 78 78 76 57 46 6d 35 55 75 57 30 6f 56 56 65 54 5a 35 68 4c 6b 6a 68 4b 4f 74 6c 33 38 38 65 79 65 74 4a 6e 74 36 37 78 73 49 7a 6c 4b 61 39 4f 6f 61 59 37 35 57 64 77 75 35 6a 35 41 55 4b 56 62 33 79 36 77 4a 5a 56 52 5f 4b 7a 50 38 42 64 74 6b 4d 36 6c 6c 4a 5a 75 39 39 42 41 6a 61 4c 4b 36 4f 54 79 74 34 44 32 46 6e 47 36 33 6e 78 73 54 4a 52 56 37 4c 4a 2d 4c 72 55 30 70 42 71 74 5a 7a 76 34 36 46 50 45 33 51 5a 50 43 4c 42 6d 4e 6c 79 5a 70 72 6f 49 69 30 4c 61 2d 64 58 62 35 71 4e 58 53 4c 67 68 Data Ascii: GIpNX_seVqsTKe7UWKU3bDmaN_UpjtTotJoOtGpBwAxWfxbSS9ZFKsxEBWr3dq0JAGfyO4pbxnm1GDJyVQWR13xxvWFm5UuW0oVVeTZ5hLkjhKOtl388eyetJnt67xsIzlKa9OoaY75Wdwu5j5AUKVb3y6wJZVR_KzP8BdtkM6llJZu99BAjaLK6OTyt4D2FnG63nxsTJRV7LJ-LrU0pBqtZzv46FPE3QZPCLBmNlyZproIi0La-dXb5qNXSLgh
2024-04-17 22:34:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49746	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:19 UTC	1484	OUT	GET /recaptcha/api2/payload?p=06AFcWeA6390MQ8DygnJXJAL-TvHzhHeRJJhWSF1gDG6WF7wqk1KcpTF_O5TM7dY_ThYz9TWd7mUeaisqz6LyOJPlXda1gbp1HXHQkcHszzImEvsCk8rLwcyaY5fSuP6b9rSkVMKBjIXAQFm8iKh306ouedLCgZGwd6w6vlO7CNRI4MAsuO7XLnDkONHVnTZhpyAC0UVFJpXAl&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=2 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AH0dGfTDjo_6lo3yKf_fGIOK96eTV7k8EIGuODrjGz3yWFhwKVrzS5C5ULq1AFMLv0u6vTtvIzg_xSdPlfvX168; 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
2024-04-17 22:34:19 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Wed, 17 Apr 2024 22:34:19 GMT Date: Wed, 17 Apr 2024 22:34:19 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:34:19 UTC	1255	IN	Data Raw: 41 30 37 37 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: A077JFIFC!"$"$C"}!1AQa"q
2024-04-17 22:34:19 UTC	1255	IN	Data Raw: 86 94 00 06 07 a8 ef 55 07 65 70 e5 35 ec 21 58 63 c9 00 39 1c 93 de ad db 1d b3 27 53 82 2a b9 39 f9 7b e3 a1 a9 60 38 99 3e a0 54 3d ee 69 a2 45 af 14 9d d2 a3 37 3c 56 05 ae 16 e0 fb d6 df 88 ca f9 b1 8e 46 47 e5 58 56 a4 1b 83 80 79 34 9a 27 43 58 7d de 9d 3a f3 5d 2f c3 9f 11 c9 e1 7f 13 41 a9 a1 cc 60 81 20 3d c5 72 c0 e0 63 68 3e b4 b2 10 40 da bd e8 4b a1 0f c8 f4 3f da 95 34 4d 52 1d 2b c5 da 39 42 97 68 63 9b 68 e8 fd 79 af 06 5c 1d c4 f5 3c d7 a0 cd 3c b7 fe 18 d4 34 c9 58 9f 2d 7c e8 87 a1 15 e7 68 a4 9c 53 f6 5e cb 53 38 ca ee c4 b1 30 ce 08 c1 ed 53 0c b3 70 70 47 5a 88 29 23 04 7d 0d 05 c8 03 2a 78 ef 9a 6d 16 4e 59 07 56 20 8e d5 16 e1 9c ee cd 46 d2 17 7c ed 3f 5a 85 a4 f9 f1 cd 34 89 77 24 9d d7 a0 e2 a1 4e 98 51 8c 75 a4 98 9d 84 e0 e3 Data Ascii: Uep5!Xc9'S9{`8>T=iE7<VFGXVy4'CX}:]/A` =rch>@K?4MR+9Bhchy\<<4X-\|hS^S80SppGZ)#}xmNYV F\|?Z4w$NQu
2024-04-17 22:34:19 UTC	1255	IN	Data Raw: 09 35 2d 9e 0c ea be f9 24 d4 1f 74 e1 87 26 9f 6c c7 ce 5e 3b f7 a4 fb 0a 4c 9f c4 c7 f7 e0 10 4e 17 a8 ac 2b 26 cd cb 0c 60 7b d6 c7 8a 59 96 55 ec 76 f4 15 81 60 c4 ce 58 b7 39 aa 71 d4 94 cd ae 3a 8e 33 4e 4f 98 e7 ee e3 b9 a6 03 96 ca e0 10 2a 50 49 23 d4 9e 98 a4 21 d6 d2 88 6e 70 fc ab 8d 8d ef 9a e2 d9 00 9e 51 f2 80 1c e3 8f 7a ea 35 06 da c0 83 81 91 f9 d7 25 2b 96 94 b7 41 93 9a e8 9d 9d 24 cc 56 92 07 61 e6 63 38 03 a5 35 b2 47 1f 9d 36 59 41 41 93 8f c2 a2 32 1d 84 e0 e0 77 ac 4b bb 44 c3 cc 91 b6 0e 7d a9 ac 15 14 a9 04 37 a5 36 27 06 60 54 9e 7a d4 d3 0d d2 01 b7 8e b9 a3 a0 27 72 00 5c 8d bd 45 3a 2c 64 76 fa d3 5d 1e 39 71 da 9e b9 c0 ca 8f 4a ab 5d 14 96 83 94 8c f4 cd 1f 30 e5 79 a6 b3 95 ce 71 e9 52 db 88 d9 b0 c7 3e bc d2 d8 56 b0 c6 Data Ascii: 5-$t&l^;LN+&`{YUv`X9q:3NO*PI#!npQz5%+A$Vac85G6YAA2wKD}76'`Tz'r\E:,dv]9qJ]0yqR>V
2024-04-17 22:34:19 UTC	1255	IN	Data Raw: ae 21 24 02 19 b0 00 a8 e5 d4 46 8f 89 df 33 a8 ed b7 83 58 1a 68 02 e5 80 3d f3 5d 07 8a 40 f3 a2 19 c7 cb d2 b0 74 e2 05 c1 39 ee 6a c4 6d 02 a0 f1 8c e2 a4 05 86 d2 7e f7 bd 44 a3 83 d3 38 a7 48 fe 5a 6e 27 1c 7e 55 1c ac 1e 86 76 bb 36 23 92 4c 74 52 7f 2a e5 59 b0 79 27 69 39 c5 69 6b b7 65 c6 c2 78 63 83 f4 35 95 d5 77 81 92 38 02 b4 9e ca 26 7d 44 24 16 39 3f 40 69 f0 c3 e7 be d0 db 49 c2 f5 a8 32 47 0d da 9f 07 ca e1 95 f1 8e 70 28 48 d1 9b f1 f8 75 c8 c7 9e a0 95 eb e9 55 6e ec da d5 98 99 37 f3 f2 d4 f0 ea 08 36 34 d2 30 7e 36 00 7f 9d 67 49 34 92 4a c5 9b 20 31 3d 7a 54 cb 72 6d 6d 05 1f 78 3e 33 91 f3 7b 53 91 71 19 c8 eb d2 96 da 36 94 92 a4 11 dc d2 79 81 65 da c3 20 76 a1 30 6f 42 38 a2 57 ea 01 db d6 9f 18 2a 73 1c 60 e7 d6 91 f9 25 80 0a Data Ascii: !$F3Xh=]@t9jm~D8HZn'~Uv6#LtRYy'i9ikexc5w8&}D$9?@iI2Gp(HuUn7640~6gI4J 1=zTrmmx>3{Sq6ye v0oB8Ws`%
2024-04-17 22:34:19 UTC	1255	IN	Data Raw: 49 5c 0b 9a 75 b3 5c 3c 8a a6 52 c1 38 28 71 83 db 34 c8 d1 a3 76 49 b7 2f 66 52 6b 43 c2 b2 88 ef 0f 9a ca 06 de 86 92 ff 00 c9 9a ea 69 e5 2b bb 38 50 3b 8a a4 ac 64 c4 86 76 78 0c 45 f8 71 f2 1a d6 d3 a6 56 86 d6 16 44 12 a3 8e 7d 45 63 5e 5c 44 23 8c ac 0d 19 23 a9 15 a9 e1 d2 b3 ce 3f 7a bb 81 18 fa 55 34 b7 b8 93 35 7c 54 71 3a b6 57 ee f6 15 81 a6 11 e7 91 8e f5 d4 f8 8a d3 cd 43 31 99 7e 55 e9 9a e4 ad d7 cb ba 51 bc 72 33 9d dd 29 27 cd a1 66 fe f5 5e 1b 93 db de b2 75 5b d5 08 c0 36 15 4f cf df ff 00 d7 50 de 6a 18 42 a5 f9 2b ce 39 ae 7e f6 ee 59 8b 2b 29 45 1d bd bd eb 58 c5 43 5b ea 44 b5 19 71 28 96 66 62 c7 6f bf a5 31 49 c8 f9 b2 33 4d c3 15 fb cb 8e d4 e8 0b 64 7c a0 e3 ad 63 2f 79 dc 12 d0 74 9b 77 fd de 7b 7b d5 98 22 57 c1 0c 03 67 04 Data Ascii: I\u\<R8(q4vI/fRkCi+8P;dvxEqVD}Ec^\D##?zU45\|Tq:WC1~UQr3)'f^u[6OPjB+9~Y+)EXC[Dq(fbo1I3Md\|c/ytw{{"Wg
2024-04-17 22:34:19 UTC	1255	IN	Data Raw: 06 d2 23 19 8c 12 33 58 2d 73 73 24 d9 32 6e 18 c1 cd 68 e8 0e 22 33 22 a9 7d d1 9c f7 14 69 d0 6a 3a 19 1b 9c 8e 4e 54 f4 f6 a4 23 3d e9 c4 90 e4 b0 04 64 e3 1d a9 c5 46 dc 85 eb 50 96 b6 65 45 91 ed 19 dc 1a 89 33 f7 54 b1 3d e8 6c a2 f5 03 eb 51 bb 82 32 a4 ee 1d 46 7a d5 f2 0d 88 59 9b e5 e5 7d f1 51 28 60 4f 23 1e e2 a6 23 2b 96 dd 9f 4a 61 5e 7a 1f ce a5 5e e4 32 ce 9f 34 49 71 99 e2 f3 17 1e bc 0a d1 b9 86 dd 42 4f 12 f2 bc fb 1a 8b c3 da 72 5e dd 98 e4 7d a8 ab 92 31 d6 9d aa c6 d0 cc d9 63 e5 af 0a 3d 69 c9 36 49 bd 76 d6 ba 96 91 03 82 b1 cd 18 da c8 07 26 a3 d2 2d a1 b5 bf 44 62 a7 7f 03 1d aa 95 aa 47 22 28 0f 87 23 77 5c 55 ed 2e 06 8f 51 5d d8 39 e7 2d eb 44 12 b8 ba dc d8 f1 25 a1 6d 39 a7 84 94 7c 8e 07 a5 72 6f a6 de 99 97 63 33 f9 9d 36 Data Ascii: #3X-ss$2nh"3"}ij:NT#=dFPeE3T=lQ2FzY}Q(`O##+Ja^z^24IqBOr^}1c=i6Iv&-DbG"(#w\U.Q]9-D%m9\|roc36
2024-04-17 22:34:19 UTC	1255	IN	Data Raw: 68 a2 06 52 14 ba f2 ae 3d ab 8a 99 84 92 b4 84 72 e4 93 f8 d6 9e a1 2c af a7 c3 1c 92 33 95 42 57 71 e9 f8 56 46 ff 00 98 00 39 af a9 85 15 4d 5d 2d 4c 2f 72 42 3b 8c 7b 62 b7 fc 10 c3 fb 4c 02 79 c1 e9 5c fb 91 90 46 79 ec 2b 6b c1 aa c3 55 0d fe ce 48 1d ab 54 c4 d1 73 c4 98 30 b1 e4 fe f0 e0 56 7f 86 e4 09 1d c0 5b 71 34 8c 84 28 f4 35 7b 5a c4 b6 b2 10 48 c3 9c 8a c7 d3 26 9e d9 a4 4b 71 fc 39 e7 ad 4c 86 88 af 80 b3 4c 4e a0 92 73 b4 73 8a e8 3c 22 b0 ff 00 65 5e 48 aa bb c2 e3 f0 ae 5e f2 3b a9 63 0c c8 c4 b3 64 f7 ae 93 c1 df bb d1 2f 44 8a 54 ed 3d b9 a7 4a 29 97 27 63 9d 98 0c 30 51 8c 12 46 3b d4 49 2b 05 e4 1c fd 6a 47 71 bf 60 19 3c f3 4c 24 fa 51 d4 82 37 39 6e 78 a0 a2 83 b8 01 c0 a4 63 9c fc bd 28 23 0a 7b 1c 53 bb 62 b8 bd 94 f2 73 4b c0 Data Ascii: hR=r,3BWqVF9M]-L/rB;{bLy\Fy+kUHTs0V[q4(5{ZH&Kq9LLNss<"e^H^;cd/DT=J)'c0QF;I+jGq`<L$Q79nxc(#{SbsK
2024-04-17 22:34:19 UTC	1255	IN	Data Raw: 3e 8c 7c e4 48 8f 9d b9 71 c9 1d 05 67 34 77 fa 6d 92 94 e2 57 fb eb dc 7f 85 53 b4 99 06 a2 87 5c 57 8e dc f2 ca 3a 9a e7 85 5e 67 60 f5 2c f8 5b 49 d3 f5 22 da cd b5 e2 c3 3e f2 5a 33 ce e3 d6 b0 fe 25 78 91 63 b6 fe c0 8b 4e 78 66 24 79 93 37 56 15 d1 78 13 4f d0 1f 54 98 da 48 e2 eb cc 2d 1f cd f2 ed cf 71 50 7c 5e b0 83 50 d5 6d 24 b7 80 bd cc 79 32 48 3a 6d 02 b2 a3 56 d8 b4 a5 b1 52 8e 97 3c 9f 50 b6 b9 2d 24 fe 53 ac 48 00 04 0e 2b 2f 63 12 bf 2f 27 da bd 15 a6 ba bd d0 7f b2 d6 d8 24 0d 27 cd 32 8c 91 f5 ac b1 a6 35 aa cf 69 68 22 b9 93 1c 16 eb f8 57 d3 2c 72 93 b3 32 51 b1 c6 3a f4 18 c1 1e 87 91 5b be 08 6c ea 60 b9 f9 42 f4 1f ce a8 6a 9a 6d fd 94 b2 2d c5 b3 c6 54 6e 39 15 3f 83 a4 27 50 f9 17 90 33 cf 7a ee a4 d4 d5 d0 a5 a1 a1 ab 4a 2d cb Data Ascii: >\|Hqg4wmWS\W:^g`,[I">Z3%xcNxf$y7VxOTH-qP\|^Pm$y2H:mVR<P-$SH+/c/'$'25ih"W,r2Q:[l`Bjm-Tn9?'P3zJ-
2024-04-17 22:34:19 UTC	1255	IN	Data Raw: f5 f4 1a 9e 9a 44 69 1e 4c b1 81 82 40 ef 5a 46 bc 65 1b 4b 73 4b 0d b8 d7 6e ef a2 4b 23 6b 15 a3 c7 ca cb 9c 33 10 7a 56 15 f6 af 71 25 85 cc e9 22 99 d0 85 23 1d 86 6b ac 81 74 6d 5b c4 76 72 c7 6a eb 0c 71 7c f1 a9 dc c5 bd ab 97 d7 3c 29 a9 4f 77 a9 a6 99 0c b2 40 1c bb 22 0f 99 47 bd 5d 2a 76 66 2e f7 32 6c 63 ba d4 e4 69 af 26 f2 61 00 7c b9 1c 7d 2a d4 66 f6 3b b8 7c 99 1a 4b 28 e4 1e 5e 47 7f 5c d5 5d 13 c3 b7 1a 9c 78 37 be 5a 86 db b5 9b a7 ad 76 f6 be 1b b0 83 c3 33 5b fd b2 4f ed 00 c0 40 fd 63 cf bf b5 6c d7 33 e5 4c 13 66 45 e6 a1 e5 4e b7 77 72 30 88 82 58 91 c7 d6 b2 2d ee f4 bd 73 53 11 5d 34 b2 2a 1c 2a 8e 37 57 55 e2 3d 01 ee b4 01 6b 73 70 8d 70 80 6f 68 86 e5 db de b0 7c 3b e0 f8 6d b3 76 f7 7b 8b b1 55 0a 70 cb ef 4e 38 78 d3 e6 6d Data Ascii: DiL@ZFeKsKnK#k3zVq%"#ktm[vrjq\|<)Ow@"G]vf.2lci&a\|}f;\|K(^G\]x7Zv3[O@cl3LfENwr0X-sS]4**7WU=ksppoh\|;mv{UpN8xm
2024-04-17 22:34:19 UTC	1003	IN	Data Raw: 6a ea 51 b8 2a 76 f9 87 a2 e2 ab df 19 2e bc b8 ce d5 e7 1f 2d 72 be 6c aa 46 1f 9f af 35 a3 e1 c9 25 7b c2 64 76 6c 72 01 ae 8a 69 39 58 c6 4d 9d 55 a2 59 41 07 96 2e 11 d9 3a ee ac 3b b9 cc 5a 80 66 60 eb 9c 80 2a de a1 14 68 15 8a 80 08 2c 48 15 cc 34 a4 a7 de 27 1d e9 55 8a 4c 29 eb b9 d8 2e a0 bb 47 cb 6b d3 b8 e6 8a e2 37 cb ff 00 3d 80 a2 b3 d0 da c7 69 e3 49 6e 2c ef 23 76 9c 48 43 06 6d ad 57 ac 35 fd 52 ee df 7a bb f9 49 ce e1 c9 03 15 ca dc 6a 2f 3b 23 4c c2 56 51 b4 8c 73 f9 d5 c4 d7 22 11 e2 c6 16 b7 63 80 d8 3f 2b 01 ed 5f 35 3c 32 54 f9 6c 1e d0 f5 5b 5d 43 52 ba b4 b5 b9 85 61 9e 5d b8 3e 67 04 8a 9a 7d 46 75 69 ad 95 22 5b ad 99 54 03 ae 6b 8c d2 75 79 a4 8c 5d 4b 18 f2 d2 3d a4 2f 02 a6 bd d6 26 8a 7f ed 56 b5 62 d2 2f 97 18 5e a3 1d eb Data Ascii: jQv.-rlF5%{dvlri9XMUYA.:;Zf`h,H4'UL).Gk7=iIn,#vHCmW5RzIj/;#LVQs"c?+_5<2Tl[]CRa]>g}Fui"[Tkuy]K=/&Vb/^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49747	172.253.124.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:19 UTC	879	OUT	GET /recaptcha/api2/replaceimage?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AH0dGfTDjo_6lo3yKf_fGIOK96eTV7k8EIGuODrjGz3yWFhwKVrzS5C5ULq1AFMLv0u6vTtvIzg_xSdPlfvX168; 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
2024-04-17 22:34:19 UTC	473	IN	HTTP/1.1 405 Method Not Allowed Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 17 Apr 2024 22:34:19 GMT Content-Type: text/html; charset=utf-8 Allow: POST X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-17 22:34:19 UTC	782	IN	Data Raw: 36 37 36 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 Data Ascii: 676<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;c
2024-04-17 22:34:19 UTC	879	IN	Data Raw: 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 30 25 20 30 25 2f 31 30 30 25 20 31 30 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 Data Ascii: color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.c
2024-04-17 22:34:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49748	172.253.124.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:19 UTC	1088	OUT	GET /recaptcha/api2/payload?p=06AFcWeA6390MQ8DygnJXJAL-TvHzhHeRJJhWSF1gDG6WF7wqk1KcpTF_O5TM7dY_ThYz9TWd7mUeaisqz6LyOJPlXda1gbp1HXHQkcHszzImEvsCk8rLwcyaY5fSuP6b9rSkVMKBjIXAQFm8iKh306ouedLCgZGwd6w6vlO7CNRI4MAsuO7XLnDkONHVnTZhpyAC0UVFJpXAl&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=2 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AH0dGfTDjo_6lo3yKf_fGIOK96eTV7k8EIGuODrjGz3yWFhwKVrzS5C5ULq1AFMLv0u6vTtvIzg_xSdPlfvX168; 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
2024-04-17 22:34:20 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Wed, 17 Apr 2024 22:34:20 GMT Date: Wed, 17 Apr 2024 22:34:20 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:34:20 UTC	1255	IN	Data Raw: 41 30 37 37 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: A077JFIFC!"$"$C"}!1AQa"q
2024-04-17 22:34:20 UTC	1255	IN	Data Raw: 86 94 00 06 07 a8 ef 55 07 65 70 e5 35 ec 21 58 63 c9 00 39 1c 93 de ad db 1d b3 27 53 82 2a b9 39 f9 7b e3 a1 a9 60 38 99 3e a0 54 3d ee 69 a2 45 af 14 9d d2 a3 37 3c 56 05 ae 16 e0 fb d6 df 88 ca f9 b1 8e 46 47 e5 58 56 a4 1b 83 80 79 34 9a 27 43 58 7d de 9d 3a f3 5d 2f c3 9f 11 c9 e1 7f 13 41 a9 a1 cc 60 81 20 3d c5 72 c0 e0 63 68 3e b4 b2 10 40 da bd e8 4b a1 0f c8 f4 3f da 95 34 4d 52 1d 2b c5 da 39 42 97 68 63 9b 68 e8 fd 79 af 06 5c 1d c4 f5 3c d7 a0 cd 3c b7 fe 18 d4 34 c9 58 9f 2d 7c e8 87 a1 15 e7 68 a4 9c 53 f6 5e cb 53 38 ca ee c4 b1 30 ce 08 c1 ed 53 0c b3 70 70 47 5a 88 29 23 04 7d 0d 05 c8 03 2a 78 ef 9a 6d 16 4e 59 07 56 20 8e d5 16 e1 9c ee cd 46 d2 17 7c ed 3f 5a 85 a4 f9 f1 cd 34 89 77 24 9d d7 a0 e2 a1 4e 98 51 8c 75 a4 98 9d 84 e0 e3 Data Ascii: Uep5!Xc9'S9{`8>T=iE7<VFGXVy4'CX}:]/A` =rch>@K?4MR+9Bhchy\<<4X-\|hS^S80SppGZ)#}xmNYV F\|?Z4w$NQu
2024-04-17 22:34:20 UTC	1255	IN	Data Raw: 09 35 2d 9e 0c ea be f9 24 d4 1f 74 e1 87 26 9f 6c c7 ce 5e 3b f7 a4 fb 0a 4c 9f c4 c7 f7 e0 10 4e 17 a8 ac 2b 26 cd cb 0c 60 7b d6 c7 8a 59 96 55 ec 76 f4 15 81 60 c4 ce 58 b7 39 aa 71 d4 94 cd ae 3a 8e 33 4e 4f 98 e7 ee e3 b9 a6 03 96 ca e0 10 2a 50 49 23 d4 9e 98 a4 21 d6 d2 88 6e 70 fc ab 8d 8d ef 9a e2 d9 00 9e 51 f2 80 1c e3 8f 7a ea 35 06 da c0 83 81 91 f9 d7 25 2b 96 94 b7 41 93 9a e8 9d 9d 24 cc 56 92 07 61 e6 63 38 03 a5 35 b2 47 1f 9d 36 59 41 41 93 8f c2 a2 32 1d 84 e0 e0 77 ac 4b bb 44 c3 cc 91 b6 0e 7d a9 ac 15 14 a9 04 37 a5 36 27 06 60 54 9e 7a d4 d3 0d d2 01 b7 8e b9 a3 a0 27 72 00 5c 8d bd 45 3a 2c 64 76 fa d3 5d 1e 39 71 da 9e b9 c0 ca 8f 4a ab 5d 14 96 83 94 8c f4 cd 1f 30 e5 79 a6 b3 95 ce 71 e9 52 db 88 d9 b0 c7 3e bc d2 d8 56 b0 c6 Data Ascii: 5-$t&l^;LN+&`{YUv`X9q:3NO*PI#!npQz5%+A$Vac85G6YAA2wKD}76'`Tz'r\E:,dv]9qJ]0yqR>V
2024-04-17 22:34:20 UTC	339	IN	Data Raw: ae 21 24 02 19 b0 00 a8 e5 d4 46 8f 89 df 33 a8 ed b7 83 58 1a 68 02 e5 80 3d f3 5d 07 8a 40 f3 a2 19 c7 cb d2 b0 74 e2 05 c1 39 ee 6a c4 6d 02 a0 f1 8c e2 a4 05 86 d2 7e f7 bd 44 a3 83 d3 38 a7 48 fe 5a 6e 27 1c 7e 55 1c ac 1e 86 76 bb 36 23 92 4c 74 52 7f 2a e5 59 b0 79 27 69 39 c5 69 6b b7 65 c6 c2 78 63 83 f4 35 95 d5 77 81 92 38 02 b4 9e ca 26 7d 44 24 16 39 3f 40 69 f0 c3 e7 be d0 db 49 c2 f5 a8 32 47 0d da 9f 07 ca e1 95 f1 8e 70 28 48 d1 9b f1 f8 75 c8 c7 9e a0 95 eb e9 55 6e ec da d5 98 99 37 f3 f2 d4 f0 ea 08 36 34 d2 30 7e 36 00 7f 9d 67 49 34 92 4a c5 9b 20 31 3d 7a 54 cb 72 6d 6d 05 1f 78 3e 33 91 f3 7b 53 91 71 19 c8 eb d2 96 da 36 94 92 a4 11 dc d2 79 81 65 da c3 20 76 a1 30 6f 42 38 a2 57 ea 01 db d6 9f 18 2a 73 1c 60 e7 d6 91 f9 25 80 0a Data Ascii: !$F3Xh=]@t9jm~D8HZn'~Uv6#LtRYy'i9ikexc5w8&}D$9?@iI2Gp(HuUn7640~6gI4J 1=zTrmmx>3{Sq6ye v0oB8Ws`%
2024-04-17 22:34:20 UTC	1255	IN	Data Raw: 45 6f 51 c0 a6 19 1c 30 19 24 77 cd 27 22 53 ba 1c 1d 64 60 aa 70 47 61 53 22 1c e7 77 39 fc 6a 04 5c e5 81 00 d4 a3 ee e7 9c 8e a6 a6 4c 2c 4b 38 f2 f1 b5 81 34 8c e1 d4 16 19 c0 e6 9a 06 e1 96 3d 68 dc 14 ed 15 99 68 46 41 b3 70 e0 53 77 93 c0 66 02 90 b9 61 81 8d b4 e1 e5 91 c3 62 ac 68 61 1c f5 34 54 c3 7e 3e ee 68 a7 71 9f 42 f8 b7 59 d2 d2 c5 6d 16 ce 35 86 25 3b 24 5c 06 2b 5e 57 6b 6d 36 a1 a8 0b 68 35 14 89 13 2e 59 cd 71 57 9a bd d9 0b 6b 35 d4 92 29 18 27 71 e0 57 49 e1 2b 28 d2 72 ce 1e 54 71 b5 4b b6 33 5e 1a a1 ec a1 71 39 73 3d 06 dc ea 37 36 6e 60 bd 97 cd 8f 79 08 e7 a7 e7 5d 1e 97 e2 27 d3 60 89 1c 86 47 8c 86 75 e4 e3 d0 1a c1 f1 15 ad bd d2 a4 4b 23 48 d1 ca 55 e1 03 05 47 ae 6a bf 87 6f 22 f3 25 d3 ee 63 66 b7 df fb a6 61 82 0d 5b d6 Data Ascii: EoQ0$w'"Sd`pGaS"w9j\L,K84=hhFApSwfabha4T~>hqBYm5%;$\+^Wkm6h5.YqWk5)'qWI+(rTqK3^q9s=76n`y]'`GuK#HUGjo"%cfa[
2024-04-17 22:34:20 UTC	1255	IN	Data Raw: d8 00 f3 d7 b5 74 b7 3a 93 c3 04 2b 18 f9 80 1c 0e f4 9c 52 1e 86 05 c4 26 09 9a 23 b4 90 7b 1a 44 c0 4c 0f bd 9e 2a 7b a7 69 0f 98 4a 87 24 e6 a1 5d c5 80 18 6a 8b 8e c3 8b e3 3f 29 24 f0 4d 2a ca 07 ca 41 23 a0 34 c2 8c 5c 06 07 9a 94 c6 aa a5 07 4a 4d 80 88 d2 23 02 18 82 7a 1f 41 53 f9 9b c6 c6 6a 6a 46 09 e4 f5 1d 7d 29 60 8c 1b a4 18 3d 47 34 9b 01 0a 90 3e 62 3a f1 80 69 72 0b 90 0f 35 bb 7a 60 78 d9 3c b0 ac 17 00 f7 cd 66 cd 66 cb 6f e7 47 c0 5e fe b5 0d d8 69 34 56 08 00 ca f5 f4 a7 2c 8c bc 95 c0 3d 41 a8 ce 46 0e 6a 68 6e 22 4f f5 ca 5c f4 a4 d5 cd 54 7a 8a 8a cf cc 7c 8e f4 e6 5d 91 ac 80 82 dd 30 6a 27 94 ab fe e8 14 0c 7a 0a 1c 79 8e 54 36 3b 9c d2 d8 ce 43 8c 64 21 90 03 b4 ff 00 3a 23 5d a3 25 97 20 e3 14 fd cc ca 17 a8 5f e1 a7 46 a0 b8 Data Ascii: t:+R&#{DL{iJ$]j?)$MA#4\JM#zASjjF})`=G4>b:ir5z`x<ffoG^i4V,=AFjhn"O\Tz\|]0j'zyT6;Cd!:#]% _F
2024-04-17 22:34:20 UTC	1255	IN	Data Raw: 36 48 df e5 38 18 a4 87 6e ed a3 3b 98 f1 56 1a 36 56 1c 16 3d 32 3b d2 5b a6 6e 13 eb 81 ed 5a ad 85 d0 e8 f4 1b 44 92 d2 69 27 54 05 57 08 36 f5 35 2a da 5b 26 9a 6e 25 07 ce 53 80 a0 55 cb 07 96 0b 13 11 00 a1 ef 4f b8 9c 0b 57 05 37 65 70 3d aa 56 e1 a5 8a 0f 26 ed 1a 66 28 15 cf 19 c5 73 01 70 80 af 39 3d 6b a5 b9 70 9a 14 a5 97 93 c0 ae 6d c7 c8 01 3f 80 ab 6e f2 17 29 2d a8 df 22 a9 5c f3 de ba 3b 0b 48 cd ca 17 89 59 4f 07 3c e3 8a c0 d3 fe 5b 94 27 a0 35 d8 59 a8 69 c6 00 18 19 c6 2b 19 3b c8 a5 13 9c d5 a3 48 ef e4 8d 00 0a 29 ba 5c 51 bd d4 4a c0 10 4f 7a 97 5e 05 75 09 01 38 cf a5 26 88 a0 df c2 08 e3 b7 bd 53 dc 57 77 21 d5 02 8b e9 14 36 d0 bd 07 a5 56 5f bb 83 9c fb 55 ad 61 42 ea 53 f4 03 3d 07 35 04 6b 8f e2 18 f5 a5 70 16 34 76 04 03 f5 Data Ascii: 6H8n;V6V=2;[nZDi'TW65*[&n%SUOW7ep=V&f(sp9=kpm?n)-"\;HYO<['5Yi+;H)\QJOz^u8&SWw!6V_UaBS=5kp4v
2024-04-17 22:34:20 UTC	1255	IN	Data Raw: 75 00 8d b4 85 eb c7 14 82 e7 46 85 11 15 dd e4 c7 2b 8e 94 cb 6b 8b 19 35 48 92 d6 52 d9 fb f9 18 a8 a6 9a 96 a3 37 e6 5d d6 cc a7 1c e0 72 6a c6 87 08 91 d5 80 c1 07 69 60 39 fa 7d 2a 0b 92 82 dc 39 2f 91 ef 4f d2 2f 62 49 82 60 86 c6 71 fd 73 f4 a5 59 9a d2 57 35 75 88 33 09 db ea 0e 33 ef 5c 2f 89 2d f6 03 22 ec ca 92 ad 91 d0 9a f4 26 b9 86 78 8b 34 84 af 61 5c 77 8c d6 37 8f 7c 41 47 60 07 43 5c f0 6e e5 cd 68 70 93 28 89 b6 c6 cd 8e 83 35 54 ee 8e 4d cc 70 73 56 a6 57 1e 6b 72 59 79 cf a8 aa 72 8c 82 79 c0 e9 9f 5a ed 5a 1c e7 53 67 34 af 02 6e fb b8 ab 4b 1e f0 46 4f 23 35 8b a5 ea 11 8b 60 8e 7e 61 57 bf b4 23 c8 cb 64 63 b5 66 f7 1d 83 5b 39 d2 18 64 82 58 0a e7 c2 1c 0c 9c 67 d3 a9 ad 6d 5a ea 39 ac 95 10 e3 92 4d 66 29 20 ab 76 20 11 fc a9 f4 Data Ascii: uF+k5HR7]rji`9}*9/O/bI`qsYW5u33\/-"&x4a\w7\|AG`C\nhp(5TMpsVWkrYyryZZSg4nKFO#5`~aW#dcf[9dXgmZ9Mf) v
2024-04-17 22:34:20 UTC	1255	IN	Data Raw: 19 c7 4e d5 05 fe 21 d2 e6 58 f1 b4 21 e3 1c d2 84 1a 7a 8a 55 2e ac 79 7b e5 5c 9c e0 9c 80 28 43 fc 3c 12 69 8e 37 02 49 ee 69 47 11 8d bf 7b d4 53 1a d4 1b 01 f6 a9 1b bd 2a 42 06 32 ca 4f 6a 8d 48 38 38 e9 df 1c d3 8b 03 9c 93 49 a0 e5 1c 41 c3 73 d3 ee d3 15 f7 e7 2b 82 29 63 7f 98 ed a6 33 e1 89 61 f4 22 95 86 f4 2d d9 43 24 ec 42 31 c0 19 20 55 8b 89 9e 45 45 65 e4 7e 75 27 85 ae 63 4b cd a4 60 38 c6 71 56 af 6c c7 99 e6 47 1e 50 bf 25 4e 4d 4b 8b e8 66 e4 ae 65 2c cc ae 44 80 93 df 9f eb 5a 7e 14 45 fe d3 04 12 49 cf 5e a2 b4 ee 3c 36 f3 00 d1 ba 86 65 e6 a5 d1 34 39 ac 2e 44 92 b8 60 3d 0d 38 a9 5f 54 26 f4 3a 1b 85 0f 6a 53 24 12 bf 85 66 c4 af 0b 6e 0c 4b 6e c1 cf 7f fe b5 69 ba b1 8c 31 2c b8 1c 71 c1 a8 22 45 2c 24 dc 3a 70 4f 4c fd 2a 2a 41 Data Ascii: N!X!zU.y{\(C<i7IiG{SB2OjH88IAs+)c3a"-C$B1 UEEe~u'cK`8qVlGP%NMKfe,DZ~EI^<6e49.D`=8_T&:jS$fnKni1,q"E,$:pOL*A
2024-04-17 22:34:20 UTC	1255	IN	Data Raw: 5b c8 e2 8d 0d a4 87 7a 33 fd e5 63 da b8 8f 15 4a 9a 3d e7 9a 36 13 b8 95 60 7a d7 49 a8 e9 72 b5 dc 89 6d 78 fe 5c 8b 82 91 a9 c0 ac 0d 43 c0 57 d7 53 ec 9e f3 72 b7 dc cf 38 af 6b 0b 86 9f 35 e5 b1 ce eb 41 68 71 ba ce bf 7d ac bf 96 aa cd 24 a3 69 38 ed 4b a3 68 7a b4 3a a2 47 e5 f9 6e dc 0c 9c 02 3d eb a0 ff 00 84 3b 52 d0 b5 55 65 82 4b 84 51 b9 65 55 c8 cf d2 93 51 d5 16 df 4f 9a ce 7b 3b b9 ee ce 4a 4c 01 50 8f db 3e c2 bd 8e 77 4d 5a 99 9b 9a 96 e7 3d e2 cb db 9d 3e f9 f4 a9 e3 80 f9 78 f3 36 1c e7 f1 ac 1b 5d 46 6b 7b df b4 db 82 88 1b 38 1d ea bd f3 5c cd 33 49 3e f2 e4 e5 8b 54 41 f0 84 63 ad 76 d2 a8 d5 b5 23 73 af 4f 1d 4d b4 e6 d1 7e 86 a3 ba f1 a4 93 db bc 1f 64 45 0c 31 91 5c 7c 72 1c e1 45 4c 87 f8 88 cd 6c e6 d8 92 44 c3 e6 27 8c 64 e6 Data Ascii: [z3cJ=6`zIrmx\CWSr8k5Ahq}$i8Khz:Gn=;RUeKQeUQO{;JLP>wMZ=>x6]Fk{8\3I>TAcv#sOM~dE1\\|rELlD'd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49749	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:24 UTC	1327	OUT	POST /recaptcha/api2/userverify?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 7108 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AH0dGfTDjo_6lo3yKf_fGIOK96eTV7k8EIGuODrjGz3yWFhwKVrzS5C5ULq1AFMLv0u6vTtvIzg_xSdPlfvX168; 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
2024-04-17 22:34:24 UTC	7108	OUT	Data Raw: 76 3d 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 26 63 3d 30 33 41 46 63 57 65 41 35 47 44 33 48 77 57 4b 63 6b 37 74 5f 45 34 6f 64 6b 36 6b 34 53 34 53 42 32 35 50 42 48 31 74 64 42 6a 6e 71 34 62 6c 66 48 33 6a 7a 32 72 76 74 4a 68 32 59 71 35 4e 5f 78 43 44 75 44 74 6a 6c 4e 52 74 77 42 36 78 73 46 35 6c 70 4d 67 57 45 77 6e 74 45 37 54 38 62 6e 39 63 47 48 4e 6c 67 57 68 37 53 4d 53 79 50 45 67 71 5f 57 2d 61 2d 39 35 69 39 36 58 5f 78 5f 77 53 78 4c 31 6a 66 46 33 45 30 58 4a 63 4c 44 41 48 4f 44 6e 6e 52 47 65 53 4f 4c 32 6f 4f 52 6d 63 48 6f 45 49 54 4d 70 5a 33 64 4f 6b 62 4f 65 37 39 73 53 38 74 39 61 68 67 48 61 6b 36 6e 43 4d 62 58 39 43 48 44 4e 49 59 65 54 69 63 6f 58 58 47 6a 35 49 79 6f 4c 6e 64 59 4d 45 52 5f Data Ascii: v=QoukH5jSO3sKFzVEA7Vc8VgC&c=03AFcWeA5GD3HwWKck7t_E4odk6k4S4SB25PBH1tdBjnq4blfH3jz2rvtJh2Yq5N_xCDuDtjlNRtwB6xsF5lpMgWEwntE7T8bn9cGHNlgWh7SMSyPEgq_W-a-95i96X_x_wSxL1jfF3E0XJcLDAHODnnRGeSOL2oORmcHoEITMpZ3dOkbOe79sS8t9ahgHak6nCMbX9CHDNIYeTicoXXGj5IyoLndYMER_
2024-04-17 22:34:24 UTC	483	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Wed, 17 Apr 2024 22:34:24 GMT Expires: Wed, 17 Apr 2024 22:34:24 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-17 22:34:24 UTC	596	IN	Data Raw: 32 34 64 0d 0a 29 5d 7d 27 0a 5b 22 75 76 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 34 55 2d 76 68 67 79 72 72 72 6a 30 32 44 78 53 4a 2d 57 69 77 75 62 7a 74 33 76 72 69 69 6a 38 71 6a 32 62 48 31 44 33 6f 45 57 71 59 58 41 6f 68 59 46 54 33 78 6e 4d 52 51 4e 7a 49 36 79 4d 42 5a 76 43 46 74 32 4d 74 38 52 4e 65 63 71 79 37 39 6d 35 47 4b 72 50 38 38 41 6a 71 51 34 59 4e 70 6f 46 6d 61 44 65 70 50 65 31 48 35 72 6a 37 67 47 72 69 54 48 63 6c 2d 49 78 59 4d 30 43 77 6d 70 33 41 76 78 39 6a 78 73 5a 4a 70 41 38 53 4a 39 67 56 38 73 2d 70 34 55 32 47 4c 61 6b 44 74 4e 4f 63 74 66 70 6f 4b 32 49 59 58 51 75 71 4f 67 48 34 69 55 6b 6f 41 6b 38 42 66 53 62 63 44 6b 73 70 77 68 4e 78 70 6d 72 33 51 39 77 34 42 4a 66 31 68 77 7a 30 72 4b 45 49 64 6a 47 6f 6d Data Ascii: 24d)]}'["uvresp","03AFcWeA4U-vhgyrrrj02DxSJ-Wiwubzt3vriij8qj2bH1D3oEWqYXAohYFT3xnMRQNzI6yMBZvCFt2Mt8RNecqy79m5GKrP88AjqQ4YNpoFmaDepPe1H5rj7gGriTHcl-IxYM0Cwmp3Avx9jxsZJpA8SJ9gV8s-p4U2GLakDtNOctfpoK2IYXQuqOgH4iUkoAk8BfSbcDkspwhNxpmr3Q9w4BJf1hwz0rKEIdjGom
2024-04-17 22:34:24 UTC	1255	IN	Data Raw: 61 38 37 0d 0a 59 61 70 7a 42 59 57 78 73 6d 4e 50 41 42 6c 35 6c 67 44 62 5a 5a 36 49 43 31 6e 4b 5f 47 39 4b 63 4b 61 39 7a 59 35 38 2d 5f 61 30 74 6f 76 4a 65 58 55 6d 79 56 68 51 37 56 45 41 71 51 6e 6e 34 54 42 79 53 4c 6a 45 47 58 5a 5a 64 57 34 49 49 35 6c 4c 52 53 61 51 69 4f 6d 31 34 57 68 41 5f 30 53 6c 37 75 44 55 4d 70 51 56 32 2d 7a 37 44 6f 31 49 39 6e 48 74 5a 4f 4f 64 6b 39 2d 74 41 71 53 4c 7a 54 56 50 64 77 51 43 67 59 61 36 74 6e 42 4d 44 75 77 62 48 6e 71 4e 6b 61 4a 61 45 72 4f 7a 59 78 48 39 44 63 65 32 71 35 6e 57 75 30 49 42 4a 6c 42 4f 79 31 64 76 36 54 47 66 54 65 6f 57 71 48 77 46 65 36 74 49 4a 75 6f 36 34 54 61 43 5a 36 54 5f 6a 66 73 4e 79 4f 72 34 33 4e 36 30 30 70 61 71 37 7a 5f 73 63 70 41 33 35 57 65 6c 62 79 41 36 4f 45 Data Ascii: a87YapzBYWxsmNPABl5lgDbZZ6IC1nK_G9KcKa9zY58-_a0tovJeXUmyVhQ7VEAqQnn4TBySLjEGXZZdW4II5lLRSaQiOm14WhA_0Sl7uDUMpQV2-z7Do1I9nHtZOOdk9-tAqSLzTVPdwQCgYa6tnBMDuwbHnqNkaJaErOzYxH9Dce2q5nWu0IBJlBOy1dv6TGfTeoWqHwFe6tIJuo64TaCZ6T_jfsNyOr43N600paq7z_scpA35WelbyA6OE
2024-04-17 22:34:24 UTC	1255	IN	Data Raw: 51 50 39 6c 61 36 2d 4b 55 58 49 6f 4e 6d 42 79 30 47 53 4b 74 4b 5f 4a 30 71 69 75 69 37 31 74 50 4b 4d 6c 65 38 2d 78 34 6a 58 63 55 4a 56 31 72 75 67 4f 6e 41 36 38 36 73 61 44 75 4b 2d 39 68 63 47 42 49 63 6a 62 39 74 34 30 31 73 34 73 33 62 61 4a 7a 6f 66 59 4e 56 54 4a 77 7a 6b 79 31 69 7a 34 45 37 54 51 56 46 6d 62 62 61 68 36 63 71 61 38 50 6f 61 58 54 2d 74 65 39 32 32 75 48 6b 2d 61 63 5f 48 5f 6b 48 72 50 48 79 44 35 4a 32 79 48 4b 75 45 6c 77 78 44 7a 73 61 50 37 4d 56 5f 54 6f 53 57 47 6b 47 6c 62 73 59 43 69 46 4d 4d 54 35 73 78 42 4d 73 45 47 55 6d 50 4c 4b 7a 69 67 59 6f 6d 30 65 6a 75 32 32 44 6a 51 37 34 55 4a 30 6c 32 7a 79 6d 52 71 44 4d 44 73 72 58 78 51 49 31 67 6c 58 38 7a 45 52 72 7a 48 41 56 6f 67 57 65 39 4f 72 38 79 4d 31 4a 67 Data Ascii: QP9la6-KUXIoNmBy0GSKtK_J0qiui71tPKMle8-x4jXcUJV1rugOnA686saDuK-9hcGBIcjb9t401s4s3baJzofYNVTJwzky1iz4E7TQVFmbbah6cqa8PoaXT-te922uHk-ac_H_kHrPHyD5J2yHKuElwxDzsaP7MV_ToSWGkGlbsYCiFMMT5sxBMsEGUmPLKzigYom0eju22DjQ74UJ0l2zymRqDMDsrXxQI1glX8zERrzHAVogWe9Or8yM1Jg
2024-04-17 22:34:24 UTC	192	IN	Data Raw: 61 39 51 72 46 7a 32 37 72 76 46 4b 61 52 6a 47 59 72 31 5a 6c 54 4c 65 49 67 31 66 2d 37 66 4b 71 4e 45 47 77 61 76 75 4b 4e 4b 4f 53 79 36 54 32 67 54 30 44 51 62 6d 71 31 35 63 30 35 55 37 77 39 5a 46 76 64 5f 44 39 59 79 79 54 50 5a 58 44 6b 64 6d 4c 4f 5a 32 4e 33 5a 52 43 30 4a 52 41 6d 38 2d 36 54 54 57 62 34 51 46 45 36 66 48 5a 32 49 4a 73 51 42 6d 53 55 72 30 45 74 36 75 54 48 70 6f 52 53 43 54 31 48 6e 2d 31 49 4d 4d 34 66 61 70 62 66 72 2d 61 6b 71 73 71 30 73 33 79 4b 58 74 53 6c 75 37 4d 56 71 33 41 32 46 6a 7a 43 30 38 56 33 42 68 61 50 74 62 49 62 0d 0a Data Ascii: a9QrFz27rvFKaRjGYr1ZlTLeIg1f-7fKqNEGwavuKNKOSy6T2gT0DQbmq15c05U7w9ZFvd_D9YyyTPZXDkdmLOZ2N3ZRC0JRAm8-6TTWb4QFE6fHZ2IJsQBmSUr0Et6uTHpoRSCT1Hn-1IMM4fapbfr-akqsq0s3yKXtSlu7MVq3A2FjzC08V3BhaPtbIb
2024-04-17 22:34:24 UTC	1255	IN	Data Raw: 31 35 31 66 0d 0a 6d 6f 4b 72 35 48 66 6f 4b 32 6b 55 7a 54 46 74 48 58 7a 72 4d 39 4f 47 4c 64 56 44 76 53 4c 6f 2d 57 4f 35 6d 47 6c 37 6a 64 70 35 6d 6b 5f 64 4f 69 42 57 67 71 66 57 6b 78 38 7a 62 41 30 57 70 58 35 57 63 52 5a 63 50 62 6b 5a 35 4f 38 75 38 6f 45 68 56 6a 67 73 73 70 6d 6e 51 48 5a 77 78 4f 75 64 68 53 54 33 30 44 33 4a 37 30 6f 39 54 4f 56 69 4c 78 77 33 61 49 6a 69 33 47 74 47 69 68 65 66 7a 38 46 72 49 43 31 77 4e 56 59 36 35 53 71 6a 56 30 4e 62 50 33 65 72 49 4e 6b 6a 65 56 78 36 4f 33 71 38 4b 39 7a 57 55 34 69 61 71 74 34 31 32 44 69 31 6c 6e 46 5a 32 6b 77 70 34 66 56 66 79 56 6c 30 57 4f 58 6c 44 4d 52 6b 65 49 77 31 62 6a 51 2d 59 47 4b 35 58 36 64 75 39 56 46 50 6f 30 4b 68 37 64 78 54 63 34 62 36 63 6b 42 4b 32 7a 6c 55 46 Data Ascii: 151fmoKr5HfoK2kUzTFtHXzrM9OGLdVDvSLo-WO5mGl7jdp5mk_dOiBWgqfWkx8zbA0WpX5WcRZcPbkZ5O8u8oEhVjgsspmnQHZwxOudhST30D3J70o9TOViLxw3aIji3GtGihefz8FrIC1wNVY65SqjV0NbP3erINkjeVx6O3q8K9zWU4iaqt412Di1lnFZ2kwp4fVfyVl0WOXlDMRkeIw1bjQ-YGK5X6du9VFPo0Kh7dxTc4b6ckBK2zlUF
2024-04-17 22:34:24 UTC	1255	IN	Data Raw: 78 6c 4b 70 58 63 57 43 36 2d 70 68 38 64 68 36 35 43 48 32 50 30 4c 63 55 39 34 6c 34 38 4c 6e 70 63 62 4f 4c 37 72 75 35 59 58 68 5a 32 49 48 78 4f 54 39 75 7a 5f 59 78 53 30 67 6d 6f 59 6c 34 4a 59 6e 43 77 56 34 79 4c 5f 53 67 30 6d 48 63 6d 39 32 56 32 41 46 46 63 68 36 30 62 2d 6b 41 66 34 4a 79 48 63 6e 38 75 59 53 4c 33 49 6f 56 74 57 57 66 76 55 6c 50 73 53 33 46 65 33 65 35 64 5a 61 53 4b 31 69 6b 51 32 6a 48 30 67 4d 54 6a 74 4e 48 52 48 31 30 65 6a 52 43 77 69 30 48 52 37 7a 6f 33 38 6a 44 67 54 55 38 4d 4a 6b 54 76 48 64 4d 67 73 6a 6b 59 31 34 34 58 41 31 36 55 75 77 57 41 77 31 5f 4c 54 2d 6d 50 50 58 4f 66 63 52 70 73 69 56 30 59 79 71 56 52 41 35 4d 77 38 6e 55 50 77 32 52 37 4a 39 6f 55 68 61 4b 73 35 64 51 62 75 4d 50 7a 31 37 4f 2d 76 Data Ascii: xlKpXcWC6-ph8dh65CH2P0LcU94l48LnpcbOL7ru5YXhZ2IHxOT9uz_YxS0gmoYl4JYnCwV4yL_Sg0mHcm92V2AFFch60b-kAf4JyHcn8uYSL3IoVtWWfvUlPsS3Fe3e5dZaSK1ikQ2jH0gMTjtNHRH10ejRCwi0HR7zo38jDgTU8MJkTvHdMgsjkY144XA16UuwWAw1_LT-mPPXOfcRpsiV0YyqVRA5Mw8nUPw2R7J9oUhaKs5dQbuMPz17O-v
2024-04-17 22:34:24 UTC	1255	IN	Data Raw: 6c 4a 70 69 58 6c 52 42 39 48 33 70 6e 4f 63 6e 36 66 57 61 59 72 56 5a 35 72 63 6c 50 51 41 34 67 67 52 68 46 65 39 46 45 6a 6c 77 4d 57 49 46 55 71 5f 56 6e 4c 5a 6f 76 4b 4f 61 64 68 58 46 55 78 35 6a 68 79 71 39 52 43 5a 78 2d 32 66 68 56 32 73 4d 45 66 41 6e 38 6e 6b 64 75 37 2d 39 68 48 6b 47 42 78 37 68 56 37 51 67 53 49 65 6b 69 61 4b 32 67 54 61 45 65 55 56 62 47 7a 5a 4f 78 38 52 38 43 67 6b 6e 47 73 42 4e 6e 39 52 39 35 56 66 71 5a 51 52 67 4c 49 48 77 4f 63 5f 4a 51 46 70 59 67 49 79 70 46 31 4f 4a 78 6f 33 55 31 6c 43 36 31 33 55 7a 36 69 49 6c 61 4d 31 4e 2d 44 4b 58 57 59 52 45 70 64 38 79 4c 62 35 50 30 41 48 76 6a 37 37 46 4d 32 59 4f 73 66 41 39 48 73 4d 76 4e 32 33 42 61 39 69 69 58 6e 45 58 2d 2d 4b 43 2d 79 61 41 76 50 6c 42 6f 54 52 Data Ascii: lJpiXlRB9H3pnOcn6fWaYrVZ5rclPQA4ggRhFe9FEjlwMWIFUq_VnLZovKOadhXFUx5jhyq9RCZx-2fhV2sMEfAn8nkdu7-9hHkGBx7hV7QgSIekiaK2gTaEeUVbGzZOx8R8CgknGsBNn9R95VfqZQRgLIHwOc_JQFpYgIypF1OJxo3U1lC613Uz6iIlaM1N-DKXWYREpd8yLb5P0AHvj77FM2YOsfA9HsMvN23Ba9iiXnEX--KC-yaAvPlBoTR
2024-04-17 22:34:24 UTC	1255	IN	Data Raw: 66 6f 32 48 35 4f 78 62 59 71 38 39 70 33 61 69 4c 65 77 58 54 38 4d 64 73 49 58 61 6d 35 35 38 42 73 2d 6f 74 7a 6f 66 57 41 4e 63 47 6d 44 73 5a 64 39 57 65 35 7a 38 58 5f 6d 61 76 37 46 4f 74 75 32 51 6b 53 67 71 48 43 75 47 43 6a 68 75 6a 41 64 6e 4e 67 63 31 77 61 79 63 62 4b 69 51 5a 38 6b 30 54 33 63 63 35 4a 46 45 44 38 2d 4a 4a 41 75 41 45 6c 52 52 31 53 74 30 72 71 53 4f 71 62 76 6e 70 6c 42 5a 34 69 6a 38 56 64 42 78 6b 73 6a 33 53 79 35 70 4e 6b 64 75 47 6f 74 6d 47 56 42 65 5a 62 53 61 7a 61 33 77 6a 39 72 38 74 4a 54 77 38 68 61 42 56 44 58 47 5a 39 75 6d 31 75 61 6e 44 31 77 37 39 42 55 74 6e 2d 7a 46 33 61 5a 73 57 5a 4d 68 79 73 4f 69 78 70 2d 4c 4f 4e 52 68 39 57 6a 65 47 61 4f 75 50 38 57 4d 37 30 68 44 4b 69 76 4e 59 58 65 6a 5a 74 58 Data Ascii: fo2H5OxbYq89p3aiLewXT8MdsIXam558Bs-otzofWANcGmDsZd9We5z8X_mav7FOtu2QkSgqHCuGCjhujAdnNgc1waycbKiQZ8k0T3cc5JFED8-JJAuAElRR1St0rqSOqbvnplBZ4ij8VdBxksj3Sy5pNkduGotmGVBeZbSaza3wj9r8tJTw8haBVDXGZ9um1uanD1w79BUtn-zF3aZsWZMhysOixp-LONRh9WjeGaOuP8WM70hDKivNYXejZtX
2024-04-17 22:34:24 UTC	395	IN	Data Raw: 65 73 58 2d 47 39 4e 39 33 31 67 53 33 44 6d 65 52 54 73 6a 56 4b 49 70 6f 6f 49 65 73 62 55 7a 61 38 6f 47 32 77 72 4c 39 44 41 39 4d 31 41 75 4f 57 63 31 56 61 4f 35 59 46 62 52 6c 79 33 52 70 41 4a 51 45 46 38 6c 6f 75 6c 57 4d 49 77 56 77 55 35 62 61 4b 56 61 73 51 55 30 59 74 4c 30 6b 6f 79 69 53 6f 69 62 77 67 64 46 31 79 52 2d 6f 32 4c 71 5f 6f 57 6e 54 63 69 51 54 63 68 50 63 4e 43 50 53 77 43 65 52 56 6f 50 43 2d 63 69 67 6f 6e 34 38 6d 54 5f 58 6e 53 52 46 61 58 72 4d 32 58 7a 79 4b 6f 4a 58 51 34 31 36 52 52 38 6a 33 35 71 33 6a 69 59 50 33 5f 35 54 4f 43 64 37 4c 78 42 45 73 6d 5f 4f 57 39 78 6c 73 4b 7a 4d 52 48 39 50 66 45 74 4b 65 62 37 59 70 4e 53 74 69 5a 38 4b 64 68 68 56 77 5f 53 4a 4a 78 37 79 44 6f 4a 2d 7a 4e 52 4a 6a 41 65 55 32 50 Data Ascii: esX-G9N931gS3DmeRTsjVKIpooIesbUza8oG2wrL9DA9M1AuOWc1VaO5YFbRly3RpAJQEF8loulWMIwVwU5baKVasQU0YtL0koyiSoibwgdF1yR-o2Lq_oWnTciQTchPcNCPSwCeRVoPC-cigon48mT_XnSRFaXrM2XzyKoJXQ416RR8j35q3jiYP3_5TOCd7LxBEsm_OW9xlsKzMRH9PfEtKeb7YpNStiZ8KdhhVw_SJJx7yDoJ-zNRJjAeU2P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49751	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:25 UTC	1479	OUT	GET /recaptcha/api2/payload?p=06AFcWeA68w0rIJIN9BGY7n5rDbONWq8suRkCkTB8x0nuU7wHapp0Fq-EaeuqoJw7uXBzitihUTEK094EYrTFRTL2btZIG1h9fWZhFwrNp0wyrn82bpnjVIXP5IsMiY1qe9SKYtSL7n76VA5Z8zc5oJ3xhkcDD4qNewW6MJj6VPnLHQi8If8lIBKoW8dSukkBxDuFIwFWdOS5B&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AH0dGfTDjo_6lo3yKf_fGIOK96eTV7k8EIGuODrjGz3yWFhwKVrzS5C5ULq1AFMLv0u6vTtvIzg_xSdPlfvX168; 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
2024-04-17 22:34:25 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Wed, 17 Apr 2024 22:34:25 GMT Date: Wed, 17 Apr 2024 22:34:25 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:34:25 UTC	6	IN	Data Raw: 36 42 35 32 0d 0a Data Ascii: 6B52
2024-04-17 22:34:25 UTC	1255	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 2c 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC!"$"$C,,"}!1AQa"q2
2024-04-17 22:34:25 UTC	1255	IN	Data Raw: 1f d6 b3 ae b5 2d 42 ea 15 4b ab a9 e4 da db 81 f3 4a 90 70 47 63 c7 07 f1 ab 96 3e 09 7b a8 7f 53 9a dd 9b ef ad ae b7 ad cd e7 dd ab 46 c9 ba d2 32 d8 21 41 21 b8 cf 5e 99 aa 76 b7 1a 37 89 b4 4b c8 74 bb e4 9c 4d 04 91 e5 09 dc a4 82 bc 83 82 0f b7 15 e2 df 19 a5 9b 49 7d 2d e0 95 e3 69 c4 eb 94 6d b8 1f 27 1f f8 f1 af 3d d2 3c 4d 73 a0 27 99 69 73 38 98 b1 c1 2e 70 bd 31 c7 ae 40 fc 85 61 0c 43 6a f2 2b d9 f2 ab 11 6a 4d 26 8d 79 77 6b 75 7d 72 b7 96 72 f9 68 10 91 9e a1 8e 79 c0 01 40 c7 07 27 da 9f e2 5f 12 dc 78 90 da b5 d4 93 e2 dd 7e 5d c4 11 93 80 4f 4e bc 01 f8 0f 4a 8e fb 47 8f c4 7a 4a df 59 ea 70 ae b3 02 ca f7 b6 d3 95 4f 31 33 b9 5d 49 c1 24 92 46 d0 0f 4e b5 8b 6c 97 02 c6 ca 69 6f 22 99 65 88 b2 c2 8e 49 83 0e c3 6b a8 e9 9c 64 7d 73 57 Data Ascii: -BKJpGc>{SF2!A!^v7KtMI}-im'=<Ms'is8.p1@aCj+jM&ywku}rrhy@'_x~]ONJGzJYpO13]I$FNlio"eIkd}sW
2024-04-17 22:34:25 UTC	1255	IN	Data Raw: ec cb 15 8c 6d 02 c7 30 da 0b 96 04 9c 8d a7 18 3c 77 1e 98 ae cb 4d f0 ed 8e 99 18 16 d1 20 7e 37 36 d1 db 1d 07 41 9c 56 e0 74 63 95 7d a3 d4 8e b5 13 ac 60 92 f3 2a a7 52 6b 47 27 2d ce a8 53 a7 1e 87 b0 fc 3e 81 53 c1 7a 5a 6d c0 0b 23 7e 6c df e3 5e 57 f1 07 fb 46 e3 e2 26 a3 23 98 a3 d3 56 38 a3 b7 3b 72 f2 7c 80 96 eb c2 e7 81 c7 3c d5 c9 7c 6f 77 06 91 16 9b 66 f6 f1 43 1a 6d 8d 98 e4 e3 d7 b0 3f 8e 6b 97 9e f7 cd 99 a5 b9 bb 89 e4 76 c9 2c ff 00 33 1f ad 5c 9a b6 84 ab dd b0 bf 56 48 4b 24 8a 42 ed 20 81 e8 c3 fc 6a 15 ba 8b 76 5d 46 7a 02 39 a9 a4 9a d5 a2 96 33 73 6b 01 31 b0 07 ce 50 3a 77 c9 f6 ac 94 96 27 00 c2 77 b7 00 32 b7 53 9e d8 a9 8c 6e 5b 77 57 38 5f da 07 ca 9f fb 09 a4 5d c8 bf 68 e3 fe fd 57 93 cd 0a 4e f1 18 df 6a a7 52 7e f6 6b Data Ascii: m0<wM ~76AVtc}`*RkG'-S>SzZm#~l^WF&#V8;r\|<\|owfCm?kv,3\VHK$B jv]Fz93sk1P:w'w2Sn[wW8_]hWNjR~k
2024-04-17 22:34:25 UTC	333	IN	Data Raw: 1e 93 04 a7 ed f1 32 ec 39 0d 17 18 c7 d6 be 21 b7 f0 8d cc fa a4 56 e2 5b 7f de ca 17 bf 76 c7 a5 69 ec e0 be 26 ce b8 46 73 f8 51 ec 17 7f 0f e2 93 4c 5b a8 ee de de 37 62 ab 23 c8 e0 12 00 27 91 f5 15 85 71 e1 7b 2d 0e de df 53 d4 b5 c1 fd 9f 75 ff 00 1e f3 09 dc ab e0 91 c6 47 3c ab 7e 55 f4 c6 bf e0 f7 b3 f8 77 75 64 0c 72 cb 6c e6 e2 3f 2c 60 05 0a 01 1f 90 27 f0 15 e2 be 31 d1 20 d5 ff 00 66 ff 00 06 4a f2 18 e7 8a ea 74 52 06 72 0b cc 70 7f 10 3f 3a bf 67 14 b5 fc c8 8f 34 a5 a1 95 a5 f8 6e c7 53 b0 8e fe c6 e6 49 ed a4 ce d9 16 43 83 83 83 df d6 a1 d6 f4 7d 1b 46 8a 39 35 3d 48 5a 2c 87 6a 17 97 a9 eb 5d 86 85 e1 99 74 5f 85 5a 4c 0c 15 d6 e6 35 9d 59 07 50 ce 5b 9f 7a f2 8f 88 ba 49 d4 20 8c c4 eb 1f 92 f1 46 77 0c 92 4c 11 b6 06 3f de ac e3 4a Data Ascii: 29!V[vi&FsQL[7b#'q{-SuG<~Uwudrl?,`'1 fJtRrp?:g4nSIC}F95=HZ,j]t_ZL5YP[zI FwL?J
2024-04-17 22:34:25 UTC	1255	IN	Data Raw: 4c 7b d7 91 f8 f9 11 6e ac 63 2c 54 8b 18 c0 c7 b9 6f f0 a1 50 e7 56 4c 89 55 70 dc 8f 55 d1 bc 3b 69 e5 dc 6a ba 96 d4 c1 48 d7 cd 2d b8 9c 74 03 e8 3f 3a f2 9f 1a 1b 7b bd 40 ae 99 25 d4 16 6d 82 d0 cc 4e 78 18 c8 e7 f4 ae b7 c6 52 3d be ac f1 46 37 c6 f2 3c 6e 1b 80 83 20 02 32 70 39 ae 5a fa 60 2c 00 74 7b 8b 98 d7 73 b9 4c 2a ae 7e 50 78 eb cf bf b5 63 3e 7a 6f 92 fb 17 19 a9 43 98 4d 0e 38 ec 83 45 1c 01 5b 1f 7b 39 38 ed 9a 6e bf 21 99 62 c9 62 06 79 c6 47 6a ca fb 66 19 43 16 ce ee 4a 8f d2 b4 2e 1c 5c 22 db c0 85 c2 12 e5 df 00 26 40 04 9e bc 0c 51 41 3e 7f 79 99 45 e8 66 2f cf 21 4f 2f 27 19 eb 80 3d 49 3d bf 1a cc d4 6f 55 f3 6f 6c 7f 77 d1 e4 ee fe df ee ff 00 3f d0 2e ab 7c 93 13 6d 67 91 17 fc b4 93 18 32 91 fc 87 b5 76 3f 0a 7c 17 63 ab ca Data Ascii: L{nc,ToPVLUpU;ijH-t?:{@%mNxR=F7<n 2p9Z`,t{sL*~Pxc>zoCM8E[{98n!bbyGjfCJ.\"&@QA>yEf/!O/'=I=oUolw?.\|mg2v?\|c
2024-04-17 22:34:25 UTC	1255	IN	Data Raw: e9 5f 57 4a 47 96 7a f5 03 a7 bd 2b b0 0a 4d 7a 75 29 f3 bd ce aa 75 5d 3d 8a 97 d7 96 a9 6a de 6b 65 5e 36 e0 a9 39 1b 72 7f 4a f0 1d 63 4a d4 f5 3f 81 de 1c b5 d0 34 e9 6f e4 b3 bd 91 a5 8e 10 49 4e 5c e7 1d 71 93 5e ef ae b2 0f 0f de 17 2b c5 ac 99 dc 71 fc 06 b9 0f 82 90 c8 be 01 89 ad d9 44 ab 75 28 3e 84 6e e9 44 fd e6 97 97 f9 04 1f 2a e6 f3 2e e8 3a 1a 5e fc 39 d1 b4 bb f0 96 77 70 59 46 ac 9b c1 31 b6 cc 10 7f 3e 6b c3 fe 34 78 07 55 d1 ae ac 05 92 dc ea b0 dc b0 7c 40 85 cc 66 38 21 8c e4 67 b9 56 6f c6 be 98 4b 7d 3e ec 33 bd 9d bb be 7e 70 f1 02 41 f7 c8 a9 ad 6d 2d 6d 43 0b 6b 68 60 dd cb 79 68 17 3f 5c 53 74 dc a3 64 4c 67 c9 3e 73 2f 48 8d ad 7c 0b 69 14 8a 55 a1 d3 11 59 58 60 82 22 19 cd 78 d6 a7 e0 ab db 89 23 77 b4 b9 90 79 28 55 e3 8d Data Ascii: _WJGz+Mzu)u]=jke^69rJcJ?4oIN\q^+qDu(>nD*.:^9wpYF1>k4xU\|@f8!gVoK}>3~pAm-mCkh`yh?\StdLg>s/H\|iUYX`"x#wy(U
2024-04-17 22:34:25 UTC	1255	IN	Data Raw: ba ec 52 5f a5 dd d5 e6 a1 a7 c6 f0 c3 20 24 ac b2 6d ca 9e e3 00 7d 6b de ad 7c 3f 2d ec 2b 73 ab 5c 39 ba 71 96 09 8c 28 ec 2b e7 31 8f d9 d7 6a fa 77 ee 7a 98 79 b9 53 4d 2d 49 95 e0 40 71 6c a1 5b b9 e4 56 6c 9a 66 8e d7 ce ff 00 d9 f6 5b e4 ea 1a 31 b8 9f 5e 95 de ea de 04 bc fb 0c ac 8f 04 62 31 e6 02 93 0e a3 9a f1 48 f5 c9 27 be ba 81 58 25 ed bb b4 2a a5 b0 09 c6 55 bd c1 f5 5a e0 c4 d0 af 45 ed 63 e7 31 13 70 b5 8e 83 52 b5 96 0d 26 e2 de cd 61 69 0b 0d 8b 0c 62 2d a3 39 00 63 f9 d6 06 99 73 f1 37 49 d4 04 b2 6b 77 53 d9 10 5d 91 a6 21 d0 75 19 c6 39 f6 15 bb 69 a8 49 6b 1f 97 91 24 99 25 89 3f 7c 91 ce 32 78 c7 1c 56 45 f7 8a ae d2 ff 00 ec aa e8 6e 14 01 14 21 97 32 b9 19 00 31 e3 18 ea 7d 85 63 86 c7 e3 21 2b 47 53 9f da b4 d1 d4 5a 78 cf c6 Data Ascii: R_ $m}k\|?-+s\9q(+1jwzySM-I@ql[Vlf[1^b1H'X%*UZEc1pR&aib-9cs7IkwS]!u9iIk$%?\|2xVEn!21}c!+GSZx
2024-04-17 22:34:25 UTC	1255	IN	Data Raw: 01 4d 07 14 bb c6 30 45 7a 7a 9c 22 8a 01 a6 b3 03 d0 52 64 0a a4 04 57 d1 64 79 c8 39 51 f3 0f 51 5e 43 fb 50 f8 1e da 4d 0e 1f 1b d9 28 49 a1 58 d6 e7 03 89 51 88 00 9f 75 24 01 fe c9 ff 00 66 bd 94 35 2e a5 a2 41 e2 7f 01 de e8 57 00 30 91 24 87 04 e3 1d 76 8c f6 f9 48 e7 b6 73 da bc 1c f2 3e cd 42 aa e8 f5 f9 ff 00 c3 1e ee 4f 3e 7e 7a 52 ea bf af b8 f1 3f 82 1f 15 74 fb 9f 0c 43 e1 3f 11 dc db da cf 67 29 92 de ed 86 3c d8 b6 b6 54 9e ee 09 18 3e 99 f4 ae 0f c6 fe 34 d3 64 b8 bd d3 34 16 61 0d c4 de 64 d7 24 e5 e4 20 60 28 c9 fb a0 70 07 03 f9 8e 0b c6 fe 18 d4 bc 27 af 4f a6 6a 10 c8 8d 14 84 2b 95 c6 e1 fd 0f b7 f4 c1 ac 65 82 59 ee 12 0b 74 79 65 91 c2 22 26 4b 33 13 80 00 ee 6b ca 8e 12 9b 97 3a 7a 1d cf 15 56 09 c1 ad 4f a0 74 af 08 e8 be 27 48 Data Ascii: M0Ezz"RdWdy9QQ^CPM(IXQu$f5.AW0$vHs>BO>~zR?tC?g)<T>4d4ad$ `(p'Oj+eYtye"&K3k:zVOt'H
2024-04-17 22:34:25 UTC	1255	IN	Data Raw: de 2e a7 35 cb 5f 6b 6a ee ec 4c 63 50 05 17 3d 80 f2 cf 15 34 7e 09 b8 66 0c d7 1a bb 6d fe fe a4 07 fe d3 a3 94 d3 da 69 63 8a ff 00 84 7e 6f 32 11 fd 9f e3 96 09 2a 1e 5e 30 08 0c 0f 3c 7d df 5f 6c d7 4b fd 8a 73 ff 00 20 bd 59 bf ed e2 31 ff 00 b2 d5 e6 f8 7c 24 90 48 5f 51 c8 60 dc eb 0e 06 41 cf 40 98 fc 2a f2 78 42 72 32 56 46 e7 1f 36 a0 df d2 3a 76 26 4e e6 27 f6 27 1f f2 08 bf ff 00 81 5e c6 3f a5 43 79 a1 c4 d6 cd 1b 69 92 0d ea 46 0d fc 79 1f a5 74 0f e0 d9 08 ff 00 54 0f d6 f1 cf fe c9 55 6e 7c 2e f6 f1 3c a9 a7 c7 33 2a 16 55 17 2f 96 38 e9 d0 53 24 c2 d6 e2 66 82 de e0 75 51 e5 48 49 0d cf 51 c8 fc 7f 2a ca c0 d9 db 23 da b6 ae e4 12 78 79 1a d2 d1 21 82 e0 47 2e 54 b3 37 01 86 39 38 18 27 07 8e f5 8b b9 76 91 cf e5 49 88 30 7f be df a7 f8 Data Ascii: .5_kjLcP=4~fmic~o2^0<}_lKs Y1\|$H_Q`A@xBr2VF6:v&N''^?CyiFytTUn\|.<3U/8S$fuQHIQ#xy!G.T798'vI0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49750	172.253.124.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:25 UTC	877	OUT	GET /recaptcha/api2/userverify?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AH0dGfTDjo_6lo3yKf_fGIOK96eTV7k8EIGuODrjGz3yWFhwKVrzS5C5ULq1AFMLv0u6vTtvIzg_xSdPlfvX168; 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
2024-04-17 22:34:25 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Wed, 17 Apr 2024 22:34:25 GMT Expires: Wed, 17 Apr 2024 22:34:25 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-17 22:34:25 UTC	244	IN	Data Raw: 65 65 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: ee<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-04-17 22:34:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49752	172.253.124.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:25 UTC	1083	OUT	GET /recaptcha/api2/payload?p=06AFcWeA68w0rIJIN9BGY7n5rDbONWq8suRkCkTB8x0nuU7wHapp0Fq-EaeuqoJw7uXBzitihUTEK094EYrTFRTL2btZIG1h9fWZhFwrNp0wyrn82bpnjVIXP5IsMiY1qe9SKYtSL7n76VA5Z8zc5oJ3xhkcDD4qNewW6MJj6VPnLHQi8If8lIBKoW8dSukkBxDuFIwFWdOS5B&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AH0dGfTDjo_6lo3yKf_fGIOK96eTV7k8EIGuODrjGz3yWFhwKVrzS5C5ULq1AFMLv0u6vTtvIzg_xSdPlfvX168; 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
2024-04-17 22:34:26 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Wed, 17 Apr 2024 22:34:26 GMT Date: Wed, 17 Apr 2024 22:34:26 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:34:26 UTC	1255	IN	Data Raw: 36 42 35 32 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 2c 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 6B52JFIFC!"$"$C,,"}!1AQa"q
2024-04-17 22:34:26 UTC	1255	IN	Data Raw: 24 00 10 41 e3 04 1f d6 b3 ae b5 2d 42 ea 15 4b ab a9 e4 da db 81 f3 4a 90 70 47 63 c7 07 f1 ab 96 3e 09 7b a8 7f 53 9a dd 9b ef ad ae b7 ad cd e7 dd ab 46 c9 ba d2 32 d8 21 41 21 b8 cf 5e 99 aa 76 b7 1a 37 89 b4 4b c8 74 bb e4 9c 4d 04 91 e5 09 dc a4 82 bc 83 82 0f b7 15 e2 df 19 a5 9b 49 7d 2d e0 95 e3 69 c4 eb 94 6d b8 1f 27 1f f8 f1 af 3d d2 3c 4d 73 a0 27 99 69 73 38 98 b1 c1 2e 70 bd 31 c7 ae 40 fc 85 61 0c 43 6a f2 2b d9 f2 ab 11 6a 4d 26 8d 79 77 6b 75 7d 72 b7 96 72 f9 68 10 91 9e a1 8e 79 c0 01 40 c7 07 27 da 9f e2 5f 12 dc 78 90 da b5 d4 93 e2 dd 7e 5d c4 11 93 80 4f 4e bc 01 f8 0f 4a 8e fb 47 8f c4 7a 4a df 59 ea 70 ae b3 02 ca f7 b6 d3 95 4f 31 33 b9 5d 49 c1 24 92 46 d0 0f 4e b5 8b 6c 97 02 c6 ca 69 6f 22 99 65 88 b2 c2 8e 49 83 0e c3 6b a8 Data Ascii: $A-BKJpGc>{SF2!A!^v7KtMI}-im'=<Ms'is8.p1@aCj+jM&ywku}rrhy@'_x~]ONJGzJYpO13]I$FNlio"eIk
2024-04-17 22:34:26 UTC	1255	IN	Data Raw: c2 3a be a5 aa 25 ec cb 15 8c 6d 02 c7 30 da 0b 96 04 9c 8d a7 18 3c 77 1e 98 ae cb 4d f0 ed 8e 99 18 16 d1 20 7e 37 36 d1 db 1d 07 41 9c 56 e0 74 63 95 7d a3 d4 8e b5 13 ac 60 92 f3 2a a7 52 6b 47 27 2d ce a8 53 a7 1e 87 b0 fc 3e 81 53 c1 7a 5a 6d c0 0b 23 7e 6c df e3 5e 57 f1 07 fb 46 e3 e2 26 a3 23 98 a3 d3 56 38 a3 b7 3b 72 f2 7c 80 96 eb c2 e7 81 c7 3c d5 c9 7c 6f 77 06 91 16 9b 66 f6 f1 43 1a 6d 8d 98 e4 e3 d7 b0 3f 8e 6b 97 9e f7 cd 99 a5 b9 bb 89 e4 76 c9 2c ff 00 33 1f ad 5c 9a b6 84 ab dd b0 bf 56 48 4b 24 8a 42 ed 20 81 e8 c3 fc 6a 15 ba 8b 76 5d 46 7a 02 39 a9 a4 9a d5 a2 96 33 73 6b 01 31 b0 07 ce 50 3a 77 c9 f6 ac 94 96 27 00 c2 77 b7 00 32 b7 53 9e d8 a9 8c 6e 5b 77 57 38 5f da 07 ca 9f fb 09 a4 5d c8 bf 68 e3 fe fd 57 93 cd 0a 4e f1 18 df Data Ascii: :%m0<wM ~76AVtc}`*RkG'-S>SzZm#~l^WF&#V8;r\|<\|owfCm?kv,3\VHK$B jv]Fz93sk1P:w'w2Sn[wW8_]hWN
2024-04-17 22:34:26 UTC	339	IN	Data Raw: 4f f0 af a7 af 7e 1e 93 04 a7 ed f1 32 ec 39 0d 17 18 c7 d6 be 21 b7 f0 8d cc fa a4 56 e2 5b 7f de ca 17 bf 76 c7 a5 69 ec e0 be 26 ce b8 46 73 f8 51 ec 17 7f 0f e2 93 4c 5b a8 ee de de 37 62 ab 23 c8 e0 12 00 27 91 f5 15 85 71 e1 7b 2d 0e de df 53 d4 b5 c1 fd 9f 75 ff 00 1e f3 09 dc ab e0 91 c6 47 3c ab 7e 55 f4 c6 bf e0 f7 b3 f8 77 75 64 0c 72 cb 6c e6 e2 3f 2c 60 05 0a 01 1f 90 27 f0 15 e2 be 31 d1 20 d5 ff 00 66 ff 00 06 4a f2 18 e7 8a ea 74 52 06 72 0b cc 70 7f 10 3f 3a bf 67 14 b5 fc c8 8f 34 a5 a1 95 a5 f8 6e c7 53 b0 8e fe c6 e6 49 ed a4 ce d9 16 43 83 83 83 df d6 a1 d6 f4 7d 1b 46 8a 39 35 3d 48 5a 2c 87 6a 17 97 a9 eb 5d 86 85 e1 99 74 5f 85 5a 4c 0c 15 d6 e6 35 9d 59 07 50 ce 5b 9f 7a f2 8f 88 ba 49 d4 20 8c c4 eb 1f 92 f1 46 77 0c 92 4c 11 b6 Data Ascii: O~29!V[vi&FsQL[7b#'q{-SuG<~Uwudrl?,`'1 fJtRrp?:g4nSIC}F95=HZ,j]t_ZL5YP[zI FwL
2024-04-17 22:34:26 UTC	1255	IN	Data Raw: 4c 7b d7 91 f8 f9 11 6e ac 63 2c 54 8b 18 c0 c7 b9 6f f0 a1 50 e7 56 4c 89 55 70 dc 8f 55 d1 bc 3b 69 e5 dc 6a ba 96 d4 c1 48 d7 cd 2d b8 9c 74 03 e8 3f 3a f2 9f 1a 1b 7b bd 40 ae 99 25 d4 16 6d 82 d0 cc 4e 78 18 c8 e7 f4 ae b7 c6 52 3d be ac f1 46 37 c6 f2 3c 6e 1b 80 83 20 02 32 70 39 ae 5a fa 60 2c 00 74 7b 8b 98 d7 73 b9 4c 2a ae 7e 50 78 eb cf bf b5 63 3e 7a 6f 92 fb 17 19 a9 43 98 4d 0e 38 ec 83 45 1c 01 5b 1f 7b 39 38 ed 9a 6e bf 21 99 62 c9 62 06 79 c6 47 6a ca fb 66 19 43 16 ce ee 4a 8f d2 b4 2e 1c 5c 22 db c0 85 c2 12 e5 df 00 26 40 04 9e bc 0c 51 41 3e 7f 79 99 45 e8 66 2f cf 21 4f 2f 27 19 eb 80 3d 49 3d bf 1a cc d4 6f 55 f3 6f 6c 7f 77 d1 e4 ee fe df ee ff 00 3f d0 2e ab 7c 93 13 6d 67 91 17 fc b4 93 18 32 91 fc 87 b5 76 3f 0a 7c 17 63 ab ca Data Ascii: L{nc,ToPVLUpU;ijH-t?:{@%mNxR=F7<n 2p9Z`,t{sL*~Pxc>zoCM8E[{98n!bbyGjfCJ.\"&@QA>yEf/!O/'=I=oUolw?.\|mg2v?\|c
2024-04-17 22:34:26 UTC	1255	IN	Data Raw: e9 5f 57 4a 47 96 7a f5 03 a7 bd 2b b0 0a 4d 7a 75 29 f3 bd ce aa 75 5d 3d 8a 97 d7 96 a9 6a de 6b 65 5e 36 e0 a9 39 1b 72 7f 4a f0 1d 63 4a d4 f5 3f 81 de 1c b5 d0 34 e9 6f e4 b3 bd 91 a5 8e 10 49 4e 5c e7 1d 71 93 5e ef ae b2 0f 0f de 17 2b c5 ac 99 dc 71 fc 06 b9 0f 82 90 c8 be 01 89 ad d9 44 ab 75 28 3e 84 6e e9 44 fd e6 97 97 f9 04 1f 2a e6 f3 2e e8 3a 1a 5e fc 39 d1 b4 bb f0 96 77 70 59 46 ac 9b c1 31 b6 cc 10 7f 3e 6b c3 fe 34 78 07 55 d1 ae ac 05 92 dc ea b0 dc b0 7c 40 85 cc 66 38 21 8c e4 67 b9 56 6f c6 be 98 4b 7d 3e ec 33 bd 9d bb be 7e 70 f1 02 41 f7 c8 a9 ad 6d 2d 6d 43 0b 6b 68 60 dd cb 79 68 17 3f 5c 53 74 dc a3 64 4c 67 c9 3e 73 2f 48 8d ad 7c 0b 69 14 8a 55 a1 d3 11 59 58 60 82 22 19 cd 78 d6 a7 e0 ab db 89 23 77 b4 b9 90 79 28 55 e3 8d Data Ascii: _WJGz+Mzu)u]=jke^69rJcJ?4oIN\q^+qDu(>nD*.:^9wpYF1>k4xU\|@f8!gVoK}>3~pAm-mCkh`yh?\StdLg>s/H\|iUYX`"x#wy(U
2024-04-17 22:34:26 UTC	1255	IN	Data Raw: ba ec 52 5f a5 dd d5 e6 a1 a7 c6 f0 c3 20 24 ac b2 6d ca 9e e3 00 7d 6b de ad 7c 3f 2d ec 2b 73 ab 5c 39 ba 71 96 09 8c 28 ec 2b e7 31 8f d9 d7 6a fa 77 ee 7a 98 79 b9 53 4d 2d 49 95 e0 40 71 6c a1 5b b9 e4 56 6c 9a 66 8e d7 ce ff 00 d9 f6 5b e4 ea 1a 31 b8 9f 5e 95 de ea de 04 bc fb 0c ac 8f 04 62 31 e6 02 93 0e a3 9a f1 48 f5 c9 27 be ba 81 58 25 ed bb b4 2a a5 b0 09 c6 55 bd c1 f5 5a e0 c4 d0 af 45 ed 63 e7 31 13 70 b5 8e 83 52 b5 96 0d 26 e2 de cd 61 69 0b 0d 8b 0c 62 2d a3 39 00 63 f9 d6 06 99 73 f1 37 49 d4 04 b2 6b 77 53 d9 10 5d 91 a6 21 d0 75 19 c6 39 f6 15 bb 69 a8 49 6b 1f 97 91 24 99 25 89 3f 7c 91 ce 32 78 c7 1c 56 45 f7 8a ae d2 ff 00 ec aa e8 6e 14 01 14 21 97 32 b9 19 00 31 e3 18 ea 7d 85 63 86 c7 e3 21 2b 47 53 9f da b4 d1 d4 5a 78 cf c6 Data Ascii: R_ $m}k\|?-+s\9q(+1jwzySM-I@ql[Vlf[1^b1H'X%*UZEc1pR&aib-9cs7IkwS]!u9iIk$%?\|2xVEn!21}c!+GSZx
2024-04-17 22:34:26 UTC	1255	IN	Data Raw: 01 4d 07 14 bb c6 30 45 7a 7a 9c 22 8a 01 a6 b3 03 d0 52 64 0a a4 04 57 d1 64 79 c8 39 51 f3 0f 51 5e 43 fb 50 f8 1e da 4d 0e 1f 1b d9 28 49 a1 58 d6 e7 03 89 51 88 00 9f 75 24 01 fe c9 ff 00 66 bd 94 35 2e a5 a2 41 e2 7f 01 de e8 57 00 30 91 24 87 04 e3 1d 76 8c f6 f9 48 e7 b6 73 da bc 1c f2 3e cd 42 aa e8 f5 f9 ff 00 c3 1e ee 4f 3e 7e 7a 52 ea bf af b8 f1 3f 82 1f 15 74 fb 9f 0c 43 e1 3f 11 dc db da cf 67 29 92 de ed 86 3c d8 b6 b6 54 9e ee 09 18 3e 99 f4 ae 0f c6 fe 34 d3 64 b8 bd d3 34 16 61 0d c4 de 64 d7 24 e5 e4 20 60 28 c9 fb a0 70 07 03 f9 8e 0b c6 fe 18 d4 bc 27 af 4f a6 6a 10 c8 8d 14 84 2b 95 c6 e1 fd 0f b7 f4 c1 ac 65 82 59 ee 12 0b 74 79 65 91 c2 22 26 4b 33 13 80 00 ee 6b ca 8e 12 9b 97 3a 7a 1d cf 15 56 09 c1 ad 4f a0 74 af 08 e8 be 27 48 Data Ascii: M0Ezz"RdWdy9QQ^CPM(IXQu$f5.AW0$vHs>BO>~zR?tC?g)<T>4d4ad$ `(p'Oj+eYtye"&K3k:zVOt'H
2024-04-17 22:34:26 UTC	1255	IN	Data Raw: de 2e a7 35 cb 5f 6b 6a ee ec 4c 63 50 05 17 3d 80 f2 cf 15 34 7e 09 b8 66 0c d7 1a bb 6d fe fe a4 07 fe d3 a3 94 d3 da 69 63 8a ff 00 84 7e 6f 32 11 fd 9f e3 96 09 2a 1e 5e 30 08 0c 0f 3c 7d df 5f 6c d7 4b fd 8a 73 ff 00 20 bd 59 bf ed e2 31 ff 00 b2 d5 e6 f8 7c 24 90 48 5f 51 c8 60 dc eb 0e 06 41 cf 40 98 fc 2a f2 78 42 72 32 56 46 e7 1f 36 a0 df d2 3a 76 26 4e e6 27 f6 27 1f f2 08 bf ff 00 81 5e c6 3f a5 43 79 a1 c4 d6 cd 1b 69 92 0d ea 46 0d fc 79 1f a5 74 0f e0 d9 08 ff 00 54 0f d6 f1 cf fe c9 55 6e 7c 2e f6 f1 3c a9 a7 c7 33 2a 16 55 17 2f 96 38 e9 d0 53 24 c2 d6 e2 66 82 de e0 75 51 e5 48 49 0d cf 51 c8 fc 7f 2a ca c0 d9 db 23 da b6 ae e4 12 78 79 1a d2 d1 21 82 e0 47 2e 54 b3 37 01 86 39 38 18 27 07 8e f5 8b b9 76 91 cf e5 49 88 30 7f be df a7 f8 Data Ascii: .5_kjLcP=4~fmic~o2^0<}_lKs Y1\|$H_Q`A@xBr2VF6:v&N''^?CyiFytTUn\|.<3U/8S$fuQHIQ#xy!G.T798'vI0
2024-04-17 22:34:26 UTC	1255	IN	Data Raw: f5 1b ff 00 c9 5f fe ce 93 fe 15 9f fd 46 ff 00 f2 57 ff 00 b3 af 43 a2 b4 fa e5 6f e6 fc 89 fa b5 3e c7 9e 7f c2 b3 ff 00 a8 df fe 4a ff 00 f6 74 9f f0 ac bf ea 37 ff 00 92 bf fd 9d 7a 25 14 fe b9 5b f9 bf 20 fa b5 3e c7 9d ff 00 c2 b2 ff 00 a8 df fe 4a ff 00 f6 75 73 47 f0 01 d3 ee 5a 6f ed 7f 30 32 6d db f6 6d bd c7 3f 7b da bb 8a 2b 3a b8 8a 95 60 e1 37 74 cb a7 4a 34 e4 a5 15 aa 39 c4 f0 b8 57 2d f6 dc 93 ff 00 4c ba 7e b4 87 c2 e7 0a 05 f6 30 31 fe a7 ff 00 af 5d 25 15 e7 fd 4a 87 f2 fe 2c ec fa d5 5e e7 2b 27 84 49 5c 2e a4 10 0f fa 61 ff 00 d9 56 4d f7 c3 a9 ee b7 63 5f d8 0f 6f b2 67 1f f8 fd 77 d3 1d b1 3b 0e ca 4d 2a 1c a8 38 c6 45 0b 07 45 7d 9f cc 4f 13 55 f5 3c 8a eb e0 bc d3 92 0f 8a c8 5f 4f b0 7f 5f 32 a9 ff 00 c2 86 1d bc 54 47 d2 c3 ff Data Ascii: _FWCo>Jt7z%[ >JusGZo02mm?{+:`7tJ49W-L~01]%J,^+'I\.aVMc_ogw;M*8EE}OU<_O_2TG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49753	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:31 UTC	1327	OUT	POST /recaptcha/api2/userverify?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 6191 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AH0dGfTDjo_6lo3yKf_fGIOK96eTV7k8EIGuODrjGz3yWFhwKVrzS5C5ULq1AFMLv0u6vTtvIzg_xSdPlfvX168; 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
2024-04-17 22:34:31 UTC	6191	OUT	Data Raw: 76 3d 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 26 63 3d 30 33 41 46 63 57 65 41 34 45 62 72 71 50 53 65 7a 55 2d 6d 64 44 35 68 78 41 6d 63 65 56 65 44 58 43 39 71 62 44 38 4e 30 78 30 44 65 4b 5a 35 61 43 57 4b 6f 47 72 56 6d 41 2d 71 52 57 4d 66 74 62 53 78 38 32 45 6b 46 62 53 71 69 78 62 4d 59 6a 58 69 6a 4f 67 56 43 34 32 42 64 4e 64 41 73 41 50 77 51 62 41 54 47 5a 66 35 33 4f 39 33 68 6a 74 4f 6a 67 43 50 5a 4a 70 7a 4d 72 6b 35 69 6d 45 30 58 6e 58 2d 38 58 4b 34 43 61 2d 6e 31 54 53 6e 45 74 50 7a 4c 54 4e 32 75 5f 7a 36 4f 31 4b 59 2d 7a 77 39 42 32 70 33 61 45 58 64 57 39 4b 70 51 4d 54 68 43 64 35 6e 46 42 41 4a 6d 41 61 6a 68 7a 49 62 5f 5f 65 75 45 55 35 75 37 76 37 41 4f 4d 46 52 34 6d 52 4b 76 35 5f 32 5a 48 Data Ascii: v=QoukH5jSO3sKFzVEA7Vc8VgC&c=03AFcWeA4EbrqPSezU-mdD5hxAmceVeDXC9qbD8N0x0DeKZ5aCWKoGrVmA-qRWMftbSx82EkFbSqixbMYjXijOgVC42BdNdAsAPwQbATGZf53O93hjtOjgCPZJpzMrk5imE0XnX-8XK4Ca-n1TSnEtPzLTN2u_z6O1KY-zw9B2p3aEXdW9KpQMThCd5nFBAJmAajhzIb__euEU5u7v7AOMFR4mRKv5_2ZH
2024-04-17 22:34:31 UTC	483	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Wed, 17 Apr 2024 22:34:31 GMT Expires: Wed, 17 Apr 2024 22:34:31 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-17 22:34:31 UTC	772	IN	Data Raw: 33 63 30 0d 0a 29 5d 7d 27 0a 5b 22 75 76 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 36 62 66 39 4b 4b 76 2d 38 64 50 6f 66 58 63 4a 6b 65 59 78 62 44 66 6c 77 4b 34 52 76 36 61 53 51 70 42 6d 52 44 32 6d 6e 49 47 78 64 78 69 63 71 63 53 71 41 44 34 76 46 5a 76 68 56 69 61 35 7a 6d 36 53 4e 53 6d 4b 51 4b 4d 4b 31 4a 6c 55 67 72 66 76 35 73 67 61 79 74 45 6a 5f 67 42 62 6b 78 46 79 35 57 79 4c 77 36 6e 6c 4a 62 65 45 78 47 44 32 58 6e 2d 75 34 44 62 76 6c 6d 55 52 31 69 4c 30 5a 4a 44 31 33 70 36 31 38 4c 4d 54 6f 4b 6c 56 31 73 56 6e 43 48 49 30 4f 4b 4f 2d 32 46 32 5f 44 36 6f 7a 55 74 6d 55 64 71 6c 31 33 76 70 4c 58 31 5a 61 44 74 5a 65 74 59 62 32 42 31 47 6a 65 50 54 4b 54 48 70 55 31 41 6f 4b 74 66 78 72 6d 4a 59 77 7a 31 52 6d 45 77 6a 6e 6c 64 Data Ascii: 3c0)]}'["uvresp","03AFcWeA6bf9KKv-8dPofXcJkeYxbDflwK4Rv6aSQpBmRD2mnIGxdxicqcSqAD4vFZvhVia5zm6SNSmKQKMK1JlUgrfv5sgaytEj_gBbkxFy5WyLw6nlJbeExGD2Xn-u4DbvlmUR1iL0ZJD13p618LMToKlV1sVnCHI0OKO-2F2_D6ozUtmUdql13vpLX1ZaDtZetYb2B1GjePTKTHpU1AoKtfxrmJYwz1RmEwjnld
2024-04-17 22:34:31 UTC	195	IN	Data Raw: 4b 63 70 55 37 58 75 7a 54 59 6f 6c 5f 5f 50 54 57 39 44 63 38 69 64 33 5a 58 77 6a 61 42 49 55 46 2d 59 70 78 79 46 58 33 37 70 59 38 47 54 78 53 58 62 4c 51 22 2c 31 2c 31 32 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 30 39 41 48 30 64 47 66 53 52 43 75 7a 70 4c 4b 7a 52 48 4f 51 33 30 65 2d 51 6f 77 50 52 34 4b 55 69 57 73 46 35 67 77 33 35 57 4e 49 62 75 4b 77 71 66 68 52 42 70 78 4f 49 7a 56 6b 62 72 38 48 6e 4d 48 64 4a 73 78 55 54 6d 78 79 59 48 4b 7a 58 32 4f 6a 76 64 46 6d 75 4c 36 44 45 32 6b 43 5a 5f 6f 42 38 63 67 22 5d 0d 0a Data Ascii: KcpU7XuzTYol__PTW9Dc8id3ZXwjaBIUF-YpxyFX37pY8GTxSXbLQ",1,120,null,null,null,null,null,"09AH0dGfSRCuzpLKzRHOQ30e-QowPR4KUiWsF5gw35WNIbuKwqfhRBpxOIzVkbr8HnMHdJsxUTmxyYHKzX2OjvdFmuL6DE2kCZ_oB8cg"]
2024-04-17 22:34:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49754	172.253.124.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:31 UTC	877	OUT	GET /recaptcha/api2/userverify?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AH0dGfTDjo_6lo3yKf_fGIOK96eTV7k8EIGuODrjGz3yWFhwKVrzS5C5ULq1AFMLv0u6vTtvIzg_xSdPlfvX168; 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
2024-04-17 22:34:31 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Wed, 17 Apr 2024 22:34:31 GMT Expires: Wed, 17 Apr 2024 22:34:31 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-17 22:34:31 UTC	244	IN	Data Raw: 65 65 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: ee<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-04-17 22:34:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49755	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:31 UTC	1440	OUT	POST /sorry/index HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 992 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://www.google.com/sorry/index?continue=https://google.com/&q=EgRRtTk0GJGcgbEGIjB9gZIilngADswQwHXor1YLbOOeBYuAYH92knL1CCi8WEjYnI0WU-XARvX0oE6qvSUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
2024-04-17 22:34:31 UTC	992	OUT	Data Raw: 67 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 3d 30 33 41 46 63 57 65 41 36 62 66 39 4b 4b 76 2d 38 64 50 6f 66 58 63 4a 6b 65 59 78 62 44 66 6c 77 4b 34 52 76 36 61 53 51 70 42 6d 52 44 32 6d 6e 49 47 78 64 78 69 63 71 63 53 71 41 44 34 76 46 5a 76 68 56 69 61 35 7a 6d 36 53 4e 53 6d 4b 51 4b 4d 4b 31 4a 6c 55 67 72 66 76 35 73 67 61 79 74 45 6a 5f 67 42 62 6b 78 46 79 35 57 79 4c 77 36 6e 6c 4a 62 65 45 78 47 44 32 58 6e 2d 75 34 44 62 76 6c 6d 55 52 31 69 4c 30 5a 4a 44 31 33 70 36 31 38 4c 4d 54 6f 4b 6c 56 31 73 56 6e 43 48 49 30 4f 4b 4f 2d 32 46 32 5f 44 36 6f 7a 55 74 6d 55 64 71 6c 31 33 76 70 4c 58 31 5a 61 44 74 5a 65 74 59 62 32 42 31 47 6a 65 50 54 4b 54 48 70 55 31 41 6f 4b 74 66 78 72 6d 4a 59 77 7a 31 52 6d 45 77 6a 6e 6c 64 Data Ascii: g-recaptcha-response=03AFcWeA6bf9KKv-8dPofXcJkeYxbDflwK4Rv6aSQpBmRD2mnIGxdxicqcSqAD4vFZvhVia5zm6SNSmKQKMK1JlUgrfv5sgaytEj_gBbkxFy5WyLw6nlJbeExGD2Xn-u4DbvlmUR1iL0ZJD13p618LMToKlV1sVnCHI0OKO-2F2_D6ozUtmUdql13vpLX1ZaDtZetYb2B1GjePTKTHpU1AoKtfxrmJYwz1RmEwjnld
2024-04-17 22:34:32 UTC	596	IN	HTTP/1.1 302 Found Location: https://google.com/?google_abuse=GOOGLE_ABUSE_EXEMPTION%3DID%3Df6cbabc468d23ca7:TM%3D1713393272:C%3Dr:IP%3D81.181.57.52-:S%3DiVHo9U4tubQjOCbzM2Vqao0%3B+path%3D/%3B+domain%3Dgoogle.com%3B+expires%3DThu,+18-Apr-2024+01:34:32+GMT Date: Wed, 17 Apr 2024 22:34:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 423 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:34:32 UTC	423	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3f 67 6f 6f 67 6c 65 5f 61 62 75 73 65 3d 47 4f 4f 47 4c 45 5f 41 42 55 53 45 5f 45 58 45 4d 50 54 49 4f 4e 25 33 44 49 44 25 33 44 66 36 63 62 61 62 63 34 36 38 64 32 33 63 61 37 3a 54 4d 25 33 44 31 37 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://google.com/?google_abuse=GOOGLE_ABUSE_EXEMPTION%3DID%3Df6cbabc468d23ca7:TM%3D17

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49756	74.125.136.113	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:32 UTC	1357	OUT	GET /?google_abuse=GOOGLE_ABUSE_EXEMPTION%3DID%3Df6cbabc468d23ca7:TM%3D1713393272:C%3Dr:IP%3D81.181.57.52-:S%3DiVHo9U4tubQjOCbzM2Vqao0%3B+path%3D/%3B+domain%3Dgoogle.com%3B+expires%3DThu,+18-Apr-2024+01:34:32+GMT HTTP/1.1 Host: google.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY
2024-04-17 22:34:32 UTC	1631	IN	HTTP/1.1 302 Found Location: https://google.com/ x-hallmonitor-challenge: CgwI-JyBsQYQwbjupQMSBFG1OTQ Content-Type: text/html; charset=UTF-8 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-cY77LJUyG_m-ZMdN_knSNA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Wed, 17 Apr 2024 22:34:32 GMT Server: gws Content-Length: 216 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; path=/; domain=google.com; expires=Thu, 18-Apr-2024 01:34:32 GMT Set-Cookie: 1P_JAR=2024-04-17-22; expires=Fri, 17-May-2024 22:34:32 GMT; path=/; domain=.google.com; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:34:32 UTC	216	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://google.com/">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49757	74.125.136.113	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:33 UTC	1255	OUT	GET / HTTP/1.1 Host: google.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0
2024-04-17 22:34:33 UTC	1366	IN	HTTP/1.1 301 Moved Permanently Location: https://www.google.com/ Content-Type: text/html; charset=UTF-8 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-qd1wk0SJUXssMXlzWhnkcw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Wed, 17 Apr 2024 22:34:33 GMT Expires: Fri, 17 May 2024 22:34:33 GMT Cache-Control: public, max-age=2592000 Server: gws Content-Length: 220 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:34:33 UTC	220	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://www.google.com/">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49758	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:33 UTC	1259	OUT	GET / HTTP/1.1 Host: www.google.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; NID=513=ZmMGf7Vf_8zLOq6lrs-aPzU4y-pbxx1EYvwhvAGmD-gyEIGc0pgdrQsxjeGZbnqEiU8gLMLK7IbMRjRmIUmBY3_3e72Cz_kQJ42fP4Q_SoQUG7Z3ITNP9ICgchOV1sePEIC-3YG0omwYdLQ1S1tOdX36j3cYsfSdHcJ6w7OljJY; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0
2024-04-17 22:34:34 UTC	2124	IN	HTTP/1.1 200 OK Date: Wed, 17 Apr 2024 22:34:33 GMT Expires: -1 Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-HA800D7uWmci5s77CwRzLg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-04-17-22; expires=Fri, 17-May-2024 22:34:33 GMT; path=/; domain=.google.com; Secure; SameSite=none Set-Cookie: NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU; expires=Thu, 17-Oct-2024 22:32:49 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-17 22:34:34 UTC	2124	IN	Data Raw: 31 62 33 31 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 67 2f 31 78 2f 67 6f 6f 67 6c 65 67 5f 73 74 61 6e 64 61 72 64 5f 63 6f 6c 6f 72 5f 31 32 38 64 70 2e 70 6e 67 22 20 69 74 65 6d 70 72 6f 70 3d 22 69 6d 61 67 65 22 3e 3c 74 69 74 6c 65 3e Data Ascii: 1b31<!doctype html><html itemscope="" itemtype="http://schema.org/WebPage" lang="en"><head><meta charset="UTF-8"><meta content="origin" name="referrer"><meta content="/images/branding/googleg/1x/googleg_standard_color_128dp.png" itemprop="image"><title>
2024-04-17 22:34:34 UTC	2124	IN	Data Raw: 2e 6c 71 2e 70 75 73 68 28 5b 5b 61 5d 2c 62 2c 63 5d 29 7d 3b 67 6f 6f 67 6c 65 2e 6c 6f 61 64 41 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 67 6f 6f 67 6c 65 2e 6c 71 2e 70 75 73 68 28 5b 61 2c 62 5d 29 7d 3b 67 6f 6f 67 6c 65 2e 62 78 3d 21 31 3b 67 6f 6f 67 6c 65 2e 6c 78 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 76 61 72 20 64 3d 5b 5d 3b 67 6f 6f 67 6c 65 2e 66 63 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 65 29 7b 64 2e 70 75 73 68 28 5b 61 2c 62 2c 63 2c 65 5d 29 7d 3b 67 6f 6f 67 6c 65 2e 71 63 65 3d 64 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 67 6f 6f 67 6c 65 2e 66 3d 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 Data Ascii: .lq.push([[a],b,c])};google.loadAll=function(a,b){google.lq.push([a,b])};google.bx=!1;google.lx=function(){};var d=[];google.fce=function(a,b,c,e){d.push([a,b,c,e])};google.qce=d;}).call(this);google.f={};(function(){document.documentElement.addEventList
2024-04-17 22:34:34 UTC	2124	IN	Data Raw: 7c 68 3e 3d 63 2e 72 69 67 68 74 29 66 7c 3d 38 3b 6d 26 26 67 2e 74 6f 70 3e 3d 63 2e 62 6f 74 74 6f 6d 26 26 28 66 7c 3d 34 29 7d 66 7c 7c 28 66 3d 31 2c 71 2b 74 3e 62 26 26 28 66 7c 3d 34 29 29 3b 72 65 74 75 72 6e 20 66 7d 3b 76 61 72 20 76 3d 67 6f 6f 67 6c 65 2e 63 2e 67 6c 2c 77 3d 67 6f 6f 67 6c 65 2e 63 2e 73 78 73 3b 66 75 6e 63 74 69 6f 6e 20 78 28 61 2c 62 2c 64 2c 63 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 64 2c 63 7c 7c 21 31 29 3a 61 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 61 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 62 2c 64 29 7d 66 75 6e 63 74 69 6f 6e 20 79 28 61 2c 62 2c 64 2c 63 29 7b 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 Data Ascii: \|h>=c.right)f\|=8;m&&g.top>=c.bottom&&(f\|=4)}f\|\|(f=1,q+t>b&&(f\|=4));return f};var v=google.c.gl,w=google.c.sxs;function x(a,b,d,c){a.addEventListener?a.addEventListener(b,d,c\|\|!1):a.attachEvent&&a.attachEvent("on"+b,d)}function y(a,b,d,c){"addEventListener
2024-04-17 22:34:34 UTC	597	IN	Data Raw: 65 2e 63 2e 6f 69 6c 3d 7a 2c 78 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 22 6c 6f 61 64 22 2c 41 2c 21 30 29 2c 67 6f 6f 67 6c 65 2e 63 2e 67 6c 75 3d 42 29 3b 67 6f 6f 67 6c 65 2e 63 76 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 2c 63 29 7b 69 66 28 21 61 7c 7c 21 62 26 26 70 28 61 29 29 72 65 74 75 72 6e 20 30 3b 69 66 28 21 61 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 29 72 65 74 75 72 6e 20 31 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 67 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 7d 3b 69 66 28 21 62 26 26 6e 28 61 2c 63 2c 65 29 29 72 65 74 75 72 6e 20 30 3b 76 61 72 20 6d 3b 72 65 74 75 72 6e 20 75 28 61 2c 62 2c 64 2c 63 Data Ascii: e.c.oil=z,x(document.documentElement,"load",A,!0),google.c.glu=B);google.cv=function(a,b,d,c){if(!a\|\|!b&&p(a))return 0;if(!a.getBoundingClientRect)return 1;var e=function(g){return g.getBoundingClientRect()};if(!b&&n(a,c,e))return 0;var m;return u(a,b,d,c
2024-04-17 22:34:34 UTC	255	IN	Data Raw: 66 39 0d 0a 3d 67 6f 6f 67 6c 65 2e 63 2e 63 67 70 62 63 2c 61 61 3d 67 6f 6f 67 6c 65 2e 63 2e 6c 68 63 2c 74 3d 67 6f 6f 67 6c 65 2e 63 2e 73 78 73 2c 75 3d 67 6f 6f 67 6c 65 2e 63 2e 74 61 66 2c 76 3d 67 6f 6f 67 6c 65 2e 63 2e 62 74 66 69 2c 77 3d 67 6f 6f 67 6c 65 2e 63 2e 66 72 76 74 2c 78 3d 67 6f 6f 67 6c 65 2e 63 2e 74 69 6d 6c 3b 76 61 72 20 62 61 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2c 63 61 3d 22 61 66 74 20 61 66 74 69 20 61 66 74 72 20 61 66 74 73 20 63 62 73 20 63 62 74 20 66 68 74 20 66 72 74 73 20 66 72 76 74 20 68 63 74 20 68 73 74 20 70 72 74 20 73 63 74 22 2e 73 70 6c 69 74 28 22 20 22 29 3b 66 75 6e 63 74 69 6f 6e 20 79 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 62 61 2e 73 65 61 72 63 68 2e 6d 61 74 63 68 28 6e 65 77 20 0d 0a Data Ascii: f9=google.c.cgpbc,aa=google.c.lhc,t=google.c.sxs,u=google.c.taf,v=google.c.btfi,w=google.c.frvt,x=google.c.timl;var ba=window.location,ca="aft afti aftr afts cbs cbt fht frts frvt hct hst prt sct".split(" ");function y(a){return(a=ba.search.match(new
2024-04-17 22:34:34 UTC	1255	IN	Data Raw: 38 30 30 30 0d 0a 52 65 67 45 78 70 28 22 5b 3f 26 5d 22 2b 61 2b 22 3d 28 5c 5c 64 2b 29 22 29 29 29 3f 4e 75 6d 62 65 72 28 61 5b 31 5d 29 3a 2d 31 7d 0a 66 75 6e 63 74 69 6f 6e 20 7a 28 61 2c 62 29 7b 76 61 72 20 63 3d 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 5b 62 7c 7c 22 6c 6f 61 64 22 5d 3b 62 3d 63 2e 6d 3b 69 66 28 21 62 7c 7c 21 62 2e 70 72 73 29 7b 76 61 72 20 64 3d 6e 28 29 3f 30 3a 79 28 22 71 73 75 62 74 73 22 29 3b 30 3c 64 26 26 28 62 3d 79 28 22 66 62 74 73 22 29 2c 30 3c 62 26 26 28 63 2e 74 2e 73 74 61 72 74 3d 4d 61 74 68 2e 6d 61 78 28 64 2c 62 29 29 29 3b 76 61 72 20 65 3d 63 2e 74 2c 6b 3d 65 2e 73 74 61 72 74 3b 62 3d 7b 77 73 72 74 3a 63 2e 77 73 72 74 7c 7c 30 7d 3b 69 66 28 6b 29 66 6f 72 28 76 61 72 20 71 3d 30 2c 70 3b 70 3d 63 Data Ascii: 8000RegExp("[?&]"+a+"=(\\d+)")))?Number(a[1]):-1}function z(a,b){var c=google.timers[b\|\|"load"];b=c.m;if(!b\|\|!b.prs){var d=n()?0:y("qsubts");0<d&&(b=y("fbts"),0<b&&(c.t.start=Math.max(d,b)));var e=c.t,k=e.start;b={wsrt:c.wsrt\|\|0};if(k)for(var q=0,p;p=c
2024-04-17 22:34:34 UTC	1255	IN	Data Raw: 61 6d 65 29 72 65 74 75 72 6e 20 61 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 0a 66 75 6e 63 74 69 6f 6e 20 65 61 28 61 29 7b 76 61 72 20 62 3d 76 6f 69 64 20 30 3b 72 26 26 28 62 3d 43 28 61 29 29 3b 62 7c 7c 72 7c 7c 28 62 3d 43 28 61 29 29 3b 76 61 72 20 63 3d 61 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 3b 69 66 28 63 26 26 28 22 47 2d 49 4d 47 22 3d 3d 3d 63 2e 74 61 67 4e 61 6d 65 7c 7c 63 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 75 68 48 4f 77 66 22 29 29 26 26 28 63 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 7c 7c 63 2e 73 74 79 6c 65 2e 77 69 64 74 68 29 29 7b 76 61 72 20 64 3d 63 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2c 65 3d 61 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 Data Ascii: ame)return a;return null}function ea(a){var b=void 0;r&&(b=C(a));b\|\|r\|\|(b=C(a));var c=a.parentElement;if(c&&("G-IMG"===c.tagName\|\|c.classList.contains("uhHOwf"))&&(c.style.height\|\|c.style.width)){var d=c.getBoundingClientRect(),e=a.getBoundingClientRect(
2024-04-17 22:34:34 UTC	1255	IN	Data Raw: 7d 22 68 69 64 64 65 6e 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 67 6f 6f 67 6c 65 2e 63 2e 65 28 51 2c 22 68 64 64 6e 22 2c 22 31 22 29 3b 69 66 28 21 74 26 26 61 26 26 6e 75 6c 6c 21 3d 3d 67 6f 6f 67 6c 65 2e 61 66 74 71 29 7b 67 6f 6f 67 6c 65 2e 74 69 63 6b 28 22 6c 6f 61 64 22 2c 22 61 66 74 71 66 22 2c 44 61 74 65 2e 6e 6f 77 28 29 29 3b 76 61 72 20 64 3b 66 6f 72 28 61 3d 30 3b 63 3d 6e 75 6c 6c 3d 3d 28 64 3d 67 6f 6f 67 6c 65 2e 61 66 74 71 29 3f 76 6f 69 64 20 30 3a 64 5b 61 2b 2b 5d 3b 29 68 28 63 29 3b 67 6f 6f 67 6c 65 2e 61 66 74 71 3d 6e 75 6c 6c 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 56 28 29 7b 4d 26 26 21 67 6f 6f 67 6c 65 2e 63 2e 62 6f 66 72 26 26 28 4d 3d 21 31 2c 4d 7c 7c 28 67 6f 6f 67 Data Ascii: }"hidden"===document.visibilityState&&google.c.e(Q,"hddn","1");if(!t&&a&&null!==google.aftq){google.tick("load","aftqf",Date.now());var d;for(a=0;c=null==(d=google.aftq)?void 0:d[a++];)h(c);google.aftq=null}}}function V(){M&&!google.c.bofr&&(M=!1,M\|\|(goog
2024-04-17 22:34:34 UTC	1255	IN	Data Raw: 75 26 26 21 63 7c 7c 6d 7c 7c 63 26 26 28 30 3e 63 7c 7c 63 3e 3d 45 29 29 26 26 28 4f 3d 45 29 3b 76 61 72 20 59 3d 61 2e 73 72 63 3b 67 6f 6f 67 6c 65 2e 72 6c 6c 28 61 2c 21 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 28 71 7c 7c 70 29 26 26 59 26 26 59 3d 3d 3d 61 2e 73 72 63 3f 67 6f 6f 67 6c 65 2e 72 6c 6c 28 61 2c 21 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 53 28 61 2c 67 2c 44 61 74 65 2e 6e 6f 77 28 29 29 7d 29 3a 53 28 61 2c 67 2c 44 61 74 65 2e 6e 6f 77 28 29 29 7d 29 7d 7d 72 65 74 75 72 6e 20 64 7d 0a 69 66 28 30 3c 67 6f 6f 67 6c 65 2e 63 2e 63 61 70 26 26 21 74 29 61 3a 7b 76 61 72 20 68 61 3d 67 6f 6f 67 6c 65 2e 63 2e 63 61 70 3b 69 66 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e Data Ascii: u&&!c\|\|m\|\|c&&(0>c\|\|c>=E))&&(O=E);var Y=a.src;google.rll(a,!0,function(){(q\|\|p)&&Y&&Y===a.src?google.rll(a,!0,function(){S(a,g,Date.now())}):S(a,g,Date.now())})}}return d}if(0<google.c.cap&&!t)a:{var ha=google.c.cap;if(window.performance&&window.performan
2024-04-17 22:34:34 UTC	1255	IN	Data Raw: 22 2c 63 2c 21 31 29 29 3a 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 6c 6f 61 64 22 2c 63 29 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 5b 5d 3b 67 6f 6f 67 6c 65 2e 6a 73 63 3d 7b 78 78 3a 62 2c 78 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 62 2e 70 75 73 68 28 61 29 7d 2c 6d 6d 3a 5b 5d 2c 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 6a 73 63 2e 6d 6d 2e 6c 65 6e 67 74 68 7c 7c 28 67 6f 6f 67 6c 65 2e 6a 73 63 2e 6d 6d 3d 61 29 7d 7d 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6b 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 61 3d 30 3b 72 65 74 75 Data Ascii: ",c,!1)):window.attachEvent&&window.attachEvent("onload",c);}).call(this);(function(){var b=[];google.jsc={xx:b,x:function(a){b.push(a)},mm:[],m:function(a){google.jsc.mm.length\|\|(google.jsc.mm=a)}};}).call(this);(function(){var k=function(b){var a=0;retu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49759	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:34 UTC	1533	OUT	POST /gen_204?s=webhp&t=cap&atyp=csi&ei=eU4gZpbFNNqWkPIPhcWVmAg&rt=wsrt.2468,cbt.119,hst.118&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU
2024-04-17 22:34:34 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-fWUJ_kNJXUwtK-dsKEw4GA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Wed, 17 Apr 2024 22:34:34 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49761	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:34 UTC	1732	OUT	GET /xjs/_/ss/k=xjs.hd.Lo9lRXsykaQ.L.W.O/am=cAEAAAAAAMAAAAAAAAAAAAAAAAAAgAAAAgAAAAAgAHzCAQLAhgAAAEAAAIAAAEAAAAAEAQAAACAIABgAABAAAAAAgRAACIAACSAJQQYCAIhgggFSAYABAAAAIAEAAAACAhAwAAHAQwQAAAQ6AQEkAADIACEAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAEAAAACgAAAAAAAAAAAAAAAAAAAE/d=1/ed=1/br=1/rs=ACT90oF2S7JtbOzl7PcgP8AWv8-OdLvQhA/m=cdos,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU
2024-04-17 22:34:34 UTC	809	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/css; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 3594 Date: Wed, 17 Apr 2024 22:34:34 GMT Expires: Thu, 17 Apr 2025 22:34:34 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Tue, 16 Apr 2024 23:00:34 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:34:34 UTC	446	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 67 53 35 6a 58 62 3a 23 64 61 64 63 65 30 3b 2d 2d 41 71 6e 37 78 64 3a 23 64 32 64 32 64 32 3b 2d 2d 45 70 46 4e 57 3a 23 66 66 66 3b 2d 2d 49 58 6f 78 55 65 3a 23 35 65 35 65 35 65 3b 2d 2d 62 62 51 78 41 62 3a 23 34 37 34 37 34 37 3b 2d 2d 59 4c 4e 4e 48 63 3a 23 31 66 31 66 31 66 3b 2d 2d 43 4f 45 6d 59 3a 23 31 66 31 66 31 66 3b 2d 2d 54 4d 59 53 39 3a 23 30 62 35 37 64 30 3b 2d 2d 61 6d 6e 50 77 65 3a 23 35 65 35 65 35 65 3b 2d 2d 4a 4b 71 78 32 3a 23 31 61 30 64 61 62 3b 2d 2d 72 72 4a 4a 55 63 3a 23 30 62 35 37 64 30 3b 2d 2d 6d 58 5a 6b 71 63 3a 23 64 32 64 32 64 32 3b 2d 2d 4e 73 6d 30 63 65 3a 23 30 62 35 37 64 30 3b 2d 2d 58 4b 4d 44 78 63 3a 23 66 37 66 38 66 39 3b 2d 2d 61 59 6e 32 53 3a 23 65 63 65 64 65 65 3b 2d 2d Data Ascii: :root{--gS5jXb:#dadce0;--Aqn7xd:#d2d2d2;--EpFNW:#fff;--IXoxUe:#5e5e5e;--bbQxAb:#474747;--YLNNHc:#1f1f1f;--COEmY:#1f1f1f;--TMYS9:#0b57d0;--amnPwe:#5e5e5e;--JKqx2:#1a0dab;--rrJJUc:#0b57d0;--mXZkqc:#d2d2d2;--Nsm0ce:#0b57d0;--XKMDxc:#f7f8f9;--aYn2S:#ecedee;--
2024-04-17 22:34:34 UTC	1255	IN	Data Raw: 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 56 44 67 56 69 65 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 54 55 4f 73 55 65 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 67 2d 73 6e 61 63 6b 62 61 72 2d 73 68 6f 77 7b 66 72 6f 6d 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 30 25 Data Ascii: font-family:Roboto,arial,sans-serif;font-weight:400}.VDgVie{text-align:center}.TUOsUe{text-align:left}@-webkit-keyframes g-snackbar-show{from{pointer-events:none;-webkit-transform:translateY(0);transform:translateY(0)}to{-webkit-transform:translateY(-100%
2024-04-17 22:34:34 UTC	347	IN	Data Raw: 73 6e 61 63 6b 62 61 72 2d 68 69 64 65 20 2e 34 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 62 6f 74 68 3b 61 6e 69 6d 61 74 69 6f 6e 3a 67 2d 73 6e 61 63 6b 62 61 72 2d 68 69 64 65 20 2e 34 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 62 6f 74 68 3b 76 69 73 69 62 69 6c 69 74 79 3a 69 6e 68 65 72 69 74 7d 2e 55 65 77 50 4d 64 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 67 2d 73 6e 61 63 6b 62 61 72 2d 73 68 6f 77 20 2e 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 62 6f 74 68 3b 61 6e 69 6d 61 74 69 6f 6e 3a 67 2d 73 6e 61 63 6b 62 61 72 2d 73 68 6f 77 20 2e 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c Data Ascii: snackbar-hide .4s cubic-bezier(0.4,0,0.2,1) both;animation:g-snackbar-hide .4s cubic-bezier(0.4,0,0.2,1) both;visibility:inherit}.UewPMd{-webkit-animation:g-snackbar-show .5s cubic-bezier(0.4,0,0.2,1) both;animation:g-snackbar-show .5s cubic-bezier(0.4,0,
2024-04-17 22:34:34 UTC	1255	IN	Data Raw: 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 72 54 59 54 4e 62 20 2e 72 49 78 73 76 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 67 2d 73 6e 61 63 6b 62 61 72 2d 68 69 64 65 2d 63 6f 6e 74 65 6e 74 20 2e 33 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 62 6f 74 68 3b 61 6e 69 6d 61 74 69 6f 6e 3a 67 2d 73 6e 61 63 6b 62 61 72 2d 68 69 64 65 2d 63 6f 6e Data Ascii: it-box-align:center;-webkit-align-items:center;align-items:center;display:box;display:-webkit-box;display:-webkit-flex;display:flex}.rTYTNb .rIxsve{-webkit-animation:g-snackbar-hide-content .35s cubic-bezier(0.4,0,0.2,1) both;animation:g-snackbar-hide-con
2024-04-17 22:34:34 UTC	291	IN	Data Raw: 76 69 73 69 62 69 6c 69 74 79 20 30 73 20 30 73 3b 76 69 73 69 62 69 6c 69 74 79 3a 69 6e 68 65 72 69 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 36 29 7d 2e 41 42 4d 46 5a 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 31 30 30 6d 73 2c 76 69 73 69 62 69 6c 69 74 79 20 30 73 20 32 35 30 6d 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 31 30 30 6d 73 2c 76 69 73 69 62 69 6c 69 74 79 20 30 73 20 32 35 30 6d 73 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 69 6e 73 65 74 3a 30 7d 2f 2a 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 73 Data Ascii: visibility 0s 0s;visibility:inherit;background-color:rgba(0,0,0,0.6)}.ABMFZ{-webkit-transition:background-color 100ms,visibility 0s 250ms;transition:background-color 100ms,visibility 0s 250ms;position:fixed;visibility:hidden;inset:0}/*# sourceMappingURL=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49760	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:34 UTC	1462	OUT	GET /images/branding/googlelogo/1x/googlelogo_color_272x92dp.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU
2024-04-17 22:34:34 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5969 Date: Wed, 17 Apr 2024 22:34:34 GMT Expires: Wed, 17 Apr 2024 22:34:34 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:34:34 UTC	584	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 10 00 00 00 5c 08 06 00 00 00 a6 e7 ea b6 00 00 17 18 49 44 41 54 78 01 ed 5d 0b 94 1c 55 99 be 3a d3 81 c0 2e 82 c2 2a 82 08 12 10 90 05 92 aa 9a 84 90 d8 5d b7 7b b2 41 e2 41 81 28 b8 bb 0a 08 8a 1b 5c 84 98 05 e5 31 9a ae 9a 09 89 c0 02 0a 41 40 36 e1 81 06 17 10 1f 90 cc 24 01 f4 08 28 c8 43 58 58 7c 10 1e 64 fa 11 92 49 55 75 1e 99 64 7a ef b7 e6 b8 a4 b7 67 e6 bf d5 75 bb aa 87 fb 9d 73 4f e7 31 d3 d3 67 ea d6 57 ff fd ff ef ff 7e 16 07 66 76 ad db 2b ed 54 4c ee 7a a7 71 d7 9f 63 bb c1 65 b6 eb 3b dc f1 7b c4 df e7 8b bf 5f 22 d6 b9 d9 ee 60 56 da f5 8f 4e 77 55 77 67 1a 1a 1a ef 4c a4 7b 36 1f cc 9d ca 79 dc 0d ee b2 5d ff cf e2 b5 2a b3 32 79 6f bb 78 7d 5e 7c ef cd dc f5 ff 29 dd e5 ed cb Data Ascii: PNGIHDR\IDATx]U:.]{AA(\1A@6$(CXX\|dIUudzgusO1gW~fv+TLzqce;{_"`VNwUwgL{6y]2yox}^\|)
2024-04-17 22:34:34 UTC	1255	IN	Data Raw: 6c 0c 29 f2 7a c1 ce fb 67 88 5e 96 76 16 21 10 9d d8 ae ff 2d ee 06 be 26 0f 0d 4d 20 09 45 67 97 ff 77 c8 4b 84 20 0f 9f 3b fe d7 40 1c 71 69 50 34 79 68 68 02 89 11 b3 97 55 db 6c 37 58 2d 1f 75 f8 bf ce 2d d8 74 50 93 8f 58 9f 15 44 e2 69 f2 d0 d0 04 92 10 70 27 b8 54 3e 59 19 5c 6f dc 54 4d b1 18 90 ed de 78 78 26 1f fc b7 26 0f 0d 4d 20 09 c8 7b f0 bc b7 4d 2a 51 ea 04 df 40 a2 93 c5 08 b4 f9 c3 43 84 69 68 68 02 89 07 5d 5d d5 77 73 d7 7f 4c 92 3c e6 31 0d 0d 0d 4d 20 82 0c 3e 2f 79 6c b9 86 1e 79 68 68 8c 59 68 02 99 79 ed d0 6e dc f5 d6 48 94 69 57 21 d9 ca 34 34 34 34 81 70 27 38 47 82 3c d6 a1 8c ca 34 34 34 34 81 20 f7 21 d3 24 27 92 95 5f 60 80 86 86 86 26 10 f4 ba c8 68 3d 40 38 0c d0 d0 d0 d0 04 c2 f3 c1 9d 54 02 41 6f 0c 03 34 34 34 34 81 Data Ascii: l)zg^v!-&M EgwK ;@qiP4yhhUl7X-u-tPXDip'T>Y\oTMxx&&M {M*Q@Cihh]]wsL<1M >/ylyhhYhynHiW!4444p'8G<4444 !$'_`&h=@8TAo4444
2024-04-17 22:34:34 UTC	1255	IN	Data Raw: de 62 a8 6f fc 01 75 df 77 f5 f8 03 c5 fb 7e 45 24 48 9f 96 7d 6f 7c 1e 7c 2e ba 57 8d bf 58 9e 34 bc 57 71 4c 87 e5 65 3d 05 35 46 8d 70 d7 9f 8b d1 23 49 24 10 ec 8d 10 e4 f1 b8 d8 4f 9f 7d 6d ca 94 f1 c3 ed 65 1c 4d 20 2a a3 bf a7 b9 6c 98 9b d6 5b 42 9c ed 72 f3 d8 27 90 ca b0 09 3e 30 b8 5c e8 67 bd 56 e0 1d 9f 82 d0 87 2c 08 ca 9a a7 a2 da 22 75 94 b1 cd ab 68 15 97 d4 35 92 79 8a 57 07 fb c6 7d b2 5a a5 7d 7e 7c 9d f8 fa 4f 0b 52 78 5d 92 48 ae a3 89 1d bd b4 e4 30 b1 0a 26 03 50 3d 7a f1 75 20 12 4c 45 4c 0a 81 40 22 50 b0 8d 8d f4 bd 60 bc 55 b2 8d 33 a8 7b ee 95 74 7a 77 99 72 70 d1 ee 98 51 27 02 f1 bf 4f 22 90 7c 70 f7 98 3f c2 e4 fd 8b ea 32 76 6e f2 91 82 10 76 48 d4 d2 1f 1c 98 36 6d 1f 16 02 d0 7b 40 90 26 75 46 b5 cd 8f b2 11 b0 65 c5 b8 Data Ascii: bouw~E$H}o\|\|.WX4WqLe=5Fp#I$O}meM *l[Br'>0\gV,"uh5yW}Z}~\|ORx]H0&P=zu LEL@"P`U3{tzwrpQ'O"\|p?2vnvH6m{@&uFe
2024-04-17 22:34:34 UTC	1255	IN	Data Raw: 31 1f a2 fc e2 09 2c dd 10 d0 d3 10 22 17 83 dc c3 43 94 1b 57 a5 63 37 50 5d c6 c6 11 73 31 bd 35 5e 35 0e 31 2a b6 99 42 a0 8d a3 99 04 42 f1 d3 fd df 48 c3 b6 9e 8b e8 98 f2 78 31 db f1 79 ec 33 e5 4f 6a 2c 34 1e 21 5f d0 22 d3 f6 fe 48 d4 b9 1c c5 6a 00 67 6b 12 81 28 be 01 a1 6c 25 36 ee f5 d5 10 48 1f a5 fa c1 00 b5 04 d2 46 ec d0 5d 55 53 c2 ed a1 3d d0 bc 8f 2b ce a1 dd d8 4c 02 69 8e 69 90 b1 b9 c0 ad 5b cb f6 64 23 42 1d 46 f0 a8 84 f0 ea 0a 96 70 50 33 e8 b0 fc 47 ae a4 ce 93 e0 7e 92 b0 06 e5 53 85 40 7f 0c b1 57 e1 be 9a 23 cc fd a4 23 cc 72 b6 27 53 08 94 67 89 1e 21 3f af 89 8a bb 88 e5 f7 4f 30 85 40 29 b7 99 04 a2 d0 fb 03 e5 fe 97 e1 34 06 ad 49 ac f3 61 20 b0 81 ad 5c a2 93 a7 f0 7e a0 85 c0 0b eb 37 19 99 4b 28 17 05 8a 51 b5 f6 89 93 Data Ascii: 1,"CWc7P]s15^51*BBHx1y3Oj,4!_"Hjgk(l%6HF]US=+Lii[d#BFpP3G~S@W##r'Sg!?O0@)4Ia \~7K(Q
2024-04-17 22:34:34 UTC	1255	IN	Data Raw: fe c6 8f c2 62 00 ed dc 08 5f 6d 37 e8 a5 90 06 e1 58 75 19 0b 89 f2 0c e3 08 59 1b b8 9d b3 4c 2f 1f ed c9 80 6e 5b b8 4b 89 e8 65 83 24 79 6c a1 fa b0 62 74 82 c8 33 6c 95 9c 44 f7 96 20 92 4b 05 31 8c 78 14 85 21 32 44 6b 82 a4 36 48 be ff 56 7c 2e 46 00 72 21 3c 1f bc 28 97 d4 f7 36 71 c7 5b 84 07 e0 68 09 78 4c 27 c0 d7 27 6f b0 94 75 a6 6c 49 17 ba 21 e4 ee f0 60 19 6d 4f 8b 7d 77 9d cc be 46 34 22 88 ea e4 d0 02 2d 0c d9 4e d2 4c d2 66 f6 ee 14 b9 71 7e 58 7f 85 9d de aa d7 c3 a4 08 79 12 bc 62 a8 0f bc 1f 6a 4a 76 e4 85 44 9b a4 a0 eb fc 90 23 2d 77 88 2a c9 e3 f0 37 85 49 11 26 d5 e1 55 fc db f5 f0 32 c5 b1 27 cc fb 22 4f c2 24 00 4f de 5a 8f 52 99 92 3d 77 82 1b e0 bc 0f e9 bb ed fa 17 72 37 b8 16 ed 0e 82 38 86 92 3a da 12 24 50 d3 93 45 5e 3b Data Ascii: b_m7XuYL/n[Ke$ylbt3lD K1x!2Dk6HV\|.Fr!<(6q[hxL''oulI!`mO}wF4"-NLfq~XybjJvD#-w*7I&U2'"O$OZR=wr78:$PE^;
2024-04-17 22:34:34 UTC	365	IN	Data Raw: bd d0 66 c8 02 58 83 80 65 45 26 1f bc 40 9c cb fb cf 4c 43 43 23 b9 c8 cd df 78 18 55 78 88 a6 ce 46 a6 f5 43 a4 08 07 3c a2 c8 71 c3 ac ae ea 1e 4c 43 43 23 d9 c8 b8 fe 8d 52 ad 0e 21 3a b2 31 dd 4e c6 71 cf 76 7c 97 b5 06 34 34 74 d5 05 25 55 c9 41 67 2f 62 38 14 a2 8a 91 7a b6 e0 cb 8b 31 24 e8 e8 96 e8 9b 19 c0 67 62 ad 01 0d 0d 0d 48 d1 c3 fa 7a 88 1b fe 51 db f1 17 db ae ef 20 72 40 44 c3 1d 6f 79 b8 c6 3b 2c 7f 0e 6b 2d 68 68 68 80 00 e2 36 ad 42 8e 04 22 33 d6 8a d0 d0 d0 ca 53 6f 69 5c e4 81 ee 5e 0c ba 62 1a 1a 1a 49 05 61 6a 7e 3e b8 bd e9 e4 81 b9 cf dd 1b 0f 67 ad 0f 0d 0d 1d 89 20 97 d1 44 02 79 89 60 d2 dd 4a d0 d0 d0 c0 d8 0e 38 89 a9 3d b6 04 77 2a 73 be d3 d0 d0 88 df 30 88 3b c1 75 51 3b b4 43 8d 0a b3 2b 36 f6 a1 a1 a1 01 87 31 ee 04 Data Ascii: fXeE&@LCC#xUxFC<qLCC#R!:1Nqv\|44t%UAg/b8z1$gbHzQ r@Doy;,k-hhh6B"3Soi\^bIaj~>g Dy`J8=w*s0;uQ;C+61

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49762	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:34 UTC	3823	OUT	GET /xjs/_/js/k=xjs.hd.en.Gos8NmADZ0A.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAkgAIAAAoAACAAAAAAgMAQAEAAQAAWAZAICCAIABgAQhCAhzIBgIAJAAAACAAIAQgCAIAAAABAAQAAAAAAAAAAgAECBAAAAAAAAAAAAAA6AQAIAADBACEAAAEAAADIAxAcgEEKAgAAAAAAAAAAAAAEIEEwFySgIAACAAAAAAAAAAAAACCVTiyMAQ/d=1/ed=1/dg=2/br=1/rs=ACT90oHjHvDG23MtVpqokFyaqpDqKHsdQA/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;Afksuc:wMx0R;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DM55c:imLrKe;DULqB:RKfG5c;Dkk6ge:wJqrrd;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;Erl4fe:FloWmf,FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HqeXPd:cmbnH;IBADCc:RYquRb;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KeeMUb:HiPxjc;KpRAue:Tia57b;LBgRLc:XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;Oj465e:KG2eXe,KG2eXe;OohIYe:mpEAQb;Pjplud:EEDORb,PoEs9b;Q1Ow7b:x5CSu;Q6C5kf:pfdZCe;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;RDNBlf:zPRCJb;SLtqO:Kh1xYe;SMDL4c:fTfGO,fTfGO;SNUn3:ZwDk9d,x8cHvb;ShpF6e:N0pvGc;TxfV6d:YORN0b;U96pRd:FsR04;UDrY1c:eps46d;UVmjEd:EesRsb;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VsAqSb:PGf2Re;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;YV5bee:IvPZ6d;YkQtAf:rx8ur;ZMvdv:PHFPjb;ZWEUA:afR4Cf;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;bDXwRe:UsyOtc;bFZ6gf:RsDQqe;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:VruDBd;eHDfl:ofjVkb;eO3lse:nFClrf;fWLTFc:TVBJbf;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:cEt90b;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;hsLsYc:Vl118;iFQyKf:QIhFr,vfuNJf;imqimf:jKGL2e;io8t5d:sgY6Zb;jY0zg:Q6tNgc;k2Qxcb:XY51pe;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kbAm9d:MkHyGd;lkq0A:JyBE3e;nAFL3:NTMZac,s39S4;oGtAuc:sOXFj;oSUNyd:fTfGO,fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;p2tIDb:tp1Cx;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:mg5CW;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:d7YSfd,x4FYXe;rQSrae:C6D5Fc;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;tH4IIe:Ymry6;tosKvd:ZCqP3;trZL0b:qY8PFe;uY49fb:COQbmf;uuQkY:u2V3ud;vGrMZ:lPJJ0c;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:TtcOte;wV5Pjc:L8KGxe;whEZac:F4AmNb;xBbsrc:NEW1Qc;yGxLoc:FmAr0c;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zaIgPb:Qtpxbd/m=cdos,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU
2024-04-17 22:34:34 UTC	818	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 875127 Date: Wed, 17 Apr 2024 22:34:34 GMT Expires: Thu, 17 Apr 2025 22:34:34 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Tue, 16 Apr 2024 23:00:34 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:34:34 UTC	437	IN	Data Raw: 74 68 69 73 2e 5f 68 64 3d 74 68 69 73 2e 5f 68 64 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 4d 49 54 0a 2a 2f 0a 2f 2a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 Data Ascii: this._hd=this._hd\|\|{};(function(_){var window=this;try{/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0// SPDX-License-Identifier: Apache-2.0// SPDX-License-Identifier: MIT// SPDX-License-Identifier: Apac
2024-04-17 22:34:34 UTC	1255	IN	Data Raw: 61 2c 49 62 61 2c 4b 62 61 2c 4f 62 61 2c 52 62 61 2c 53 62 61 2c 55 62 61 2c 57 62 61 2c 58 62 61 2c 24 62 61 2c 62 63 61 2c 63 63 61 2c 64 63 61 2c 65 63 61 2c 6a 63 61 2c 6c 63 61 2c 72 63 61 2c 73 63 61 2c 74 63 61 2c 6f 63 61 2c 75 63 61 2c 6e 63 61 2c 76 63 61 2c 6d 63 61 2c 77 63 61 2c 78 63 61 2c 45 63 61 2c 47 63 61 2c 48 63 61 2c 4e 63 61 2c 4f 63 61 2c 50 63 61 2c 53 63 61 2c 54 63 61 2c 55 63 61 2c 56 63 61 2c 57 63 61 2c 5a 63 61 2c 24 63 61 2c 63 64 61 2c 61 64 61 2c 67 64 61 2c 68 64 61 2c 6e 64 61 2c 6f 64 61 2c 71 64 61 2c 70 64 61 2c 73 64 61 2c 75 64 61 2c 74 64 61 2c 77 64 61 2c 76 64 61 2c 7a 64 61 2c 79 64 61 2c 42 64 61 2c 46 64 61 2c 47 64 61 2c 4a 64 61 2c 4c 64 61 2c 4d 64 61 2c 4f 64 61 2c 51 64 61 2c 59 64 61 2c 5a 64 61 2c 4b Data Ascii: a,Iba,Kba,Oba,Rba,Sba,Uba,Wba,Xba,$ba,bca,cca,dca,eca,jca,lca,rca,sca,tca,oca,uca,nca,vca,mca,wca,xca,Eca,Gca,Hca,Nca,Oca,Pca,Sca,Tca,Uca,Vca,Wca,Zca,$ca,cda,ada,gda,hda,nda,oda,qda,pda,sda,uda,tda,wda,vda,zda,yda,Bda,Fda,Gda,Jda,Lda,Mda,Oda,Qda,Yda,Zda,K
2024-04-17 22:34:34 UTC	1255	IN	Data Raw: 2c 45 73 61 2c 48 73 61 2c 46 73 61 2c 47 73 61 2c 49 73 61 2c 4b 73 61 3b 0a 5f 2e 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 61 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 76 6f 69 64 20 30 21 3d 3d 62 26 26 28 74 68 69 73 2e 63 61 75 73 65 3d 62 29 7d 3b 5f 2e 61 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 25 73 22 29 3b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c Data Ascii: ,Esa,Hsa,Fsa,Gsa,Isa,Ksa;_.aa=function(a,b){if(Error.captureStackTrace)Error.captureStackTrace(this,_.aa);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));void 0!==b&&(this.cause=b)};_.aaa=function(a,b){a=a.split("%s");for(var c="",
2024-04-17 22:34:34 UTC	1255	IN	Data Raw: 74 68 3f 61 3a 61 2e 73 75 62 61 72 72 61 79 28 62 2c 63 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 65 2e 64 65 63 6f 64 65 28 61 29 7d 63 61 74 63 68 28 66 29 7b 69 66 28 62 3d 64 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 67 61 61 29 7b 74 72 79 7b 65 2e 64 65 63 6f 64 65 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 5b 31 32 38 5d 29 29 7d 63 61 74 63 68 28 67 29 7b 7d 74 72 79 7b 65 2e 64 65 63 6f 64 65 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 5b 39 37 5d 29 29 2c 67 61 61 3d 21 30 7d 63 61 74 63 68 28 67 29 7b 67 61 61 3d 21 31 7d 7d 62 3d 21 67 61 61 7d 62 26 26 28 65 61 61 3d 76 6f 69 64 20 30 29 3b 74 68 72 6f 77 20 66 3b 7d 7d 3b 0a 6c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 21 31 3b 62 3d 76 6f 69 64 20 30 3d 3d 3d 62 Data Ascii: th?a:a.subarray(b,c);try{return e.decode(a)}catch(f){if(b=d){if(void 0===gaa){try{e.decode(new Uint8Array([128]))}catch(g){}try{e.decode(new Uint8Array([97])),gaa=!0}catch(g){gaa=!1}}b=!gaa}b&&(eaa=void 0);throw f;}};laa=function(a){var b=!1;b=void 0===b
2024-04-17 22:34:34 UTC	1255	IN	Data Raw: 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 52 65 67 45 78 70 28 22 28 5b 41 2d 5a 5d 5b 5c 5c 77 20 5d 2b 29 2f 28 5b 5e 5c 5c 73 5d 2b 29 5c 5c 73 2a 28 3f 3a 5c 5c 28 28 2e 2a 3f 29 5c 5c 29 29 3f 22 2c 22 67 22 29 2c 63 3d 5b 5d 2c 64 3b 64 3d 62 2e 65 78 65 63 28 61 29 3b 29 63 2e 70 75 73 68 28 5b 64 5b 31 5d 2c 64 5b 32 5d 2c 64 5b 33 5d 7c 7c 76 6f 69 64 20 30 5d 29 3b 72 65 74 75 72 6e 20 63 7d 3b 5f 2e 71 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 6d 61 61 3f 21 21 5f 2e 66 61 26 26 30 3c 5f 2e 66 61 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 3b 5f 2e 72 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 71 61 61 28 29 3f 21 31 3a 5f 2e 69 61 28 22 4f 70 65 72 61 22 29 7d 3b 5f 2e Data Ascii: tion(a){for(var b=RegExp("([A-Z][\\w ]+)/([^\\s]+)\\s(?:\$(.?)\$)?","g"),c=[],d;d=b.exec(a);)c.push([d[1],d[2],d[3]\|\|void 0]);return c};_.qaa=function(){return _.maa?!!_.fa&&0<_.fa.brands.length:!1};_.raa=function(){return _.qaa()?!1:_.ia("Opera")};_.
2024-04-17 22:34:34 UTC	1255	IN	Data Raw: 6b 3b 63 61 73 65 20 22 36 2e 30 22 3a 62 3d 22 31 30 2e 30 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 37 2e 30 22 3a 62 3d 22 31 31 2e 30 22 7d 65 6c 73 65 20 62 3d 22 37 2e 30 22 3b 65 6c 73 65 20 62 3d 63 5b 31 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 0a 41 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 65 61 28 29 3b 69 66 28 22 49 6e 74 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 22 3d 3d 3d 61 29 72 65 74 75 72 6e 20 5f 2e 73 61 61 28 29 3f 5f 2e 7a 61 61 28 62 29 3a 22 22 3b 62 3d 5f 2e 70 61 61 28 62 29 3b 76 61 72 20 63 3d 5f 2e 79 61 61 28 62 29 3b 73 77 69 74 63 68 28 61 29 7b 63 61 73 65 20 22 4f 70 65 72 61 22 3a 69 66 28 5f 2e 72 61 61 28 29 29 72 65 74 75 72 6e 20 63 28 5b 22 56 65 72 73 69 6f 6e 22 2c 22 4f 70 65 72 61 22 5d Data Ascii: k;case "6.0":b="10.0";break;case "7.0":b="11.0"}else b="7.0";else b=c[1];return b};Aaa=function(a){var b=_.ea();if("Internet Explorer"===a)return _.saa()?_.zaa(b):"";b=_.paa(b);var c=_.yaa(b);switch(a){case "Opera":if(_.raa())return c(["Version","Opera"]
2024-04-17 22:34:34 UTC	1255	IN	Data Raw: 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 61 61 28 29 3f 22 57 69 6e 64 6f 77 73 22 3d 3d 3d 5f 2e 66 61 2e 70 6c 61 74 66 6f 72 6d 3a 5f 2e 69 61 28 22 57 69 6e 64 6f 77 73 22 29 7d 3b 49 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 61 61 28 29 3f 22 43 68 72 6f 6d 65 20 4f 53 22 3d 3d 3d 5f 2e 66 61 2e 70 6c 61 74 66 6f 72 6d 3a 5f 2e 69 61 28 22 43 72 4f 53 22 29 7d 3b 0a 5f 2e 4a 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5f 2e 65 61 28 29 2c 62 3d 22 22 3b 5f 2e 48 61 61 28 29 3f 28 62 3d 2f 57 69 6e 64 6f 77 73 20 28 3f 3a 4e 54 7c 50 68 6f 6e 65 29 20 28 5b 30 2d 39 2e 5d 2b 29 2f 2c 62 3d 28 61 3d 62 2e 65 78 65 63 28 61 29 29 3f 61 5b 31 5d 3a 22 30 2e 30 22 29 3a 5f 2e 6e 61 28 29 3f 28 62 3d 2f 28 3f 3a 69 Data Ascii: ion(){return Caa()?"Windows"===_.fa.platform:_.ia("Windows")};Iaa=function(){return Caa()?"Chrome OS"===_.fa.platform:_.ia("CrOS")};_.Jaa=function(){var a=_.ea(),b="";_.Haa()?(b=/Windows (?:NT\|Phone) ([0-9.]+)/,b=(a=b.exec(a))?a[1]:"0.0"):_.na()?(b=/(?:i
2024-04-17 22:34:34 UTC	1255	IN	Data Raw: 6e 20 65 3b 72 65 74 75 72 6e 2d 31 7d 3b 5f 2e 75 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 30 3c 3d 5f 2e 73 61 28 61 2c 62 29 7d 3b 5f 2e 4f 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 66 6f 72 28 76 61 72 20 62 3d 61 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 3d 62 3b 62 2d 2d 29 64 65 6c 65 74 65 20 61 5b 62 5d 3b 61 2e 6c 65 6e 67 74 68 3d 30 7d 3b 5f 2e 77 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 5f 2e 75 61 28 61 2c 62 29 7c 7c 61 2e 70 75 73 68 28 62 29 7d 3b 5f 2e 79 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 5f 2e 73 61 28 61 2c 62 29 3b 76 61 72 20 63 3b 28 63 3d 30 3c 3d 62 29 26 26 5f 2e 78 61 28 61 2c 62 29 3b 72 65 74 75 72 6e 20 63 7d 3b Data Ascii: n e;return-1};_.ua=function(a,b){return 0<=_.sa(a,b)};_.Oaa=function(a){if(!Array.isArray(a))for(var b=a.length-1;0<=b;b--)delete a[b];a.length=0};_.wa=function(a,b){_.ua(a,b)\|\|a.push(b)};_.ya=function(a,b){b=_.sa(a,b);var c;(c=0<=b)&&_.xa(a,b);return c};
2024-04-17 22:34:34 UTC	1255	IN	Data Raw: 65 74 75 72 6e 20 5f 2e 55 61 61 28 61 2c 63 7c 7c 5f 2e 56 61 61 2c 21 31 2c 62 29 7d 3b 5f 2e 55 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 66 3d 61 2e 6c 65 6e 67 74 68 2c 67 3b 65 3c 66 3b 29 7b 76 61 72 20 68 3d 65 2b 28 66 2d 65 3e 3e 3e 31 29 2c 6b 3d 76 6f 69 64 20 30 3b 63 3f 6b 3d 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 61 5b 68 5d 2c 68 2c 61 29 3a 6b 3d 62 28 64 2c 61 5b 68 5d 29 3b 30 3c 6b 3f 65 3d 68 2b 31 3a 28 66 3d 68 2c 67 3d 21 6b 29 7d 72 65 74 75 72 6e 20 67 3f 65 3a 2d 65 2d 31 7d 3b 5f 2e 57 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 73 6f 72 74 28 62 7c 7c 5f 2e 56 61 61 29 7d 3b 0a 5f 2e 58 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d Data Ascii: eturn _.Uaa(a,c\|\|_.Vaa,!1,b)};_.Uaa=function(a,b,c,d){for(var e=0,f=a.length,g;e<f;){var h=e+(f-e>>>1),k=void 0;c?k=b.call(void 0,a[h],h,a):k=b(d,a[h]);0<k?e=h+1:(f=h,g=!k)}return g?e:-e-1};_.Waa=function(a,b){a.sort(b\|\|_.Vaa)};_.Xaa=function(a,b){var c=
2024-04-17 22:34:34 UTC	1255	IN	Data Raw: 45 64 67 65 22 29 7d 3b 5f 2e 65 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 64 62 61 29 72 65 74 75 72 6e 20 5f 2e 4d 61 28 61 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 22 2c 63 3d 30 2c 64 3d 61 2e 6c 65 6e 67 74 68 2d 31 30 32 34 30 3b 63 3c 64 3b 29 62 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 2e 73 75 62 61 72 72 61 79 28 63 2c 63 2b 3d 31 30 32 34 30 29 29 3b 62 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 63 3f 61 2e 73 75 62 61 72 72 61 79 28 63 29 3a 61 29 3b 72 65 74 75 72 6e 20 62 74 6f 61 28 62 29 7d 3b 67 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 66 62 61 5b 61 5d 7c 7c 22 22 7d 3b 0a 69 62 61 3d Data Ascii: Edge")};_.eba=function(a){if(!dba)return _.Ma(a);for(var b="",c=0,d=a.length-10240;c<d;)b+=String.fromCharCode.apply(null,a.subarray(c,c+=10240));b+=String.fromCharCode.apply(null,c?a.subarray(c):a);return btoa(b)};gba=function(a){return fba[a]\|\|""};iba=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49763	172.253.124.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:35 UTC	870	OUT	GET /images/branding/googlelogo/1x/googlelogo_color_272x92dp.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU
2024-04-17 22:34:35 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5969 Date: Wed, 17 Apr 2024 22:34:35 GMT Expires: Wed, 17 Apr 2024 22:34:35 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:34:35 UTC	584	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 10 00 00 00 5c 08 06 00 00 00 a6 e7 ea b6 00 00 17 18 49 44 41 54 78 01 ed 5d 0b 94 1c 55 99 be 3a d3 81 c0 2e 82 c2 2a 82 08 12 10 90 05 92 aa 9a 84 90 d8 5d b7 7b b2 41 e2 41 81 28 b8 bb 0a 08 8a 1b 5c 84 98 05 e5 31 9a ae 9a 09 89 c0 02 0a 41 40 36 e1 81 06 17 10 1f 90 cc 24 01 f4 08 28 c8 43 58 58 7c 10 1e 64 fa 11 92 49 55 75 1e 99 64 7a ef b7 e6 b8 a4 b7 67 e6 bf d5 75 bb aa 87 fb 9d 73 4f e7 31 d3 d3 67 ea d6 57 ff fd ff ef ff 7e 16 07 66 76 ad db 2b ed 54 4c ee 7a a7 71 d7 9f 63 bb c1 65 b6 eb 3b dc f1 7b c4 df e7 8b bf 5f 22 d6 b9 d9 ee 60 56 da f5 8f 4e 77 55 77 67 1a 1a 1a ef 4c a4 7b 36 1f cc 9d ca 79 dc 0d ee b2 5d ff cf e2 b5 2a b3 32 79 6f bb 78 7d 5e 7c ef cd dc f5 ff 29 dd e5 ed cb Data Ascii: PNGIHDR\IDATx]U:.]{AA(\1A@6$(CXX\|dIUudzgusO1gW~fv+TLzqce;{_"`VNwUwgL{6y]2yox}^\|)
2024-04-17 22:34:35 UTC	1255	IN	Data Raw: 6c 0c 29 f2 7a c1 ce fb 67 88 5e 96 76 16 21 10 9d d8 ae ff 2d ee 06 be 26 0f 0d 4d 20 09 45 67 97 ff 77 c8 4b 84 20 0f 9f 3b fe d7 40 1c 71 69 50 34 79 68 68 02 89 11 b3 97 55 db 6c 37 58 2d 1f 75 f8 bf ce 2d d8 74 50 93 8f 58 9f 15 44 e2 69 f2 d0 d0 04 92 10 70 27 b8 54 3e 59 19 5c 6f dc 54 4d b1 18 90 ed de 78 78 26 1f fc b7 26 0f 0d 4d 20 09 c8 7b f0 bc b7 4d 2a 51 ea 04 df 40 a2 93 c5 08 b4 f9 c3 43 84 69 68 68 02 89 07 5d 5d d5 77 73 d7 7f 4c 92 3c e6 31 0d 0d 0d 4d 20 82 0c 3e 2f 79 6c b9 86 1e 79 68 68 8c 59 68 02 99 79 ed d0 6e dc f5 d6 48 94 69 57 21 d9 ca 34 34 34 34 81 70 27 38 47 82 3c d6 a1 8c ca 34 34 34 34 81 20 f7 21 d3 24 27 92 95 5f 60 80 86 86 86 26 10 f4 ba c8 68 3d 40 38 0c d0 d0 d0 d0 04 c2 f3 c1 9d 54 02 41 6f 0c 03 34 34 34 34 81 Data Ascii: l)zg^v!-&M EgwK ;@qiP4yhhUl7X-u-tPXDip'T>Y\oTMxx&&M {M*Q@Cihh]]wsL<1M >/ylyhhYhynHiW!4444p'8G<4444 !$'_`&h=@8TAo4444
2024-04-17 22:34:35 UTC	1255	IN	Data Raw: de 62 a8 6f fc 01 75 df 77 f5 f8 03 c5 fb 7e 45 24 48 9f 96 7d 6f 7c 1e 7c 2e ba 57 8d bf 58 9e 34 bc 57 71 4c 87 e5 65 3d 05 35 46 8d 70 d7 9f 8b d1 23 49 24 10 ec 8d 10 e4 f1 b8 d8 4f 9f 7d 6d ca 94 f1 c3 ed 65 1c 4d 20 2a a3 bf a7 b9 6c 98 9b d6 5b 42 9c ed 72 f3 d8 27 90 ca b0 09 3e 30 b8 5c e8 67 bd 56 e0 1d 9f 82 d0 87 2c 08 ca 9a a7 a2 da 22 75 94 b1 cd ab 68 15 97 d4 35 92 79 8a 57 07 fb c6 7d b2 5a a5 7d 7e 7c 9d f8 fa 4f 0b 52 78 5d 92 48 ae a3 89 1d bd b4 e4 30 b1 0a 26 03 50 3d 7a f1 75 20 12 4c 45 4c 0a 81 40 22 50 b0 8d 8d f4 bd 60 bc 55 b2 8d 33 a8 7b ee 95 74 7a 77 99 72 70 d1 ee 98 51 27 02 f1 bf 4f 22 90 7c 70 f7 98 3f c2 e4 fd 8b ea 32 76 6e f2 91 82 10 76 48 d4 d2 1f 1c 98 36 6d 1f 16 02 d0 7b 40 90 26 75 46 b5 cd 8f b2 11 b0 65 c5 b8 Data Ascii: bouw~E$H}o\|\|.WX4WqLe=5Fp#I$O}meM *l[Br'>0\gV,"uh5yW}Z}~\|ORx]H0&P=zu LEL@"P`U3{tzwrpQ'O"\|p?2vnvH6m{@&uFe
2024-04-17 22:34:35 UTC	1255	IN	Data Raw: 31 1f a2 fc e2 09 2c dd 10 d0 d3 10 22 17 83 dc c3 43 94 1b 57 a5 63 37 50 5d c6 c6 11 73 31 bd 35 5e 35 0e 31 2a b6 99 42 a0 8d a3 99 04 42 f1 d3 fd df 48 c3 b6 9e 8b e8 98 f2 78 31 db f1 79 ec 33 e5 4f 6a 2c 34 1e 21 5f d0 22 d3 f6 fe 48 d4 b9 1c c5 6a 00 67 6b 12 81 28 be 01 a1 6c 25 36 ee f5 d5 10 48 1f a5 fa c1 00 b5 04 d2 46 ec d0 5d 55 53 c2 ed a1 3d d0 bc 8f 2b ce a1 dd d8 4c 02 69 8e 69 90 b1 b9 c0 ad 5b cb f6 64 23 42 1d 46 f0 a8 84 f0 ea 0a 96 70 50 33 e8 b0 fc 47 ae a4 ce 93 e0 7e 92 b0 06 e5 53 85 40 7f 0c b1 57 e1 be 9a 23 cc fd a4 23 cc 72 b6 27 53 08 94 67 89 1e 21 3f af 89 8a bb 88 e5 f7 4f 30 85 40 29 b7 99 04 a2 d0 fb 03 e5 fe 97 e1 34 06 ad 49 ac f3 61 20 b0 81 ad 5c a2 93 a7 f0 7e a0 85 c0 0b eb 37 19 99 4b 28 17 05 8a 51 b5 f6 89 93 Data Ascii: 1,"CWc7P]s15^51*BBHx1y3Oj,4!_"Hjgk(l%6HF]US=+Lii[d#BFpP3G~S@W##r'Sg!?O0@)4Ia \~7K(Q
2024-04-17 22:34:35 UTC	1255	IN	Data Raw: fe c6 8f c2 62 00 ed dc 08 5f 6d 37 e8 a5 90 06 e1 58 75 19 0b 89 f2 0c e3 08 59 1b b8 9d b3 4c 2f 1f ed c9 80 6e 5b b8 4b 89 e8 65 83 24 79 6c a1 fa b0 62 74 82 c8 33 6c 95 9c 44 f7 96 20 92 4b 05 31 8c 78 14 85 21 32 44 6b 82 a4 36 48 be ff 56 7c 2e 46 00 72 21 3c 1f bc 28 97 d4 f7 36 71 c7 5b 84 07 e0 68 09 78 4c 27 c0 d7 27 6f b0 94 75 a6 6c 49 17 ba 21 e4 ee f0 60 19 6d 4f 8b 7d 77 9d cc be 46 34 22 88 ea e4 d0 02 2d 0c d9 4e d2 4c d2 66 f6 ee 14 b9 71 7e 58 7f 85 9d de aa d7 c3 a4 08 79 12 bc 62 a8 0f bc 1f 6a 4a 76 e4 85 44 9b a4 a0 eb fc 90 23 2d 77 88 2a c9 e3 f0 37 85 49 11 26 d5 e1 55 fc db f5 f0 32 c5 b1 27 cc fb 22 4f c2 24 00 4f de 5a 8f 52 99 92 3d 77 82 1b e0 bc 0f e9 bb ed fa 17 72 37 b8 16 ed 0e 82 38 86 92 3a da 12 24 50 d3 93 45 5e 3b Data Ascii: b_m7XuYL/n[Ke$ylbt3lD K1x!2Dk6HV\|.Fr!<(6q[hxL''oulI!`mO}wF4"-NLfq~XybjJvD#-w*7I&U2'"O$OZR=wr78:$PE^;
2024-04-17 22:34:35 UTC	365	IN	Data Raw: bd d0 66 c8 02 58 83 80 65 45 26 1f bc 40 9c cb fb cf 4c 43 43 23 b9 c8 cd df 78 18 55 78 88 a6 ce 46 a6 f5 43 a4 08 07 3c a2 c8 71 c3 ac ae ea 1e 4c 43 43 23 d9 c8 b8 fe 8d 52 ad 0e 21 3a b2 31 dd 4e c6 71 cf 76 7c 97 b5 06 34 34 74 d5 05 25 55 c9 41 67 2f 62 38 14 a2 8a 91 7a b6 e0 cb 8b 31 24 e8 e8 96 e8 9b 19 c0 67 62 ad 01 0d 0d 0d 48 d1 c3 fa 7a 88 1b fe 51 db f1 17 db ae ef 20 72 40 44 c3 1d 6f 79 b8 c6 3b 2c 7f 0e 6b 2d 68 68 68 80 00 e2 36 ad 42 8e 04 22 33 d6 8a d0 d0 d0 ca 53 6f 69 5c e4 81 ee 5e 0c ba 62 1a 1a 1a 49 05 61 6a 7e 3e b8 bd e9 e4 81 b9 cf dd 1b 0f 67 ad 0f 0d 0d 1d 89 20 97 d1 44 02 79 89 60 d2 dd 4a d0 d0 d0 c0 d8 0e 38 89 a9 3d b6 04 77 2a 73 be d3 d0 d0 88 df 30 88 3b c1 75 51 3b b4 43 8d 0a b3 2b 36 f6 a1 a1 a1 01 87 31 ee 04 Data Ascii: fXeE&@LCC#xUxFC<qLCC#R!:1Nqv\|44t%UAg/b8z1$gbHzQ r@Doy;,k-hhh6B"3Soi\^bIaj~>g Dy`J8=w*s0;uQ;C+61

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49766	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:35 UTC	1456	OUT	GET /images/searchbox/desktop_searchbox_sprites318_hr.webp HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU
2024-04-17 22:34:35 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 660 Date: Wed, 17 Apr 2024 22:34:35 GMT Expires: Wed, 17 Apr 2024 22:34:35 GMT Cache-Control: private, max-age=31536000 Last-Modified: Wed, 22 Apr 2020 22:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:34:35 UTC	584	IN	Data Raw: 52 49 46 46 8c 02 00 00 57 45 42 50 56 50 38 4c 80 02 00 00 2f 27 c0 1e 10 d5 48 76 b6 3d 6e 95 fb bf 0a bb 07 b8 51 ea d8 9f 99 61 e5 e8 28 52 76 0c 6f ab da 55 98 1c c6 fe ea 8a 99 6c 18 b6 6d 1b a6 ff 1f dc da f4 06 30 6c db 36 6c ae ed 66 da 0c b1 ed 09 a4 90 41 3f 42 08 43 98 41 19 94 c1 32 68 06 9d 41 67 30 84 10 0e e1 47 38 07 6e 23 29 52 ba 6a f1 78 a0 e6 be 50 9e 46 e5 ce 49 3b cc 4f 78 a1 e7 c7 cf f5 1c 37 2d f7 c8 cf 62 58 9e 2f eb c0 5d c5 88 96 af 33 cb b8 1c 54 80 ab 93 e1 a2 35 b7 ba 01 78 ee ac da f6 47 2e 43 09 aa 19 e0 b7 25 e2 75 03 8e 19 f9 14 75 2f 97 5f b4 3d f0 b2 94 98 bc 10 3c 21 71 06 5c 86 f8 07 39 02 f7 de b2 c2 15 5c f7 a6 1a 07 70 3a 14 bc 50 f8 34 1f 61 53 00 4e 29 9c 3e b0 3e 18 ae 22 06 db 83 39 99 e0 56 68 20 a7 aa d0 80 Data Ascii: RIFFWEBPVP8L/'Hv=nQa(RvoUlm0l6lfA?BCA2hAg0G8n#)RjxPFI;Ox7-bX/]3T5xG.C%uu/_=<!q\9\p:P4aSN)>>"9Vh
2024-04-17 22:34:35 UTC	76	IN	Data Raw: 25 ed f7 1a 3b 0c 5b 52 3e 4e 12 23 dc 57 c2 65 8f e2 40 71 07 08 1e 28 e6 10 c1 ef 5d 26 7f 02 0d 1d 96 e2 4b 99 03 b9 bf 9a ed c8 3f af 7c 07 7a 10 1e 28 df 11 e5 3a 26 6d 01 56 ce 43 e7 27 c6 9f c0 0f 44 5e e3 52 9e bb aa 00 Data Ascii: %;[R>N#We@q(]&K?\|z(:&mVC'D^R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49767	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:35 UTC	1603	OUT	POST /gen_204?s=webhp&t=aft&atyp=csi&ei=eU4gZpbFNNqWkPIPhcWVmAg&rt=wsrt.2468,aft.805,cbt.119,hst.118,prt.805&wh=907&imn=11&ima=0&imad=0&imac=2&imf=0&aft=1&aftp=-1&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU
2024-04-17 22:34:35 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-mBtfShfhvBv09CXnEJakwA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Wed, 17 Apr 2024 22:34:35 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49768	172.253.124.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:35 UTC	864	OUT	GET /images/searchbox/desktop_searchbox_sprites318_hr.webp HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU
2024-04-17 22:34:35 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 660 Date: Wed, 17 Apr 2024 22:34:35 GMT Expires: Wed, 17 Apr 2024 22:34:35 GMT Cache-Control: private, max-age=31536000 Last-Modified: Wed, 22 Apr 2020 22:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:34:35 UTC	584	IN	Data Raw: 52 49 46 46 8c 02 00 00 57 45 42 50 56 50 38 4c 80 02 00 00 2f 27 c0 1e 10 d5 48 76 b6 3d 6e 95 fb bf 0a bb 07 b8 51 ea d8 9f 99 61 e5 e8 28 52 76 0c 6f ab da 55 98 1c c6 fe ea 8a 99 6c 18 b6 6d 1b a6 ff 1f dc da f4 06 30 6c db 36 6c ae ed 66 da 0c b1 ed 09 a4 90 41 3f 42 08 43 98 41 19 94 c1 32 68 06 9d 41 67 30 84 10 0e e1 47 38 07 6e 23 29 52 ba 6a f1 78 a0 e6 be 50 9e 46 e5 ce 49 3b cc 4f 78 a1 e7 c7 cf f5 1c 37 2d f7 c8 cf 62 58 9e 2f eb c0 5d c5 88 96 af 33 cb b8 1c 54 80 ab 93 e1 a2 35 b7 ba 01 78 ee ac da f6 47 2e 43 09 aa 19 e0 b7 25 e2 75 03 8e 19 f9 14 75 2f 97 5f b4 3d f0 b2 94 98 bc 10 3c 21 71 06 5c 86 f8 07 39 02 f7 de b2 c2 15 5c f7 a6 1a 07 70 3a 14 bc 50 f8 34 1f 61 53 00 4e 29 9c 3e b0 3e 18 ae 22 06 db 83 39 99 e0 56 68 20 a7 aa d0 80 Data Ascii: RIFFWEBPVP8L/'Hv=nQa(RvoUlm0l6lfA?BCA2hAg0G8n#)RjxPFI;Ox7-bX/]3T5xG.C%uu/_=<!q\9\p:P4aSN)>>"9Vh
2024-04-17 22:34:35 UTC	76	IN	Data Raw: 25 ed f7 1a 3b 0c 5b 52 3e 4e 12 23 dc 57 c2 65 8f e2 40 71 07 08 1e 28 e6 10 c1 ef 5d 26 7f 02 0d 1d 96 e2 4b 99 03 b9 bf 9a ed c8 3f af 7c 07 7a 10 1e 28 df 11 e5 3a 26 6d 01 56 ce 43 e7 27 c6 9f c0 0f 44 5e e3 52 9e bb aa 00 Data Ascii: %;[R>N#We@q(]&K?\|z(:&mVC'D^R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49769	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:35 UTC	1928	OUT	POST /gen_204?atyp=csi&ei=eU4gZpbFNNqWkPIPhcWVmAg&s=webhp&t=all&wh=907&imn=11&ima=0&imad=0&imac=2&imf=0&aft=1&aftp=-1&adh=&ime=1&imex=1&imeh=0&imeha=0&imehb=0&imea=0&imeb=0&imel=0&imed=0&scp=0&mem=ujhs.17,tjhs.22,jhsl.2173,dm.8&nv=ne.2,feid.d86e3dcc-32a9-4378-905e-22a63a987187&net=dl.6650,ect.4g,rtt.200&hp=&sys=hc.4&p=bs.true&rt=hst.118,cbt.119,aft.805,prt.805,aftqf.813,xjses.1477,xjsee.1517,xjs.1517,lcp.824,fcp.805,wsrt.2468,cst.215,dnst.0,rqst.762,rspt.437,sslt.214,rqstt.2143,unt.1927,cstt.1928,dit.3284&zx=1713393275159&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU
2024-04-17 22:34:35 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-d6MGIwNcXpFoUa6UIPDhMw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Wed, 17 Apr 2024 22:34:35 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49772	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:35 UTC	1467	OUT	GET /complete/search?q&cp=0&client=gws-wiz&xssi=t&gs_pcrt=2&hl=en&authuser=0&psi=eU4gZpbFNNqWkPIPhcWVmAg.1713393275186&dpr=1&nolsbt=1 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU
2024-04-17 22:34:36 UTC	1742	IN	HTTP/1.1 200 OK X-Content-Type-Options: nosniff Date: Wed, 17 Apr 2024 22:34:36 GMT Expires: Wed, 17 Apr 2024 22:34:36 GMT Cache-Control: private, max-age=3600 Content-Type: application/json; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-Cy6TYFnOkfS0SMU7SQ3ixQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-17 22:34:36 UTC	1742	IN	Data Raw: 39 38 39 0d 0a 29 5d 7d 27 0a 5b 5b 5b 22 63 69 63 61 64 61 73 20 6d 61 70 22 2c 30 2c 5b 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 2c 31 34 33 5d 2c 7b 22 7a 66 22 3a 33 33 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 22 3a 22 31 22 7d 7d 5d 2c 5b 22 74 6f 6d 20 63 6f 74 74 6f 6e 22 2c 34 36 2c 5b 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 2c 31 34 33 5d 2c 7b 22 6c 6d 22 3a 5b 5d 2c 22 7a 66 22 3a 33 33 2c 22 7a 68 22 3a 22 54 6f 6d 20 43 6f 74 74 6f 6e 22 2c 22 7a 69 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 53 65 6e 61 74 6f 72 22 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 70 22 3a 22 65 4a 7a 6a 34 74 54 50 31 54 63 77 53 6a 64 4f 4b 54 5a 67 39 4f 49 71 79 63 39 56 53 4d 34 76 4b 63 6e 50 41 77 42 4f 73 41 63 2d 22 Data Ascii: 989)]}'[[["cicadas map",0,[3,357,362,396,143],{"zf":33,"zl":8,"zp":{"gs_ss":"1"}}],["tom cotton",46,[3,357,362,396,143],{"lm":[],"zf":33,"zh":"Tom Cotton","zi":"United States Senator","zl":8,"zp":{"gs_ssp":"eJzj4tTP1TcwSjdOKTZg9OIqyc9VSM4vKcnPAwBOsAc-"
2024-04-17 22:34:36 UTC	706	IN	Data Raw: 4f 68 63 71 47 66 4a 43 4f 4a 62 31 6b 34 4d 66 63 4c 58 74 70 2f 38 41 55 75 48 6d 6b 4d 62 73 6e 4b 67 37 2f 72 61 71 34 33 38 55 55 6b 4a 75 49 7a 34 62 37 4b 2f 59 2b 6f 71 48 34 63 52 6f 70 53 73 6a 72 6b 48 48 4d 79 6a 66 74 74 69 71 69 35 68 41 42 6e 6e 6e 65 54 47 4f 56 4f 69 34 37 6b 65 5a 2f 49 55 4a 78 52 51 79 30 74 6d 64 53 75 6f 72 53 4b 35 31 4a 6d 35 66 44 55 71 70 48 38 77 6b 65 36 76 31 33 72 6d 59 32 55 62 37 30 2b 31 31 47 75 72 74 70 4d 48 6c 41 41 41 70 4b 38 4a 58 79 71 70 78 4b 58 58 44 4c 2b 6b 50 6e 63 68 57 32 64 56 38 42 6e 66 50 75 74 51 55 75 43 78 6f 6d 34 55 39 71 43 63 65 64 64 32 77 79 52 32 48 53 72 75 4b 2b 73 62 4f 35 67 59 4d 6a 78 67 67 6a 76 35 6a 35 47 6b 58 32 67 63 4d 4e 71 55 59 31 47 77 54 4e 33 47 6d 4a 45 48 Data Ascii: OhcqGfJCOJb1k4MfcLXtp/8AUuHmkMbsnKg7/raq438UUkJuIz4b7K/Y+oqH4cRopSsjrkHHMyjfttiqi5hABnnneTGOVOi47keZ/IUJxRQy0tmdSuorSK51Jm5fDUqpH8wke6v13rmY2Ub70+11GurtpMHlAAApK8JXyqpxKXXDL+kPnchW2dV8BnfPutQUuCxom4U9qCcedd2wyR2HSruK+sbO5gYMjxggjv5j5GkX2gcMNqUY1GwTN3GmJEH
2024-04-17 22:34:36 UTC	1255	IN	Data Raw: 63 34 63 0d 0a 52 78 2b 64 62 65 58 6c 6a 78 33 6f 6b 61 31 45 70 33 63 6d 64 75 6e 36 50 41 54 4b 35 78 58 52 50 73 39 75 66 47 30 31 34 63 2f 34 6c 73 2b 44 76 2f 43 32 53 50 76 7a 39 4b 35 2b 75 63 59 49 2b 64 55 76 32 66 33 79 32 6e 45 53 52 79 35 38 4f 34 6a 5a 43 4d 37 63 77 48 4d 75 66 6d 4d 66 4f 6b 30 79 36 7a 51 5a 2b 69 35 34 6f 34 69 6a 30 7a 54 59 6c 61 30 38 57 57 52 38 4c 4d 55 79 73 4a 48 6e 6e 76 32 2f 57 64 66 43 6e 45 38 37 33 4c 32 31 31 41 72 32 30 77 44 65 31 52 70 67 52 73 66 32 51 78 37 48 66 48 59 2f 48 5a 31 78 66 48 61 78 36 4c 65 2b 4d 69 6c 49 31 35 31 47 4f 6f 37 66 6a 55 42 77 52 71 63 6d 6a 61 6c 42 46 4f 41 62 61 64 55 53 55 4e 76 6a 31 33 37 5a 2b 6d 61 39 75 61 68 66 47 54 59 76 6a 78 64 6c 45 34 4b 4f 2f 77 43 69 37 37 Data Ascii: c4cRx+dbeXljx3oka1Ep3cmdun6PATK5xXRPs9ufG014c/4ls+Dv/C2SPvz9K5+ucYI+dUv2f3y2nESRy58O4jZCM7cwHMufmMfOk0y6zQZ+i54o4ij0zTYla08WWR8LMUysJHnnv2/WdfCnE873L211Ar20wDe1RpgRsf2Qx7HfHY/HZ1xfHax6Le+MilI151GOo7fjUBwRqcmjalBFOAbadUSUNvj137Z+ma9uahfGTYvjxdlE4KO/wCi77
2024-04-17 22:34:36 UTC	1255	IN	Data Raw: 41 41 77 44 41 51 41 43 45 51 4d 52 41 44 38 41 35 67 69 56 63 71 56 4e 49 36 74 43 56 51 55 52 59 71 57 50 65 72 4f 32 42 56 79 4a 6a 78 55 6d 55 41 5a 4f 77 72 7a 53 57 7a 68 51 6b 4f 61 6e 32 4b 6b 74 78 62 78 6e 44 75 32 66 6f 71 35 71 78 72 79 31 44 59 57 58 2b 34 59 6f 56 57 70 61 79 48 38 63 2f 51 4f 59 73 65 4b 70 64 4b 59 44 70 64 65 70 43 43 50 53 71 5a 45 72 52 70 4e 64 41 5a 46 7a 4a 56 4c 72 52 37 70 51 38 69 56 6b 30 45 6d 4d 6f 34 71 73 45 56 54 69 46 46 49 6f 4e 4d 4a 41 4e 67 76 52 30 69 70 48 52 64 55 31 4b 33 45 74 6e 59 7a 76 47 66 6c 63 4c 2b 71 33 74 52 4e 77 69 4c 41 35 63 34 58 67 6e 33 72 71 57 69 52 68 4c 4f 31 51 44 43 71 69 67 44 36 59 46 54 72 36 6f 34 79 55 55 4f 57 74 4e 53 54 62 4f 49 7a 36 48 71 73 4c 6d 4f 53 78 75 46 62 Data Ascii: AAwDAQACEQMRAD8A5giVcqVNI6tCVQURYqWPerO2BVyJjxUmUAZOwrzSWzhQkOan2KktxbxnDu2foq5qxry1DYWX+4YoVWpayH8c/QOYseKpdKYDpdepCCPSqZErRpNdAZFzJVLrR7pQ8iVk0EmMo4qsEVTiFFIoNMJANgvR0ipHRdU1K3EtnYzvGflcL+q3tRNwiLA5c4Xgn3rqWiRhLO1QDCqigD6YFTr6o4yUUOWtNSTbOIz6HqsLmOSxuFb
2024-04-17 22:34:36 UTC	645	IN	Data Raw: 49 72 49 48 43 72 2b 30 63 44 36 38 44 2f 74 5a 51 70 67 62 38 6e 67 56 76 2f 50 55 66 41 71 33 79 37 5a 30 4c 54 74 66 73 74 53 41 55 73 49 5a 66 35 48 4f 78 39 6a 52 73 30 48 54 6b 6d 75 62 52 71 56 33 70 31 70 65 76 7a 32 6f 45 4d 35 4d 73 48 41 42 2b 5a 50 62 38 71 33 6a 56 38 53 4d 33 44 30 66 2f 32 51 5c 75 30 30 33 64 5c 75 30 30 33 64 22 7d 5d 2c 5b 22 77 61 77 61 20 36 30 74 68 20 61 6e 6e 69 76 65 72 73 61 72 79 20 66 72 65 65 20 63 6f 66 66 65 65 22 2c 30 2c 5b 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 2c 31 34 33 5d 2c 7b 22 7a 66 22 3a 33 33 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 22 3a 22 31 22 7d 7d 5d 2c 5b 22 62 61 6c 74 69 6d 6f 72 65 20 6b 65 79 20 62 72 69 64 67 65 20 63 6f 6c 6c 61 70 73 65 22 2c 30 2c 5b 33 2c 33 35 Data Ascii: IrIHCr+0cD68D/tZQpgb8ngVv/PUfAq3y7Z0LTtfstSAUsIZf5HOx9jRs0HTkmubRqV3p1pevz2oEM5MsHAB+ZPb8q3jV8SM3D0f/2Q\u003d\u003d"}],["wawa 60th anniversary free coffee",0,[3,357,362,396,143],{"zf":33,"zl":8,"zp":{"gs_ss":"1"}}],["baltimore key bridge collapse",0,[3,35
2024-04-17 22:34:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49774	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:35 UTC	1642	OUT	GET /xjs/_/js/md=3/k=xjs.hd.en.Gos8NmADZ0A.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAkgAIAAAoAACAAAAAAgMAQAEAAQAAWAZAICCAIABgAQhCAhzIBgIAJAAAACAAIAQgCAIAAAABAAQAAAAAAAAAAgAECBAAAAAAAAAAAAAA6AQAIAADBACEAAAEAAADIAxAcgEEKAgAAAAAAAAAAAAAEIEEwFySgIAACAAAAAAAAAAAAACCVTiyMAQ/rs=ACT90oHjHvDG23MtVpqokFyaqpDqKHsdQA HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU
2024-04-17 22:34:36 UTC	818	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 195540 Date: Wed, 17 Apr 2024 22:34:36 GMT Expires: Thu, 17 Apr 2025 22:34:36 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Tue, 16 Apr 2024 23:00:34 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:34:36 UTC	437	IN	Data Raw: 7b 22 63 68 75 6e 6b 54 79 70 65 73 22 3a 22 31 30 30 30 30 31 31 31 31 31 31 31 31 30 30 31 31 31 31 30 30 30 31 30 30 30 30 31 30 31 31 30 31 30 30 30 30 30 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 30 31 31 31 31 30 31 31 31 31 31 31 31 31 31 31 31 30 31 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: {"chunkTypes":"100001111111100111100010000101101000000111111111111111111111111111111111111110111101111111111101011111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111
2024-04-17 22:34:36 UTC	1255	IN	Data Raw: 31 31 31 31 31 30 30 30 31 31 31 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 30 31 30 31 30 30 32 32 32 32 32 32 32 32 32 31 32 31 32 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 32 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 32 32 31 32 Data Ascii: 111110001110111111111111111111111111111111111111111111111010100222222222121221212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212122212121212121212122212
2024-04-17 22:34:36 UTC	1255	IN	Data Raw: 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 30 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 31 31 32 32 32 31 31 31 31 31 31 31 32 32 32 32 31 31 31 31 31 31 31 31 31 31 31 32 32 31 31 33 31 31 30 31 30 31 31 30 31 31 30 31 31 31 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111110111111111111211112221111111222211111111111221131101011011011101111111111111111111111111111111111111111111111111111111111111111111111111
2024-04-17 22:34:36 UTC	1255	IN	Data Raw: 32 32 32 32 32 32 32 32 32 32 32 32 31 31 32 32 32 32 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 33 31 31 31 31 31 31 31 31 31 31 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 31 32 32 32 32 32 32 32 32 32 31 31 31 31 31 31 32 32 32 31 32 31 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 33 32 32 33 31 31 31 31 31 31 32 32 31 32 33 31 31 31 31 31 31 31 31 31 31 31 31 31 32 32 32 32 32 31 33 31 32 33 31 32 32 32 32 32 32 33 32 33 33 31 33 32 32 32 31 31 31 31 31 31 Data Ascii: 222222222222112222211111111111111111111111112222222222222222222222222223111111111121111111111111111222222222222222222222222222222222221222222222111111222121222222222222222222222222222222222222222322311111122123111111111111122222131231222222323313222111111
2024-04-17 22:34:36 UTC	1255	IN	Data Raw: 31 33 31 31 31 31 31 31 31 31 31 32 32 31 31 32 33 31 31 31 31 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 33 32 33 32 31 31 33 33 32 31 33 33 31 31 31 33 32 33 31 31 31 31 31 32 33 33 32 33 32 32 33 33 32 32 32 33 33 33 32 33 32 33 33 33 33 33 33 33 32 32 32 32 32 33 33 33 32 32 33 33 33 33 33 33 33 33 31 33 32 33 33 33 31 31 31 31 31 31 33 32 31 32 32 32 33 33 33 32 32 33 32 32 32 31 33 33 32 32 31 33 33 32 33 31 32 33 32 32 32 32 32 31 33 32 33 33 33 32 32 33 32 32 32 32 32 33 32 32 32 32 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 31 31 32 32 31 33 33 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 131111111112211231111222222222222222232321133213311132311111233232233222333232333333322222333223333333313233311111132122233322322213322133231232222213233322322222322222111111111111111111111111111113112213313111111111111111111111111111111111111111111111111
2024-04-17 22:34:36 UTC	1255	IN	Data Raw: 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111
2024-04-17 22:34:36 UTC	1255	IN	Data Raw: 32 32 32 32 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 32 32 33 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 32 32 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 31 32 31 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 222221111111111111111111112122313111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111211211111111111111111111111111111111111121222111111111111112111111111111121111111111111111111111111312113111111111111111
2024-04-17 22:34:36 UTC	1255	IN	Data Raw: 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 32 32 32 31 32 32 31 32 32 32 32 31 31 31 32 31 32 32 31 31 31 31 31 31 32 31 31 31 32 31 31 31 31 31 31 32 31 31 31 31 32 32 31 32 32 32 32 32 32 32 31 32 32 31 32 32 32 32 32 32 32 32 31 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 31 32 32 31 32 31 31 31 31 31 31 31 31 31 31 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 31 31 31 31 31 32 32 32 32 32 32 32 31 32 32 32 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 31 31 31 31 31 31 31 31 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 31 32 31 32 31 32 31 32 31 32 31 31 32 31 31 31 31 31 31 31 31 31 Data Ascii: 111111111111112222122122221112122111111211121111112111122122222221221222222221222222222222222222222222122121111111111211111111111111111111112222222222222222222222221111122222221222211111111111111111111111121111111111121212121212121211212121212112111111111
2024-04-17 22:34:36 UTC	1255	IN	Data Raw: 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 33 33 33 33 33 33 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 33 33 33 32 31 32 31 31 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 32 31 31 33 33 31 33 31 31 31 31 31 31 33 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 33 33 32 31 32 31 32 32 31 32 32 32 31 31 33 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 33 31 31 31 31 31 31 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 111111111111111111111111111111111111111111111333333331111111111111111111111133332121113111111111111131111111111111121121133131111113311111111111111111111111111111112133212122122211313111111111111111111111111111111111111111123111111131111111111111111111111
2024-04-17 22:34:36 UTC	1255	IN	Data Raw: 31 32 32 32 32 32 32 33 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 31 31 33 32 32 32 31 33 31 33 33 30 30 30 30 30 31 31 31 31 31 31 31 31 31 31 31 31 33 32 33 32 32 32 33 32 31 31 33 33 32 33 31 33 33 30 30 32 30 30 30 30 30 30 30 30 30 30 31 31 31 31 31 33 32 32 33 33 32 33 31 30 30 30 30 30 31 31 31 31 31 31 31 31 Data Ascii: 122222230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002113222131330000011111111111132322232113323133002000000000011111322332310000011111111

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49773	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:35 UTC	3969	OUT	GET /xjs/_/js/k=xjs.hd.en.Gos8NmADZ0A.O/ck=xjs.hd.Lo9lRXsykaQ.L.W.O/am=cAEAAAAAAMAAAAAAAAAAAAAAAAAAgAAAAgAAAAAkgH7CAQrAhiAAAEAAgMAQAEAAQAAWAZAICCAIABgAQhCAhzIBgZAJCIAACSAJQQ4CAIhgggFSAYABAAAAIAEAgAECBhAwAAHAQwQAAAQ6AQEsAADJACEAAAEAAADIAxAcgEEKAgAAAAAAAAAAAAAEIEEwFySgIAACAAAAAAAAAAAAACCVTiyMAQ/d=1/exm=SNUn3,cEt90b,cdos,csi,d,dtl0hd,eHDfl,hsm,jsa,mb4ZUb,qddgKe,sTsDMc/ed=1/dg=2/br=1/ujg=1/rs=ACT90oH5-nqU-fkpcukkJFXUbfQh-hjsyg/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;Afksuc:wMx0R;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DM55c:imLrKe;DULqB:RKfG5c;Dkk6ge:wJqrrd;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;Erl4fe:FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HqeXPd:cmbnH;IBADCc:RYquRb;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KeeMUb:HiPxjc;KpRAue:Tia57b;LBgRLc:XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;Oj465e:KG2eXe;OohIYe:mpEAQb;Pjplud:EEDORb,PoEs9b;Q1Ow7b:x5CSu;Q6C5kf:pfdZCe;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;RDNBlf:zPRCJb;SLtqO:Kh1xYe;SMDL4c:fTfGO;SNUn3:ZwDk9d,x8cHvb;ShpF6e:N0pvGc;TxfV6d:YORN0b;U96pRd:FsR04;UDrY1c:eps46d;UVmjEd:EesRsb;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VsAqSb:PGf2Re;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;YV5bee:IvPZ6d;YkQtAf:rx8ur;ZMvdv:PHFPjb;ZWEUA:afR4Cf;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;bDXwRe:UsyOtc;bFZ6gf:RsDQqe;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:VruDBd;eHDfl:ofjVkb;eO3lse:nFClrf;fWLTFc:TVBJbf;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:cEt90b;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;hsLsYc:Vl118;iFQyKf:QIhFr,vfuNJf;imqimf:jKGL2e;io8t5d:sgY6Zb;jY0zg:Q6tNgc;k2Qxcb:XY51pe;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kbAm9d:MkHyGd;lkq0A:JyBE3e;nAFL3:NTMZac,s39S4;oGtAuc:sOXFj;oSUNyd:fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;p2tIDb:tp1Cx;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:mg5CW;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:d7YSfd,x4FYXe;rQSrae:C6D5Fc;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;tH4IIe:Ymry6;tosKvd:ZCqP3;trZL0b:qY8PFe;uY49fb:COQbmf;uuQkY:u2V3ud;vGrMZ:lPJJ0c;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:TtcOte;wV5Pjc:L8KGxe;whEZac:F4AmNb;xBbsrc:NEW1Qc;yGxLoc:FmAr0c;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zaIgPb:Qtpxbd/m=B2qlPe,DhPYme,GU4Gab,MpJwZc,NzU6V,UUJqVe,Wo3n8,aa,abd,async,epYOx,ifl,ms4mZb,mu,pHXghd,q0xTif,s39S4,sOXFj,sb_wiz,sf,sonic,spch?xjs=s1 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU
2024-04-17 22:34:36 UTC	818	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 501873 Date: Wed, 17 Apr 2024 22:34:36 GMT Expires: Thu, 17 Apr 2025 22:34:36 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Tue, 16 Apr 2024 23:00:34 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:34:36 UTC	437	IN	Data Raw: 5f 46 5f 69 6e 73 74 61 6c 6c 43 73 73 28 22 2e 6a 62 42 49 74 66 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 44 55 30 4e 4a 7b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 7d 2e 6c 50 33 4a 6f 66 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6e 4e 4d 75 4f 64 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 71 6c 69 2d 63 6f 6e 74 61 69 6e 65 72 2d 72 6f 74 61 74 65 20 31 35 36 38 2e 32 33 35 32 39 34 31 31 37 36 6d 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 3a 71 6c 69 2d 63 6f 6e Data Ascii: _F_installCss(".jbBItf{display:block;position:relative}.DU0NJ{bottom:0;left:0;position:absolute;right:0;top:0}.lP3Jof{display:inline-block;position:relative}.nNMuOd{-webkit-animation:qli-container-rotate 1568.2352941176ms linear infinite;animation:qli-con
2024-04-17 22:34:36 UTC	1255	IN	Data Raw: 6f 72 6d 3a 72 6f 74 61 74 65 28 31 74 75 72 6e 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 71 6c 69 2d 63 6f 6e 74 61 69 6e 65 72 2d 72 6f 74 61 74 65 7b 66 72 6f 6d 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 74 75 72 6e 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 74 75 72 6e 29 7d 7d 2e 52 6f 4b 6d 68 62 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 70 61 63 69 74 79 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6e 4e 4d 75 4f 64 20 2e 56 51 64 65 61 62 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f Data Ascii: orm:rotate(1turn)}}@keyframes qli-container-rotate{from{-webkit-transform:rotate(0);transform:rotate(0)}to{-webkit-transform:rotate(1turn);transform:rotate(1turn)}}.RoKmhb{height:100%;opacity:0;position:absolute;width:100%}.nNMuOd .VQdeab{-webkit-animatio
2024-04-17 22:34:36 UTC	1255	IN	Data Raw: 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 69 6e 66 69 6e 69 74 65 20 62 6f 74 68 2c 71 6c 69 2d 67 72 65 65 6e 2d 66 61 64 65 2d 69 6e 2d 6f 75 74 20 35 33 33 32 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 69 6e 66 69 6e 69 74 65 20 62 6f 74 68 3b 61 6e 69 6d 61 74 69 6f 6e 3a 71 6c 69 2d 66 69 6c 6c 2d 75 6e 66 69 6c 6c 2d 72 6f 74 61 74 65 20 35 33 33 32 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 69 6e 66 69 6e 69 74 65 20 62 6f 74 68 2c 71 6c 69 2d 67 72 65 65 6e 2d 66 61 64 65 2d 69 6e 2d 6f 75 74 20 35 33 33 32 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 69 6e 66 69 6e 69 74 65 20 62 6f 74 68 7d 2e 42 53 Data Ascii: bezier(0.4,0,0.2,1) infinite both,qli-green-fade-in-out 5332ms cubic-bezier(0.4,0,0.2,1) infinite both;animation:qli-fill-unfill-rotate 5332ms cubic-bezier(0.4,0,0.2,1) infinite both,qli-green-fade-in-out 5332ms cubic-bezier(0.4,0,0.2,1) infinite both}.BS
2024-04-17 22:34:36 UTC	1255	IN	Data Raw: 28 32 37 30 64 65 67 29 7d 33 37 2e 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 30 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 30 35 64 65 67 29 7d 35 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 35 34 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 35 34 30 64 65 67 29 7d 36 32 2e 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 36 37 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 36 37 35 64 65 67 29 7d 37 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 38 31 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 38 31 Data Ascii: (270deg)}37.5%{-webkit-transform:rotate(405deg);transform:rotate(405deg)}50%{-webkit-transform:rotate(540deg);transform:rotate(540deg)}62.5%{-webkit-transform:rotate(675deg);transform:rotate(675deg)}75%{-webkit-transform:rotate(810deg);transform:rotate(81
2024-04-17 22:34:36 UTC	1255	IN	Data Raw: 25 7b 6f 70 61 63 69 74 79 3a 30 7d 36 35 25 7b 6f 70 61 63 69 74 79 3a 30 7d 37 35 25 7b 6f 70 61 63 69 74 79 3a 30 2e 39 39 7d 39 30 25 7b 6f 70 61 63 69 74 79 3a 30 2e 39 39 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 7d 2e 62 65 44 51 50 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 35 30 25 7d 2e 46 63 58 66 69 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6c 65 66 74 3a 34 35 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 77 69 64 74 68 Data Ascii: %{opacity:0}65%{opacity:0}75%{opacity:0.99}90%{opacity:0.99}100%{opacity:0}}.beDQP{display:inline-block;height:100%;overflow:hidden;position:relative;width:50%}.FcXfi{box-sizing:border-box;height:100%;left:45%;overflow:hidden;position:absolute;top:0;width
2024-04-17 22:34:36 UTC	1255	IN	Data Raw: 61 74 69 6f 6e 3a 71 6c 69 2d 72 69 67 68 74 2d 73 70 69 6e 20 31 33 33 33 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 69 6e 66 69 6e 69 74 65 20 62 6f 74 68 7d 2e 42 53 6e 4c 62 20 2e 6e 4e 4d 75 4f 64 20 2e 4a 37 75 75 55 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 71 6c 69 2d 6c 65 66 74 2d 73 70 69 6e 20 31 33 33 33 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 69 6e 66 69 6e 69 74 65 20 62 6f 74 68 3b 61 6e 69 6d 61 74 69 6f 6e 3a 71 6c 69 2d 6c 65 66 74 2d 73 70 69 6e 20 31 33 33 33 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 69 6e 66 69 6e 69 74 65 20 62 6f 74 68 3b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f Data Ascii: ation:qli-right-spin 1333ms cubic-bezier(0.4,0,0.2,1) infinite both}.BSnLb .nNMuOd .J7uuUe{-webkit-animation:qli-left-spin 1333ms cubic-bezier(0.4,0,0.2,1) infinite both;animation:qli-left-spin 1333ms cubic-bezier(0.4,0,0.2,1) infinite both;border-left-co
2024-04-17 22:34:36 UTC	1255	IN	Data Raw: 65 28 2d 31 33 30 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 71 6c 69 2d 72 69 67 68 74 2d 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 33 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 33 30 64 65 67 29 7d 35 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 35 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 33 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 33 30 64 65 67 29 7d 7d 63 2d 77 69 7a 7b 63 6f 6e 74 61 69 6e 3a 73 74 79 6c 65 7d 63 2d 77 69 7a 3e 63 2d 64 61 Data Ascii: e(-130deg)}}@keyframes qli-right-spin{0%{-webkit-transform:rotate(-130deg);transform:rotate(-130deg)}50%{-webkit-transform:rotate(5deg);transform:rotate(5deg)}100%{-webkit-transform:rotate(-130deg);transform:rotate(-130deg)}}c-wiz{contain:style}c-wiz>c-da
2024-04-17 22:34:36 UTC	1255	IN	Data Raw: 65 6e 74 3a 6e 6f 72 6d 61 6c 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 36 70 78 7d 2e 67 49 59 4a 55 63 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 28 32 34 38 2c 32 34 39 2c 32 35 30 29 3b 62 6f 72 64 65 72 3a 31 70 78 20 64 61 73 68 65 64 20 23 63 30 63 30 63 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 Data Ascii: ent:normal;padding-top:16px}.gIYJUc{background:rgb(248,249,250);border:1px dashed #c0c0c0;border-radius:8px;box-sizing:border-box;display:-webkit-box;display:-webkit-flex;display:flex;-webkit-box-orient:vertical;-webkit-box-direction:normal;-webkit-flex-d
2024-04-17 22:34:36 UTC	1255	IN	Data Raw: 67 62 28 32 35 32 2c 32 33 32 2c 32 33 30 29 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 38 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 38 70 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 6a 75 73 74 69 66 79 3b 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 7d 2e 4f 48 7a 57 6a 62 7b 63 6f 6c 6f 72 3a 72 67 62 28 31 37 39 2c 32 30 2c 31 38 29 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 3b 2d 77 65 62 Data Ascii: gb(252,232,230);border-top-left-radius:8px;border-top-right-radius:8px;-webkit-box-pack:justify;-webkit-justify-content:space-between;justify-content:space-between;left:0;position:absolute;right:0;top:0}.OHzWjb{color:rgb(179,20,18);-webkit-box-flex:1;-web
2024-04-17 22:34:36 UTC	1255	IN	Data Raw: 55 55 65 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 38 70 78 7d 2e 65 38 45 75 6c 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 Data Ascii: UUe{display:-webkit-inline-box;display:-webkit-inline-flex;display:inline-flex;margin-right:18px}.e8Eule{box-sizing:border-box;display:-webkit-box;display:-webkit-flex;display:flex;-webkit-box-orient:vertical;-webkit-box-direction:normal;-webkit-flex-dire

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49771	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:35 UTC	1477	OUT	GET /client_204?atyp=i&biw=1280&bih=907&ei=eU4gZpbFNNqWkPIPhcWVmAg&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU
2024-04-17 22:34:36 UTC	1394	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-Yy3imuszdWrRKpLDw26VPQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Wed, 17 Apr 2024 22:34:36 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-04-17-22; expires=Fri, 17-May-2024 22:34:36 GMT; path=/; domain=.google.com; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49775	172.217.215.101	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:36 UTC	1354	OUT	GET /widget/callout?prid=19037050&pgid=19037049&puid=9ceb59a7585b55bd&cce=1&dc=1&origin=https%3A%2F%2Fwww.google.com&cn=callout&pid=1&spid=538&hl=en HTTP/1.1 Host: ogs.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU
2024-04-17 22:34:36 UTC	2079	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Frame-Options: ALLOW-FROM https://www.google.com Content-Security-Policy: frame-ancestors https://www.google.com Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/OneGoogleWidgetUi/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-jmIsso7kY55kRk4acYiyIw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/OneGoogleWidgetUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/OneGoogleWidgetUi/cspreport/allowlist x-ua-compatible: IE=edge Expires: Wed, 17 Apr 2024 22:34:36 GMT Date: Wed, 17 Apr 2024 22:34:36 GMT Cache-Control: private, max-age=3600 Strict-Transport-Security: max-age=31536000 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Embedder-Policy-Report-Only: require-corp; report-to="CoepOneGoogleWidgetUi" Report-To: {"group":"CoepOneGoogleWidgetUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/OneGoogleWidgetUi"}]} reporting-endpoints: default="/_/OneGoogleWidgetUi/web-reports?context=eJzjMtHikmJw1JBiKFj5gkni60smLSB2Sp_BGgLEPvUzWOOAuPXmOdbpQJz87zxrKRALcXP8mdO4kU1gxZLmFAArQhq9" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-17 22:34:36 UTC	2079	IN	Data Raw: 37 65 39 62 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6f 67 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6f 67 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 77 69 64 67 65 74 2f 63 61 6c 6c 6f 75 74 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b Data Ascii: 7e9b<!doctype html><html lang="en" dir="ltr"><head><base href="https://ogs.google.com/"><meta name="referrer" content="origin"><link rel="canonical" href="https://ogs.google.com/widget/callout"><link rel="preconnect" href="https://www.gstatic.com"><link
2024-04-17 22:34:36 UTC	2079	IN	Data Raw: 79 6c 65 28 63 29 2c 22 30 70 78 22 3d 3d 66 2e 68 65 69 67 68 74 7c 7c 22 30 70 78 22 3d 3d 66 2e 77 69 64 74 68 7c 7c 22 68 69 64 64 65 6e 22 3d 3d 66 2e 76 69 73 69 62 69 6c 69 74 79 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 21 63 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 29 72 65 74 75 72 6e 21 30 3b 0a 76 61 72 20 68 3d 63 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 3b 63 3d 68 2e 6c 65 66 74 2b 61 2e 70 61 67 65 58 4f 66 66 73 65 74 3b 66 3d 68 2e 74 6f 70 2b 61 2e 70 61 67 65 59 4f 66 66 73 65 74 3b 69 66 28 30 3e 66 2b 68 2e 68 65 69 67 68 74 7c 7c 30 3e 63 2b 68 2e 77 69 64 74 68 7c 7c 30 3e 3d 68 2e 68 65 69 67 68 74 7c 7c 30 3e 3d 68 2e 77 69 64 74 68 29 72 65 74 75 72 6e 21 31 3b 62 3d 62 2e Data Ascii: yle(c),"0px"==f.height\|\|"0px"==f.width\|\|"hidden"==f.visibility))return!1;if(!c.getBoundingClientRect)return!0;var h=c.getBoundingClientRect();c=h.left+a.pageXOffset;f=h.top+a.pageYOffset;if(0>f+h.height\|\|0>c+h.width\|\|0>=h.height\|\|0>=h.width)return!1;b=b.
2024-04-17 22:34:36 UTC	2079	IN	Data Raw: 62 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 36 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 31 36 70 78 3b 74 6f 70 3a 30 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 39 7d 2e 56 55 6f 4b 5a 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 3b 68 65 69 67 68 74 3a 33 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 31 7d 2e 54 52 48 4c 41 63 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 32 35 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 36 38 65 3b 74 Data Ascii: b{align-items:center;display:flex;height:60px;position:absolute;right:16px;top:0;z-index:9999}.VUoKZ{display:none;position:absolute;top:0;left:0;right:0;height:3px;z-index:1001}.TRHLAc{position:absolute;top:0;left:0;width:25%;height:100%;background:#68e;t
2024-04-17 22:34:36 UTC	2079	IN	Data Raw: 72 66 6c 6f 77 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 36 70 78 3b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 2e 4b 57 7a 51 78 64 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 62 6d 50 43 4c 62 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 28 32 33 32 2c 32 33 34 2c 32 33 37 29 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 63 65 6c 6c 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 36 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 77 69 64 74 68 3a 37 32 70 78 7d 2e 77 48 4f 63 73 63 7b 68 65 69 67 68 74 3a 34 38 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 Data Ascii: rflow-wrap:break-word;padding-right:16px;word-wrap:break-word}.KWzQxd{align-items:center}.bmPCLb{border-right:1px solid rgb(232,234,237);display:table-cell;padding-left:16px;vertical-align:middle;width:72px}.wHOcsc{height:48px;padding-left:4px;padding-rig
2024-04-17 22:34:36 UTC	2079	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 62 36 33 63 31 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 32 70 78 20 30 20 72 67 62 61 28 36 36 2c 31 33 33 2c 32 34 34 2c 2e 33 29 2c 30 20 31 70 78 20 33 70 78 20 31 70 78 20 72 67 62 61 28 36 36 2c 31 33 33 2c 32 34 34 2c 2e 31 35 29 7d 40 6d 65 64 69 61 20 28 66 6f 72 63 65 64 2d 63 6f 6c 6f 72 73 3a 61 63 74 69 76 65 29 7b 2e 79 5a 71 4e 6c 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 32 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 7d 7d 2e 51 73 58 4a 4a 2e 76 51 34 33 49 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 32 35 32 2c 32 33 32 2c 32 33 30 29 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 28 32 34 36 2c 31 37 34 2c 31 36 Data Ascii: ackground-color:#1b63c1;box-shadow:0 1px 2px 0 rgba(66,133,244,.3),0 1px 3px 1px rgba(66,133,244,.15)}@media (forced-colors:active){.yZqNl:focus{outline:2px solid transparent}}.QsXJJ.vQ43Ie{background-color:rgb(252,232,230);border:1px solid rgb(246,174,16
2024-04-17 22:34:36 UTC	2079	IN	Data Raw: 74 3a 63 61 6c 63 28 31 30 30 76 68 20 2d 20 37 38 70 78 29 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 32 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 36 70 78 7d 2e 6f 69 71 6d 6e 63 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 7b 77 69 64 74 68 3a 31 36 70 78 7d 2e 6f 69 71 6d 6e 63 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 2d 74 68 75 6d 62 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 28 32 31 38 2c 32 32 30 2c 32 32 34 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 70 61 64 64 69 6e 67 2d 62 6f 78 3b 62 6f 72 64 65 72 3a 34 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 3b 62 6f 78 2d 73 68 61 64 6f Data Ascii: t:calc(100vh - 78px);min-height:102px;overflow-y:auto;padding-left:16px}.oiqmnc::-webkit-scrollbar{width:16px}.oiqmnc::-webkit-scrollbar-thumb{background:rgb(218,220,224);background-clip:padding-box;border:4px solid transparent;border-radius:8px;box-shado
2024-04-17 22:34:36 UTC	2079	IN	Data Raw: 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 30 30 30 2d 30 30 46 46 2c 55 2b 30 31 33 31 2c 55 2b 30 31 35 32 2d 30 31 35 33 2c 55 2b 30 32 42 42 2d 30 32 42 43 2c 55 2b 30 32 43 36 2c 55 2b 30 32 44 41 2c 55 2b 30 32 44 43 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 32 30 30 30 2d 32 30 36 46 2c 55 2b 32 30 37 34 2c 55 2b 32 30 41 43 2c 55 2b 32 31 32 32 2c 55 2b 32 31 39 31 2c 55 2b 32 31 39 33 2c 55 2b 32 32 31 32 2c 55 2b 32 32 31 35 2c 55 2b 46 45 46 46 2c 55 2b 46 46 46 44 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 50 72 6f 64 75 63 74 20 53 61 6e 73 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 Data Ascii: mat('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;}@font-face{font-family:'Product Sans';font-style:normal;font-weight
2024-04-17 22:34:36 UTC	2079	IN	Data Raw: 34 42 31 2c 55 2b 32 31 31 36 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 6f 6f 67 6c 65 20 53 61 6e 73 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 67 6f 6f 67 6c 65 73 61 6e 73 2f 76 35 38 2f 34 55 61 5f 72 45 4e 48 73 78 4a 6c 47 44 75 47 6f 31 4f 49 6c 4a 66 43 36 6c 5f 32 34 72 6c 43 4b 31 59 6f 5f 49 71 63 73 69 68 33 53 41 79 48 36 63 41 77 68 58 39 52 46 44 34 38 54 45 36 33 4f 4f 59 4b 74 72 77 32 49 4a 6c 6b 70 79 6e 53 45 67 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 39 30 30 2d 30 Data Ascii: 4B1,U+2116;}@font-face{font-family:'Google Sans';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/googlesans/v58/4Ua_rENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RFD48TE63OOYKtrw2IJlkpynSEg.woff2)format('woff2');unicode-range:U+0900-0
2024-04-17 22:34:36 UTC	2079	IN	Data Raw: 4f 4f 59 4b 74 72 77 32 49 4a 6c 6e 70 79 6e 53 45 67 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 35 39 30 2d 30 35 46 46 2c 55 2b 32 30 30 43 2d 32 30 31 30 2c 55 2b 32 30 41 41 2c 55 2b 32 35 43 43 2c 55 2b 46 42 31 44 2d 46 42 34 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 6f 6f 67 6c 65 20 53 61 6e 73 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 67 6f 6f 67 6c 65 73 61 6e 73 2f 76 35 38 2f 34 55 61 5f 72 45 4e 48 73 78 4a 6c 47 44 75 47 6f 31 4f 49 6c 4a 66 43 36 6c 5f 32 34 72 6c 43 4b Data Ascii: OOYKtrw2IJlnpynSEg.woff2)format('woff2');unicode-range:U+0590-05FF,U+200C-2010,U+20AA,U+25CC,U+FB1D-FB4F;}@font-face{font-family:'Google Sans';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/googlesans/v58/4Ua_rENHsxJlGDuGo1OIlJfC6l_24rlCK
2024-04-17 22:34:36 UTC	2079	IN	Data Raw: 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 45 30 31 2d 30 45 35 42 2c 55 2b 32 30 30 43 2d 32 30 30 44 2c 55 2b 32 35 43 43 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 6f 6f 67 6c 65 20 53 61 6e 73 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 67 6f 6f 67 6c 65 73 61 6e 73 2f 76 35 38 2f 34 55 61 5f 72 45 4e 48 73 78 4a 6c 47 44 75 47 6f 31 4f 49 6c 4a 66 43 36 6c 5f 32 34 72 6c 43 4b 31 59 6f 5f 49 71 63 73 69 68 33 53 41 79 48 36 63 41 77 68 58 39 52 46 44 34 38 54 45 36 33 4f 4f 59 4b 74 72 77 32 49 4a 6c 71 70 79 6e 53 45 67 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 Data Ascii: code-range:U+0E01-0E5B,U+200C-200D,U+25CC;}@font-face{font-family:'Google Sans';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/googlesans/v58/4Ua_rENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RFD48TE63OOYKtrw2IJlqpynSEg.woff2)format(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49776	142.250.9.101	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:36 UTC	1214	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.dCBC8e6ENbg.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo8oB7UmguRctpg6togRivSNxNKjzQ/cb=gapi.loaded_0 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU
2024-04-17 22:34:36 UTC	916	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 121628 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 16 Apr 2024 02:31:22 GMT Expires: Wed, 16 Apr 2025 02:31:22 GMT Cache-Control: public, max-age=31536000 Last-Modified: Sun, 31 Mar 2024 15:10:24 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 158594 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:34:36 UTC	339	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 32 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 62 61 2c 63 61 2c 64 61 2c 6e 61 2c 70 61 2c 76 61 2c 77 61 2c 7a 61 3b 62 61 3d 66 75 6e 63 Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20000, ]);var ba,ca,da,na,pa,va,wa,za;ba=func
2024-04-17 22:34:36 UTC	1255	IN	Data Raw: 7d 7d 3b 63 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c Data Ascii: }};ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,
2024-04-17 22:34:36 UTC	1255	IN	Data Raw: 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 26 26 63 61 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 61 28 62 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 5f 2e 75 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 22 75 6e 64 Data Ascii: on"===typeof d&&"function"!=typeof d.prototype[a]&&ca(d.prototype,a,{configurable:!0,writable:!0,value:function(){return pa(ba(this))}})}return a});pa=function(a){a={next:a};a[Symbol.iterator]=function(){return this};return a};_.ua=function(a){var b="und
2024-04-17 22:34:36 UTC	1255	IN	Data Raw: 2e 50 66 29 7b 74 68 69 73 2e 50 66 3d 5b 5d 3b 76 61 72 20 6b 3d 74 68 69 73 3b 74 68 69 73 2e 74 50 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6b 2e 45 37 28 29 7d 29 7d 74 68 69 73 2e 50 66 2e 70 75 73 68 28 68 29 7d 3b 76 61 72 20 64 3d 5f 2e 6d 61 2e 73 65 74 54 69 6d 65 6f 75 74 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 50 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 64 28 68 2c 30 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 45 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 74 68 69 73 2e 50 66 26 26 74 68 69 73 2e 50 66 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 50 66 3b 74 68 69 73 2e 50 66 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 6b 3d 30 3b 6b 3c 68 2e 6c 65 6e 67 74 68 3b 2b 2b 6b 29 7b 76 61 72 20 6c 3d 68 5b 6b 5d 3b 68 5b 6b 5d 3d Data Ascii: .Pf){this.Pf=[];var k=this;this.tP(function(){k.E7()})}this.Pf.push(h)};var d=_.ma.setTimeout;b.prototype.tP=function(h){d(h,0)};b.prototype.E7=function(){for(;this.Pf&&this.Pf.length;){var h=this.Pf;this.Pf=[];for(var k=0;k<h.length;++k){var l=h[k];h[k]=
2024-04-17 22:34:36 UTC	1255	IN	Data Raw: 74 6f 74 79 70 65 2e 6e 65 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 68 69 73 3b 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 68 2e 67 63 61 28 29 29 7b 76 61 72 20 6b 3d 5f 2e 6d 61 2e 63 6f 6e 73 6f 6c 65 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 6b 26 26 6b 2e 65 72 72 6f 72 28 68 2e 46 66 29 7d 7d 2c 0a 31 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 63 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 73 56 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 68 3d 5f 2e 6d 61 2e 43 75 73 74 6f 6d 45 76 65 6e 74 2c 6b 3d 5f 2e 6d 61 2e 45 76 65 6e 74 2c 6c 3d 5f 2e 6d 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 6c 29 72 65 74 Data Ascii: totype.nea=function(){var h=this;d(function(){if(h.gca()){var k=_.ma.console;"undefined"!==typeof k&&k.error(h.Ff)}},1)};e.prototype.gca=function(){if(this.sV)return!1;var h=_.ma.CustomEvent,k=_.ma.Event,l=_.ma.dispatchEvent;if("undefined"===typeof l)ret
2024-04-17 22:34:36 UTC	1255	IN	Data Raw: 3b 74 68 69 73 2e 73 56 3d 21 30 7d 3b 65 2e 72 65 73 6f 6c 76 65 3d 63 3b 65 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 6c 28 68 29 7d 29 7d 3b 65 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 66 6f 72 28 76 61 72 20 6d 3d 5f 2e 75 61 28 68 29 2c 6e 3d 6d 2e 6e 65 78 74 28 29 3b 21 6e 2e 64 6f 6e 65 3b 6e 3d 6d 2e 6e 65 78 74 28 29 29 63 28 6e 2e 76 61 6c 75 65 29 2e 42 79 28 6b 2c 6c 29 7d 29 7d 3b 65 2e 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 5f 2e 75 61 28 68 29 2c 6c 3d 6b 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 6c 2e 64 6f 6e 65 3f 63 Data Ascii: ;this.sV=!0};e.resolve=c;e.reject=function(h){return new e(function(k,l){l(h)})};e.race=function(h){return new e(function(k,l){for(var m=_.ua(h),n=m.next();!n.done;n=m.next())c(n.value).By(k,l)})};e.all=function(h){var k=_.ua(h),l=k.next();return l.done?c
2024-04-17 22:34:36 UTC	1255	IN	Data Raw: 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6e 3d 6e 65 77 20 61 28 5b 5b 6c 2c 32 5d 2c 5b 6d 2c 33 5d 5d 29 3b 69 66 28 32 21 3d 6e 2e 67 65 74 28 6c 29 7c 7c 33 21 3d 6e 2e 67 65 74 28 6d 29 29 72 65 74 75 72 6e 21 31 3b 6e 2e 64 65 6c 65 74 65 28 6c 29 3b 6e 2e 73 65 74 28 6d 2c 34 29 3b 72 65 74 75 72 6e 21 6e 2e 68 61 73 28 6c 29 26 26 34 3d 3d 6e 2e 67 65 74 28 6d 29 7d 63 61 74 63 68 28 70 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 0a 76 61 72 20 66 3d 22 24 6a 73 63 6f 6d 70 5f 68 69 64 64 65 6e 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 65 28 22 66 72 65 65 7a 65 22 29 3b Data Ascii: ct.seal)return!1;try{var l=Object.seal({}),m=Object.seal({}),n=new a([[l,2],[m,3]]);if(2!=n.get(l)\|\|3!=n.get(m))return!1;n.delete(l);n.set(m,4);return!n.has(l)&&4==n.get(m)}catch(p){return!1}}())return a;var f="$jscomp_hidden_"+Math.random();e("freeze");
2024-04-17 22:34:36 UTC	1255	IN	Data Raw: 20 62 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 0a 66 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 6b 29 7b 6b 3d 5f 2e 75 61 28 6b 29 3b 66 6f 72 28 76 61 72 20 6c 3b 21 28 6c 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 6b 3d 30 3d 3d 3d 6b 3f 30 3a 6b 3b 76 61 72 20 6d 3d 64 28 74 68 69 73 2c 6b 29 3b 6d 2e 6c 69 73 74 7c 7c 28 6d 2e 6c 69 73 74 3d 74 68 69 73 5b 30 5d 5b 6d 2e 69 64 5d 3d 5b 5d 29 3b 6d 2e 6e 66 3f 6d 2e 6e 66 2e 76 61 6c 75 65 3d 6c 3a 28 6d Data Ascii: b=new WeakMap,c=function(k){this[0]={};this[1]=f();this.size=0;if(k){k=_.ua(k);for(var l;!(l=k.next()).done;)l=l.value,this.set(l[0],l[1])}};c.prototype.set=function(k,l){k=0===k?0:k;var m=d(this,k);m.list\|\|(m.list=this[0][m.id]=[]);m.nf?m.nf.value=l:(m
2024-04-17 22:34:36 UTC	1255	IN	Data Raw: 6d 3d 62 2e 67 65 74 28 6c 29 3a 28 6d 3d 22 22 2b 20 2b 2b 68 2c 62 2e 73 65 74 28 6c 2c 6d 29 29 3a 6d 3d 22 70 5f 22 2b 6c 3b 76 61 72 20 6e 3d 6b 5b 30 5d 5b 6d 5d 3b 69 66 28 6e 26 26 76 61 28 6b 5b 30 5d 2c 6d 29 29 66 6f 72 28 6b 3d 30 3b 6b 3c 6e 2e 6c 65 6e 67 74 68 3b 6b 2b 2b 29 7b 76 61 72 20 70 3d 6e 5b 6b 5d 3b 69 66 28 6c 21 3d 3d 6c 26 26 70 2e 6b 65 79 21 3d 3d 70 2e 6b 65 79 7c 7c 6c 3d 3d 3d 70 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6d 2c 6c 69 73 74 3a 6e 2c 69 6e 64 65 78 3a 6b 2c 6e 66 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6d 2c 6c 69 73 74 3a 6e 2c 69 6e 64 65 78 3a 2d 31 2c 6e 66 3a 76 6f 69 64 20 30 7d 7d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 76 61 72 20 6d 3d 6b 5b 31 5d 3b 72 65 74 75 72 6e 20 70 61 28 66 Data Ascii: m=b.get(l):(m=""+ ++h,b.set(l,m)):m="p_"+l;var n=k[0][m];if(n&&va(k[0],m))for(k=0;k<n.length;k++){var p=n[k];if(l!==l&&p.key!==p.key\|\|l===p.key)return{id:m,list:n,index:k,nf:p}}return{id:m,list:n,index:-1,nf:void 0}},e=function(k,l){var m=k[1];return pa(f
2024-04-17 22:34:36 UTC	1255	IN	Data Raw: 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 65 74 75 72 6e 21 31 3b 66 3d 65 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 3d 3d 63 7c 7c 34 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 2e 78 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 3f 21 31 3a 65 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 7d 63 61 74 63 68 28 68 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 74 68 69 73 2e 44 61 3d 6e 65 77 20 4d 61 70 3b 69 66 28 63 29 7b 63 3d Data Ascii: urn!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)return!1;f=e.next();return f.done\|\|f.value[0]==c\|\|4!=f.value[0].x\|\|f.value[1]!=f.value[0]?!1:e.next().done}catch(h){return!1}}())return a;var b=function(c){this.Da=new Map;if(c){c=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49778	172.253.124.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:36 UTC	939	OUT	GET /complete/search?q&cp=0&client=gws-wiz&xssi=t&gs_pcrt=2&hl=en&authuser=0&psi=eU4gZpbFNNqWkPIPhcWVmAg.1713393275186&dpr=1&nolsbt=1 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU
2024-04-17 22:34:36 UTC	1742	IN	HTTP/1.1 200 OK X-Content-Type-Options: nosniff Date: Wed, 17 Apr 2024 22:34:36 GMT Expires: Wed, 17 Apr 2024 22:34:36 GMT Cache-Control: private, max-age=3600 Content-Type: application/json; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-kV_a_jPt9O5EX1jjs8tpOw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-17 22:34:36 UTC	1742	IN	Data Raw: 39 38 39 0d 0a 29 5d 7d 27 0a 5b 5b 5b 22 63 69 63 61 64 61 73 20 6d 61 70 22 2c 30 2c 5b 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 2c 31 34 33 5d 2c 7b 22 7a 66 22 3a 33 33 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 22 3a 22 31 22 7d 7d 5d 2c 5b 22 74 6f 6d 20 63 6f 74 74 6f 6e 22 2c 34 36 2c 5b 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 2c 31 34 33 5d 2c 7b 22 6c 6d 22 3a 5b 5d 2c 22 7a 66 22 3a 33 33 2c 22 7a 68 22 3a 22 54 6f 6d 20 43 6f 74 74 6f 6e 22 2c 22 7a 69 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 53 65 6e 61 74 6f 72 22 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 70 22 3a 22 65 4a 7a 6a 34 74 54 50 31 54 63 77 53 6a 64 4f 4b 54 5a 67 39 4f 49 71 79 63 39 56 53 4d 34 76 4b 63 6e 50 41 77 42 4f 73 41 63 2d 22 Data Ascii: 989)]}'[[["cicadas map",0,[3,357,362,396,143],{"zf":33,"zl":8,"zp":{"gs_ss":"1"}}],["tom cotton",46,[3,357,362,396,143],{"lm":[],"zf":33,"zh":"Tom Cotton","zi":"United States Senator","zl":8,"zp":{"gs_ssp":"eJzj4tTP1TcwSjdOKTZg9OIqyc9VSM4vKcnPAwBOsAc-"
2024-04-17 22:34:36 UTC	706	IN	Data Raw: 4f 68 63 71 47 66 4a 43 4f 4a 62 31 6b 34 4d 66 63 4c 58 74 70 2f 38 41 55 75 48 6d 6b 4d 62 73 6e 4b 67 37 2f 72 61 71 34 33 38 55 55 6b 4a 75 49 7a 34 62 37 4b 2f 59 2b 6f 71 48 34 63 52 6f 70 53 73 6a 72 6b 48 48 4d 79 6a 66 74 74 69 71 69 35 68 41 42 6e 6e 6e 65 54 47 4f 56 4f 69 34 37 6b 65 5a 2f 49 55 4a 78 52 51 79 30 74 6d 64 53 75 6f 72 53 4b 35 31 4a 6d 35 66 44 55 71 70 48 38 77 6b 65 36 76 31 33 72 6d 59 32 55 62 37 30 2b 31 31 47 75 72 74 70 4d 48 6c 41 41 41 70 4b 38 4a 58 79 71 70 78 4b 58 58 44 4c 2b 6b 50 6e 63 68 57 32 64 56 38 42 6e 66 50 75 74 51 55 75 43 78 6f 6d 34 55 39 71 43 63 65 64 64 32 77 79 52 32 48 53 72 75 4b 2b 73 62 4f 35 67 59 4d 6a 78 67 67 6a 76 35 6a 35 47 6b 58 32 67 63 4d 4e 71 55 59 31 47 77 54 4e 33 47 6d 4a 45 48 Data Ascii: OhcqGfJCOJb1k4MfcLXtp/8AUuHmkMbsnKg7/raq438UUkJuIz4b7K/Y+oqH4cRopSsjrkHHMyjfttiqi5hABnnneTGOVOi47keZ/IUJxRQy0tmdSuorSK51Jm5fDUqpH8wke6v13rmY2Ub70+11GurtpMHlAAApK8JXyqpxKXXDL+kPnchW2dV8BnfPutQUuCxom4U9qCcedd2wyR2HSruK+sbO5gYMjxggjv5j5GkX2gcMNqUY1GwTN3GmJEH
2024-04-17 22:34:36 UTC	89	IN	Data Raw: 35 33 0d 0a 52 78 2b 64 62 65 58 6c 6a 78 33 6f 6b 61 31 45 70 33 63 6d 64 75 6e 36 50 41 54 4b 35 78 58 52 50 73 39 75 66 47 30 31 34 63 2f 34 6c 73 2b 44 76 2f 43 32 53 50 76 7a 39 4b 35 2b 75 63 59 49 2b 64 55 76 32 66 33 79 32 6e 45 53 52 79 35 38 4f 34 6a 0d 0a Data Ascii: 53Rx+dbeXljx3oka1Ep3cmdun6PATK5xXRPs9ufG014c/4ls+Dv/C2SPvz9K5+ucYI+dUv2f3y2nESRy58O4j
2024-04-17 22:34:36 UTC	1255	IN	Data Raw: 62 66 39 0d 0a 5a 43 4d 37 63 77 48 4d 75 66 6d 4d 66 4f 6b 30 79 36 7a 51 5a 2b 69 35 34 6f 34 69 6a 30 7a 54 59 6c 61 30 38 57 57 52 38 4c 4d 55 79 73 4a 48 6e 6e 76 32 2f 57 64 66 43 6e 45 38 37 33 4c 32 31 31 41 72 32 30 77 44 65 31 52 70 67 52 73 66 32 51 78 37 48 66 48 59 2f 48 5a 31 78 66 48 61 78 36 4c 65 2b 4d 69 6c 49 31 35 31 47 4f 6f 37 66 6a 55 42 77 52 71 63 6d 6a 61 6c 42 46 4f 41 62 61 64 55 53 55 4e 76 6a 31 33 37 5a 2b 6d 61 39 75 61 68 66 47 54 59 76 6a 78 64 6c 45 34 4b 4f 2f 77 43 69 37 37 51 4c 4c 32 58 69 61 34 78 30 6d 56 5a 68 38 78 67 2f 65 70 2b 74 54 77 39 65 6f 71 2b 2b 31 2b 32 57 44 57 62 43 52 42 67 53 57 70 55 44 2f 61 33 2f 41 4b 46 51 4a 78 6a 4e 5a 74 58 6d 77 69 39 42 63 65 71 58 73 51 43 6d 5a 70 49 78 2f 44 4a 76 39 Data Ascii: bf9ZCM7cwHMufmMfOk0y6zQZ+i54o4ij0zTYla08WWR8LMUysJHnnv2/WdfCnE873L211Ar20wDe1RpgRsf2Qx7HfHY/HZ1xfHax6Le+MilI151GOo7fjUBwRqcmjalBFOAbadUSUNvj137Z+ma9uahfGTYvjxdlE4KO/wCi77QLL2Xia4x0mVZh8xg/ep+tTw9eoq++1+2WDWbCRBgSWpUD/a3/AKFQJxjNZtXmwi9BceqXsQCmZpIx/DJv9
2024-04-17 22:34:36 UTC	1255	IN	Data Raw: 31 44 59 57 58 2b 34 59 6f 56 57 70 61 79 48 38 63 2f 51 4f 59 73 65 4b 70 64 4b 59 44 70 64 65 70 43 43 50 53 71 5a 45 72 52 70 4e 64 41 5a 46 7a 4a 56 4c 72 52 37 70 51 38 69 56 6b 30 45 6d 4d 6f 34 71 73 45 56 54 69 46 46 49 6f 4e 4d 4a 41 4e 67 76 52 30 69 70 48 52 64 55 31 4b 33 45 74 6e 59 7a 76 47 66 6c 63 4c 2b 71 33 74 52 4e 77 69 4c 41 35 63 34 58 67 6e 33 72 71 57 69 52 68 4c 4f 31 51 44 43 71 69 67 44 36 59 46 54 72 36 6f 34 79 55 55 4f 57 74 4e 53 54 62 4f 49 7a 36 48 71 73 4c 6d 4f 53 78 75 46 62 6a 42 51 31 53 32 68 36 69 72 66 72 32 6b 69 5a 38 73 4d 56 33 2f 55 75 71 57 51 44 62 43 6a 67 56 6b 39 61 34 77 54 76 53 45 71 72 57 68 74 55 55 30 63 73 67 57 66 54 72 68 42 63 67 72 47 54 67 6a 78 69 6d 37 4b 44 77 51 52 34 49 38 31 37 38 52 78 Data Ascii: 1DYWX+4YoVWpayH8c/QOYseKpdKYDpdepCCPSqZErRpNdAZFzJVLrR7pQ8iVk0EmMo4qsEVTiFFIoNMJANgvR0ipHRdU1K3EtnYzvGflcL+q3tRNwiLA5c4Xgn3rqWiRhLO1QDCqigD6YFTr6o4yUUOWtNSTbOIz6HqsLmOSxuFbjBQ1S2h6irfr2kiZ8sMV3/UuqWQDbCjgVk9a4wTvSEqrWhtUU0csgWfTrhBcgrGTgjxim7KDwQR4I8178Rx
2024-04-17 22:34:36 UTC	562	IN	Data Raw: 42 2b 5a 50 62 38 71 33 6a 56 38 53 4d 33 44 30 66 2f 32 51 5c 75 30 30 33 64 5c 75 30 30 33 64 22 7d 5d 2c 5b 22 77 61 77 61 20 36 30 74 68 20 61 6e 6e 69 76 65 72 73 61 72 79 20 66 72 65 65 20 63 6f 66 66 65 65 22 2c 30 2c 5b 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 2c 31 34 33 5d 2c 7b 22 7a 66 22 3a 33 33 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 22 3a 22 31 22 7d 7d 5d 2c 5b 22 62 61 6c 74 69 6d 6f 72 65 20 6b 65 79 20 62 72 69 64 67 65 20 63 6f 6c 6c 61 70 73 65 22 2c 30 2c 5b 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 2c 31 34 33 5d 2c 7b 22 7a 66 22 3a 33 33 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 22 3a 22 31 22 7d 7d 5d 2c 5b 22 69 6e 64 69 61 6e 61 20 75 6e 69 76 65 72 73 69 74 79 20 66 61 63 75 6c 74 79 20 76 6f Data Ascii: B+ZPb8q3jV8SM3D0f/2Q\u003d\u003d"}],["wawa 60th anniversary free coffee",0,[3,357,362,396,143],{"zf":33,"zl":8,"zp":{"gs_ss":"1"}}],["baltimore key bridge collapse",0,[3,357,362,396,143],{"zf":33,"zl":8,"zp":{"gs_ss":"1"}}],["indiana university faculty vo
2024-04-17 22:34:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49780	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:36 UTC	1155	OUT	GET /images/hpp/ic_wahlberg_product_core_48.png8.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ogs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU
2024-04-17 22:34:36 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 2091 Date: Wed, 17 Apr 2024 22:34:36 GMT Expires: Wed, 17 Apr 2024 22:34:36 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:34:36 UTC	584	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 07 f2 49 44 41 54 78 01 c5 9a 03 f0 ec ea 12 c4 9f 6d a3 74 6d db 38 36 af 6d db b6 6d 9b 87 d7 b6 6d db 58 6f b0 f8 b3 5f 7e b5 e7 4d 6d e5 26 df e6 78 ab ba b2 15 76 cf f4 cc f7 05 3f 9a 13 bf 20 08 7e 5e a9 54 56 2e 97 cb fb 7a 9e 77 4b 84 97 ab d5 aa 1f 2d eb 60 c6 ff 77 a3 e5 1d 11 8e 8f f6 1b e0 fb fe 1f 7f 34 bf 7f 11 89 e5 22 1c 13 91 7a 36 5a e6 22 92 8a 96 a9 60 3b 40 d0 0c 91 e7 21 86 00 cc 53 e2 51 b4 c7 45 04 ee 8b d0 4c 24 eb 10 60 30 31 9e 10 53 28 14 76 8a c4 fc 76 6e 13 5f 19 e2 ee 48 bb 05 b8 10 9d ff cd 48 c4 66 73 9c 38 29 c6 2a f8 d9 08 cd 71 01 96 11 84 5c 1f ed ff f7 39 42 3e f2 e9 7f 29 3e 23 32 17 05 c4 b3 41 8d cd 16 f9 7a bd Data Ascii: PNGIHDR00WIDATxmtm86mmmXo_~Mm&xv? ~^TV.zwK-`w4"z6Z"`;@!SQEL$`01S(vvn_HHfs8)*q\9B>)>#2Az
2024-04-17 22:34:36 UTC	1255	IN	Data Raw: e1 73 a2 0b 2c ca 1c db 26 80 25 36 a2 86 20 4f 3d 64 6a af 11 d7 a3 e2 53 84 1f 3b a2 4f c1 e2 79 6c 63 91 4f 8c 7e ab 1e ac db 54 6e be 46 a0 7c d1 59 90 e4 58 8a d8 84 40 be b8 ef 2e 90 07 19 db aa 65 e1 8f 99 bd 4f d1 5a c1 c6 c8 03 c8 b0 8d 7d 28 48 04 93 b1 76 70 0e c6 06 c4 20 12 db 18 79 bc ef 26 ef ae 05 3a 8f ab e3 d0 b7 f3 ab af 0a d9 38 79 eb f5 d5 7b 6e 8f 0d 52 5e 1c 10 b5 3a 2a 1d 71 00 eb dc e4 dd b8 cf fa 3e f3 f9 b4 e8 43 a8 eb e5 a1 0a 8e 5e 50 b9 01 43 db db 25 91 87 3c 84 20 36 e3 18 cf 39 07 82 2c e7 24 30 78 de 4d de 3d cd 60 5c f8 ff 4d 49 2e 91 7c d8 a3 b0 f0 8a fa 1e ff b5 fa 5e fe 83 ea 57 2d 22 88 e7 87 0c 40 04 85 4a fb b3 1e 9e 92 c5 b9 06 ee 4b 98 6d ee 91 1c fd 68 a7 ba d4 78 ef 48 f5 3e f4 63 f5 3e f1 77 21 a2 eb 9e ff aa Data Ascii: s,&%6 O=djS;OylcO~TnF\|YX@.eOZ}(Hvp y&:8y{nR^:*q>C^PC%< 69,$0xM=`\MI.\|^W-"@JKmhxH>c>w!
2024-04-17 22:34:36 UTC	252	IN	Data Raw: 36 c3 6b 9d 06 23 2e 0a 9e fa fc 25 1d f8 c4 69 56 ac 88 41 54 1c ac 27 ea b4 5c 88 7f 51 fc 9a 40 50 5f 36 76 64 69 9b 59 45 1c 06 49 47 26 b8 28 db ad c7 d3 2e 11 43 bb a4 63 b5 03 c2 b4 62 26 80 d4 12 fb 67 19 bd e1 80 ef 1d 4f a5 dd 8f da 3b 8b b0 a2 23 92 26 26 05 74 b2 2c 2f 35 d8 c7 6e dc 67 eb 3d 32 9d 29 2a 9c 6e b7 88 b8 98 aa 03 9e 1b d6 eb 5b b3 4d 37 f9 ec 22 86 30 52 b7 47 66 6e 80 73 03 9a 08 81 9b 6d e2 f1 81 8e 88 50 dc 73 5e 84 05 86 a8 3f e1 7a 1f 36 47 b2 c1 45 10 62 17 9e 2d d2 36 35 7e 93 cf 0d e6 c9 77 13 bc 4f e0 23 0d a6 e1 11 72 10 e8 f0 48 d1 f5 d1 c7 7d b4 ed b9 fc 9d 84 db 5a 4c c7 e9 d3 64 26 22 f2 31 a2 28 fc 18 4a 6c 63 a4 c7 8a 44 9b 77 d1 b3 7b fd ff 01 69 0d 0a c8 fa 0f 36 41 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 6k#.%iVAT'\Q@P_6vdiYEIG&(.Ccb&gO;#&&t,/5ng=2)*n[M7"0RGfnsmPs^?z6GEb-65~wO#rH}ZLd&"1(JlcDw{i6AIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49782	172.253.124.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:36 UTC	1132	OUT	GET /xjs/_/js/md=3/k=xjs.hd.en.Gos8NmADZ0A.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAkgAIAAAoAACAAAAAAgMAQAEAAQAAWAZAICCAIABgAQhCAhzIBgIAJAAAACAAIAQgCAIAAAABAAQAAAAAAAAAAgAECBAAAAAAAAAAAAAA6AQAIAADBACEAAAEAAADIAxAcgEEKAgAAAAAAAAAAAAAEIEEwFySgIAACAAAAAAAAAAAAACCVTiyMAQ/rs=ACT90oHjHvDG23MtVpqokFyaqpDqKHsdQA HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU; OGPC=19037049-1:
2024-04-17 22:34:37 UTC	818	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 195540 Date: Wed, 17 Apr 2024 22:34:37 GMT Expires: Thu, 17 Apr 2025 22:34:37 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Tue, 16 Apr 2024 23:00:34 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:34:37 UTC	437	IN	Data Raw: 7b 22 63 68 75 6e 6b 54 79 70 65 73 22 3a 22 31 30 30 30 30 31 31 31 31 31 31 31 31 30 30 31 31 31 31 30 30 30 31 30 30 30 30 31 30 31 31 30 31 30 30 30 30 30 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 30 31 31 31 31 30 31 31 31 31 31 31 31 31 31 31 31 30 31 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: {"chunkTypes":"100001111111100111100010000101101000000111111111111111111111111111111111111110111101111111111101011111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111
2024-04-17 22:34:37 UTC	1255	IN	Data Raw: 31 31 31 31 31 30 30 30 31 31 31 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 30 31 30 31 30 30 32 32 32 32 32 32 32 32 32 31 32 31 32 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 32 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 32 32 31 32 Data Ascii: 111110001110111111111111111111111111111111111111111111111010100222222222121221212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212122212121212121212122212
2024-04-17 22:34:37 UTC	1255	IN	Data Raw: 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 30 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 31 31 32 32 32 31 31 31 31 31 31 31 32 32 32 32 31 31 31 31 31 31 31 31 31 31 31 32 32 31 31 33 31 31 30 31 30 31 31 30 31 31 30 31 31 31 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111110111111111111211112221111111222211111111111221131101011011011101111111111111111111111111111111111111111111111111111111111111111111111111
2024-04-17 22:34:37 UTC	1255	IN	Data Raw: 32 32 32 32 32 32 32 32 32 32 32 32 31 31 32 32 32 32 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 33 31 31 31 31 31 31 31 31 31 31 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 31 32 32 32 32 32 32 32 32 32 31 31 31 31 31 31 32 32 32 31 32 31 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 33 32 32 33 31 31 31 31 31 31 32 32 31 32 33 31 31 31 31 31 31 31 31 31 31 31 31 31 32 32 32 32 32 31 33 31 32 33 31 32 32 32 32 32 32 33 32 33 33 31 33 32 32 32 31 31 31 31 31 31 Data Ascii: 222222222222112222211111111111111111111111112222222222222222222222222223111111111121111111111111111222222222222222222222222222222222221222222222111111222121222222222222222222222222222222222222222322311111122123111111111111122222131231222222323313222111111
2024-04-17 22:34:37 UTC	1255	IN	Data Raw: 31 33 31 31 31 31 31 31 31 31 31 32 32 31 31 32 33 31 31 31 31 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 33 32 33 32 31 31 33 33 32 31 33 33 31 31 31 33 32 33 31 31 31 31 31 32 33 33 32 33 32 32 33 33 32 32 32 33 33 33 32 33 32 33 33 33 33 33 33 33 32 32 32 32 32 33 33 33 32 32 33 33 33 33 33 33 33 33 31 33 32 33 33 33 31 31 31 31 31 31 33 32 31 32 32 32 33 33 33 32 32 33 32 32 32 31 33 33 32 32 31 33 33 32 33 31 32 33 32 32 32 32 32 31 33 32 33 33 33 32 32 33 32 32 32 32 32 33 32 32 32 32 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 31 31 32 32 31 33 33 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 131111111112211231111222222222222222232321133213311132311111233232233222333232333333322222333223333333313233311111132122233322322213322133231232222213233322322222322222111111111111111111111111111113112213313111111111111111111111111111111111111111111111111
2024-04-17 22:34:37 UTC	1255	IN	Data Raw: 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111
2024-04-17 22:34:37 UTC	1255	IN	Data Raw: 32 32 32 32 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 32 32 33 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 32 32 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 31 32 31 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 222221111111111111111111112122313111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111211211111111111111111111111111111111111121222111111111111112111111111111121111111111111111111111111312113111111111111111
2024-04-17 22:34:37 UTC	1255	IN	Data Raw: 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 32 32 32 31 32 32 31 32 32 32 32 31 31 31 32 31 32 32 31 31 31 31 31 31 32 31 31 31 32 31 31 31 31 31 31 32 31 31 31 31 32 32 31 32 32 32 32 32 32 32 31 32 32 31 32 32 32 32 32 32 32 32 31 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 31 32 32 31 32 31 31 31 31 31 31 31 31 31 31 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 31 31 31 31 31 32 32 32 32 32 32 32 31 32 32 32 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 31 31 31 31 31 31 31 31 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 31 32 31 32 31 32 31 32 31 32 31 31 32 31 31 31 31 31 31 31 31 31 Data Ascii: 111111111111112222122122221112122111111211121111112111122122222221221222222221222222222222222222222222122121111111111211111111111111111111112222222222222222222222221111122222221222211111111111111111111111121111111111121212121212121211212121212112111111111
2024-04-17 22:34:37 UTC	1255	IN	Data Raw: 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 33 33 33 33 33 33 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 33 33 33 32 31 32 31 31 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 32 31 31 33 33 31 33 31 31 31 31 31 31 33 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 33 33 32 31 32 31 32 32 31 32 32 32 31 31 33 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 33 31 31 31 31 31 31 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 111111111111111111111111111111111111111111111333333331111111111111111111111133332121113111111111111131111111111111121121133131111113311111111111111111111111111111112133212122122211313111111111111111111111111111111111111111123111111131111111111111111111111
2024-04-17 22:34:37 UTC	1255	IN	Data Raw: 31 32 32 32 32 32 32 33 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 31 31 33 32 32 32 31 33 31 33 33 30 30 30 30 30 31 31 31 31 31 31 31 31 31 31 31 31 33 32 33 32 32 32 33 32 31 31 33 33 32 33 31 33 33 30 30 32 30 30 30 30 30 30 30 30 30 30 31 31 31 31 31 33 32 32 33 33 32 33 31 30 30 30 30 30 31 31 31 31 31 31 31 31 Data Ascii: 122222230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002113222131330000011111111111132322232113323133002000000000011111322332310000011111111

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49783	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:37 UTC	1678	OUT	GET /xjs/_/ss/k=xjs.hd.Lo9lRXsykaQ.L.W.O/am=cAEAAAAAAMAAAAAAAAAAAAAAAAAAgAAAAgAAAAAgAHzCAQLAhgAAAEAAAIAAAEAAAAAEAQAAACAIABgAABAAAAAAgRAACIAACSAJQQYCAIhgggFSAYABAAAAIAEAAAACAhAwAAHAQwQAAAQ6AQEkAADIACEAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAEAAAACgAAAAAAAAAAAAAAAAAAAE/d=0/dg=2/br=1/rs=ACT90oF2S7JtbOzl7PcgP8AWv8-OdLvQhA/m=syk1?xjs=s3 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU; OGPC=19037049-1:
2024-04-17 22:34:37 UTC	808	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/css; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 833 Date: Wed, 17 Apr 2024 22:34:37 GMT Expires: Thu, 17 Apr 2025 22:34:37 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Tue, 16 Apr 2024 23:00:34 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:34:37 UTC	447	IN	Data Raw: 2e 45 70 50 59 4c 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 59 70 63 44 6e 66 7b 70 61 64 64 69 6e 67 3a 30 20 31 36 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 59 70 63 44 6e 66 2e 48 47 31 64 76 64 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 48 47 31 64 76 64 3e 2a 7b 70 61 64 64 69 6e 67 3a 30 20 31 36 70 78 7d 2e 57 74 56 35 6e 64 20 2e 59 70 63 44 6e 66 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 38 70 78 7d 2e 5a 74 30 61 35 65 20 2e 59 70 63 44 6e 66 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 34 38 70 78 7d 2e 47 5a 6e 51 71 65 20 2e 59 70 63 44 6e 66 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 33 70 78 7d 2e 45 70 50 59 4c 64 3a 68 6f 76 65 72 7b 63 75 72 73 6f 72 Data Ascii: .EpPYLd{display:block;position:relative}.YpcDnf{padding:0 16px;vertical-align:middle}.YpcDnf.HG1dvd{padding:0}.HG1dvd>*{padding:0 16px}.WtV5nd .YpcDnf{padding-left:28px}.Zt0a5e .YpcDnf{line-height:48px}.GZnQqe .YpcDnf{line-height:23px}.EpPYLd:hover{cursor
2024-04-17 22:34:37 UTC	386	IN	Data Raw: 74 20 6c 65 66 74 20 38 70 78 20 63 65 6e 74 65 72 7d 2e 5a 74 30 61 35 65 2e 43 42 38 6e 44 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 73 6c 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 73 2f 6d 61 74 65 72 69 61 6c 2f 73 79 73 74 65 6d 2f 31 78 2f 64 6f 6e 65 5f 62 6c 61 63 6b 5f 31 36 64 70 2e 70 6e 67 29 7d 2e 47 5a 6e 51 71 65 2e 43 42 38 6e 44 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 2d 72 65 70 65 61 74 20 6c 65 66 74 20 63 65 6e 74 65 72 7d 2e 47 5a 6e 51 71 65 2e 43 42 38 6e 44 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 73 6c 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 75 69 2f 76 31 2f 6d 65 6e 75 2f 63 68 65 63 6b Data Ascii: t left 8px center}.Zt0a5e.CB8nDe{background-image:url(https://ssl.gstatic.com/images/icons/material/system/1x/done_black_16dp.png)}.GZnQqe.CB8nDe{background:no-repeat left center}.GZnQqe.CB8nDe{background-image:url(https://ssl.gstatic.com/ui/v1/menu/check

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49784	64.233.177.102	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:37 UTC	1209	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 2498 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU; OGPC=19037049-1:
2024-04-17 22:34:37 UTC	2498	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 31 33 33 39 33 32 37 35 33 31 32 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],373,[["1713393275312",null,null,null,
2024-04-17 22:34:37 UTC	937	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=513=W5yCzMT05Sv_9SmhCPFD4YomQcTLqx6qQ3jjGL6k3A7jAhYzX-y8zw1aSlsp7op7l1UJQAsPOnLEPoVQCpYTeUPRyviJZSs6kBZUURyMzCs3bKOFSEJEib1nfjXwC_4gAmf4jXhuxWCAJVO78O-wlIgUFbPq3-78pdmQf7DXhiqzGdRvYGSKk74qiA_J; expires=Thu, 17-Oct-2024 22:34:37 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Wed, 17 Apr 2024 22:34:37 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 17 Apr 2024 22:34:37 GMT Connection: close Transfer-Encoding: chunked
2024-04-17 22:34:37 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-17 22:34:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49785	172.253.124.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:37 UTC	876	OUT	GET /images/hpp/ic_wahlberg_product_core_48.png8.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU; OGPC=19037049-1:
2024-04-17 22:34:37 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 2091 Date: Wed, 17 Apr 2024 22:34:37 GMT Expires: Wed, 17 Apr 2024 22:34:37 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:34:37 UTC	584	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 07 f2 49 44 41 54 78 01 c5 9a 03 f0 ec ea 12 c4 9f 6d a3 74 6d db 38 36 af 6d db b6 6d 9b 87 d7 b6 6d db 58 6f b0 f8 b3 5f 7e b5 e7 4d 6d e5 26 df e6 78 ab ba b2 15 76 cf f4 cc f7 05 3f 9a 13 bf 20 08 7e 5e a9 54 56 2e 97 cb fb 7a 9e 77 4b 84 97 ab d5 aa 1f 2d eb 60 c6 ff 77 a3 e5 1d 11 8e 8f f6 1b e0 fb fe 1f 7f 34 bf 7f 11 89 e5 22 1c 13 91 7a 36 5a e6 22 92 8a 96 a9 60 3b 40 d0 0c 91 e7 21 86 00 cc 53 e2 51 b4 c7 45 04 ee 8b d0 4c 24 eb 10 60 30 31 9e 10 53 28 14 76 8a c4 fc 76 6e 13 5f 19 e2 ee 48 bb 05 b8 10 9d ff cd 48 c4 66 73 9c 38 29 c6 2a f8 d9 08 cd 71 01 96 11 84 5c 1f ed ff f7 39 42 3e f2 e9 7f 29 3e 23 32 17 05 c4 b3 41 8d cd 16 f9 7a bd Data Ascii: PNGIHDR00WIDATxmtm86mmmXo_~Mm&xv? ~^TV.zwK-`w4"z6Z"`;@!SQEL$`01S(vvn_HHfs8)*q\9B>)>#2Az
2024-04-17 22:34:37 UTC	1255	IN	Data Raw: e1 73 a2 0b 2c ca 1c db 26 80 25 36 a2 86 20 4f 3d 64 6a af 11 d7 a3 e2 53 84 1f 3b a2 4f c1 e2 79 6c 63 91 4f 8c 7e ab 1e ac db 54 6e be 46 a0 7c d1 59 90 e4 58 8a d8 84 40 be b8 ef 2e 90 07 19 db aa 65 e1 8f 99 bd 4f d1 5a c1 c6 c8 03 c8 b0 8d 7d 28 48 04 93 b1 76 70 0e c6 06 c4 20 12 db 18 79 bc ef 26 ef ae 05 3a 8f ab e3 d0 b7 f3 ab af 0a d9 38 79 eb f5 d5 7b 6e 8f 0d 52 5e 1c 10 b5 3a 2a 1d 71 00 eb dc e4 dd b8 cf fa 3e f3 f9 b4 e8 43 a8 eb e5 a1 0a 8e 5e 50 b9 01 43 db db 25 91 87 3c 84 20 36 e3 18 cf 39 07 82 2c e7 24 30 78 de 4d de 3d cd 60 5c f8 ff 4d 49 2e 91 7c d8 a3 b0 f0 8a fa 1e ff b5 fa 5e fe 83 ea 57 2d 22 88 e7 87 0c 40 04 85 4a fb b3 1e 9e 92 c5 b9 06 ee 4b 98 6d ee 91 1c fd 68 a7 ba d4 78 ef 48 f5 3e f4 63 f5 3e f1 77 21 a2 eb 9e ff aa Data Ascii: s,&%6 O=djS;OylcO~TnF\|YX@.eOZ}(Hvp y&:8y{nR^:*q>C^PC%< 69,$0xM=`\MI.\|^W-"@JKmhxH>c>w!
2024-04-17 22:34:37 UTC	252	IN	Data Raw: 36 c3 6b 9d 06 23 2e 0a 9e fa fc 25 1d f8 c4 69 56 ac 88 41 54 1c ac 27 ea b4 5c 88 7f 51 fc 9a 40 50 5f 36 76 64 69 9b 59 45 1c 06 49 47 26 b8 28 db ad c7 d3 2e 11 43 bb a4 63 b5 03 c2 b4 62 26 80 d4 12 fb 67 19 bd e1 80 ef 1d 4f a5 dd 8f da 3b 8b b0 a2 23 92 26 26 05 74 b2 2c 2f 35 d8 c7 6e dc 67 eb 3d 32 9d 29 2a 9c 6e b7 88 b8 98 aa 03 9e 1b d6 eb 5b b3 4d 37 f9 ec 22 86 30 52 b7 47 66 6e 80 73 03 9a 08 81 9b 6d e2 f1 81 8e 88 50 dc 73 5e 84 05 86 a8 3f e1 7a 1f 36 47 b2 c1 45 10 62 17 9e 2d d2 36 35 7e 93 cf 0d e6 c9 77 13 bc 4f e0 23 0d a6 e1 11 72 10 e8 f0 48 d1 f5 d1 c7 7d b4 ed b9 fc 9d 84 db 5a 4c c7 e9 d3 64 26 22 f2 31 a2 28 fc 18 4a 6c 63 a4 c7 8a 44 9b 77 d1 b3 7b fd ff 01 69 0d 0a c8 fa 0f 36 41 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 6k#.%iVAT'\Q@P_6vdiYEIG&(.Ccb&gO;#&&t,/5ng=2)*n[M7"0RGfnsmPs^?z6GEb-65~wO#rH}ZLd&"1(JlcDw{i6AIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	49787	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:37 UTC	1835	OUT	GET /xjs/_/js/k=xjs.hd.en.Gos8NmADZ0A.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAkgAIAAAoAACAAAAAAgMAQAEAAQAAWAZAICCAIABgAQhCAhzIBgIAJAAAACAAIAQgCAIAAAABAAQAAAAAAAAAAgAECBAAAAAAAAAAAAAA6AQAIAADBACEAAAEAAADIAxAcgEEKAgAAAAAAAAAAAAAEIEEwFySgIAACAAAAAAAAAAAAACCVTiyMAQ/d=0/dg=2/br=1/rs=ACT90oHjHvDG23MtVpqokFyaqpDqKHsdQA/m=sy18x,P10Owf,syo5,sy17j,sy17l,gSZvdb,sytk,sytq,sytr,WlNQGd,syo3,syu8,syua,nabPbb,syo4,syo6,syo7,syo8,syoa,DPreE,syk1,sytj,sytl,CnSW2d,kQvlef,syu9,fXO0xe?xjs=s3 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU; OGPC=19037049-1:
2024-04-17 22:34:37 UTC	817	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 23535 Date: Wed, 17 Apr 2024 22:34:37 GMT Expires: Thu, 17 Apr 2025 22:34:37 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Tue, 16 Apr 2024 23:00:34 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:34:37 UTC	438	IN	Data Raw: 74 68 69 73 2e 5f 68 64 3d 74 68 69 73 2e 5f 68 64 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 79 55 63 3d 5f 2e 49 64 28 22 50 31 30 4f 77 66 22 2c 5b 5f 2e 6c 71 5d 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 78 28 22 50 31 30 4f 77 66 22 29 3b 0a 76 61 72 20 7a 55 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 41 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 4d 61 29 3b 74 68 69 73 2e 53 62 3d 61 2e 73 65 72 76 69 63 65 2e 53 62 3b 74 68 69 73 2e 64 61 74 61 3d 61 2e 68 65 2e 4b 70 61 7d 3b 5f 2e 43 28 7a 55 63 2c 5f 2e 41 29 3b 7a 55 63 2e 49 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e Data Ascii: this._hd=this._hd\|\|{};(function(_){var window=this;try{_.yUc=_.Id("P10Owf",[_.lq]);}catch(e){_._DumpException(e)}try{_.x("P10Owf");var zUc=function(a){_.A.call(this,a.Ma);this.Sb=a.service.Sb;this.data=a.he.Kpa};_.C(zUc,_.A);zUc.Ia=function(){return
2024-04-17 22:34:37 UTC	1255	IN	Data Raw: 6c 6c 3d 3d 28 63 3d 74 68 69 73 2e 64 61 74 61 29 3f 30 3a 5f 2e 54 65 28 63 2c 34 29 29 26 26 5f 2e 54 65 28 61 2e 64 61 74 61 2c 34 29 21 3d 3d 5f 2e 54 65 28 74 68 69 73 2e 64 61 74 61 2c 34 29 7c 7c 74 68 69 73 2e 53 62 2e 6b 61 28 29 2e 6f 61 28 74 68 69 73 2e 67 65 74 52 6f 6f 74 28 29 2e 65 6c 28 29 2c 32 29 2e 6c 6f 67 28 21 30 29 7d 3b 7a 55 63 2e 70 72 6f 74 6f 74 79 70 65 2e 43 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 53 62 2e 6b 61 28 29 2e 6b 61 28 61 2e 74 62 2e 65 6c 28 29 29 2e 6c 6f 67 28 21 30 29 3b 5f 2e 72 66 28 64 6f 63 75 6d 65 6e 74 2c 5f 2e 51 52 62 29 7d 3b 0a 7a 55 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 53 62 2e 6b 61 28 29 2e 6b 61 28 61 2e 74 62 2e 65 6c Data Ascii: ll==(c=this.data)?0:_.Te(c,4))&&_.Te(a.data,4)!==_.Te(this.data,4)\|\|this.Sb.ka().oa(this.getRoot().el(),2).log(!0)};zUc.prototype.Ca=function(a){this.Sb.ka().ka(a.tb.el()).log(!0);_.rf(document,_.QRb)};zUc.prototype.ta=function(a){this.Sb.ka().ka(a.tb.el
2024-04-17 22:34:37 UTC	1255	IN	Data Raw: 61 74 61 2c 5f 2e 67 42 2c 31 34 2c 61 2e 64 61 74 61 29 3b 58 4f 63 28 74 68 69 73 29 7d 3b 0a 76 61 72 20 58 4f 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 70 75 28 61 2e 67 65 74 52 6f 6f 74 28 29 2e 65 6c 28 29 29 3b 5f 2e 55 4f 63 28 22 66 73 22 29 3b 61 2e 6f 61 3f 5f 2e 72 66 28 64 6f 63 75 6d 65 6e 74 2c 5f 2e 4f 52 62 2c 61 2e 64 61 74 61 2e 55 63 28 29 29 3a 5f 2e 72 66 28 64 6f 63 75 6d 65 6e 74 2c 5f 2e 4e 52 62 2c 61 2e 64 61 74 61 29 3b 5f 2e 72 66 28 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2c 5f 2e 6c 76 62 29 3b 5f 2e 68 77 28 61 2e 67 65 74 52 6f 6f 74 28 29 2e 65 6c 28 29 2c 22 68 69 64 65 5f 70 6f 70 75 70 22 29 3b 61 2e 74 61 26 26 61 2e 74 72 69 67 67 65 72 28 5f 2e 54 4f 63 29 7d 3b 5f 2e 49 28 57 4f 63 2e 70 Data Ascii: ata,_.gB,14,a.data);XOc(this)};var XOc=function(a){_.pu(a.getRoot().el());_.UOc("fs");a.oa?_.rf(document,_.ORb,a.data.Uc()):_.rf(document,_.NRb,a.data);_.rf(window.document.body,_.lvb);_.hw(a.getRoot().el(),"hide_popup");a.ta&&a.trigger(_.TOc)};_.I(WOc.p
2024-04-17 22:34:37 UTC	1255	IN	Data Raw: 73 2c 22 74 71 70 37 75 64 22 29 2e 65 6c 28 29 3b 63 26 26 62 2e 70 75 73 68 28 63 29 3b 72 65 74 75 72 6e 20 62 7d 3b 79 78 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 53 70 61 7d 3b 79 78 2e 70 72 6f 74 6f 74 79 70 65 2e 72 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 72 65 66 69 78 3d 22 22 7d 3b 0a 76 61 72 20 74 31 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 74 61 28 29 3b 5f 2e 4a 61 28 62 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 64 3d 61 2e 6b 61 28 63 29 3b 69 66 28 64 2e 69 73 53 65 6c 65 63 74 65 64 28 29 26 26 64 2e 69 73 45 6e 61 62 6c 65 64 28 29 29 73 77 69 74 63 68 28 64 2e 67 65 74 54 79 70 65 28 29 29 7b 63 61 73 65 20 32 3a 75 Data Ascii: s,"tqp7ud").el();c&&b.push(c);return b};yx.prototype.kb=function(){return this.Spa};yx.prototype.rb=function(){this.prefix=""};var t1b=function(a){var b=a.ta();_.Ja(b,function(c){var d=a.ka(c);if(d.isSelected()&&d.isEnabled())switch(d.getType()){case 2:u
2024-04-17 22:34:37 UTC	1255	IN	Data Raw: 65 20 35 3a 61 3d 61 2e 67 65 74 52 6f 6f 74 28 29 2e 65 6c 28 29 3b 5f 2e 4c 65 28 61 2c 5f 2e 6f 31 62 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 79 31 62 28 61 2c 64 2c 21 31 2c 63 29 7d 64 2e 69 73 53 65 6c 65 63 74 65 64 28 29 7d 7d 2c 79 31 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 61 3d 61 2e 67 65 74 52 6f 6f 74 28 29 2e 65 6c 28 29 3b 5f 2e 4c 65 28 61 2c 5f 2e 6e 31 62 2c 6e 65 77 20 73 31 62 28 62 2c 63 2c 64 29 29 7d 3b 5f 2e 6d 3d 79 78 2e 70 72 6f 74 6f 74 79 70 65 3b 5f 2e 6d 2e 47 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 43 61 7d 3b 5f 2e 6d 2e 6e 36 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 4b 61 7d 3b 5f 2e 6d 2e 55 34 63 3d 66 75 6e 63 74 69 6f 6e Data Ascii: e 5:a=a.getRoot().el();_.Le(a,_.o1b);break;default:y1b(a,d,!1,c)}d.isSelected()}},y1b=function(a,b,c,d){a=a.getRoot().el();_.Le(a,_.n1b,new s1b(b,c,d))};_.m=yx.prototype;_.m.Gr=function(){return this.Ca};_.m.n6c=function(){return this.Ka};_.m.U4c=function
2024-04-17 22:34:37 UTC	1255	IN	Data Raw: 64 20 30 3a 62 2e 74 61 67 4e 61 6d 65 29 26 26 22 47 2d 4d 45 4e 55 22 21 3d 3d 28 6e 75 6c 6c 3d 3d 28 63 3d 61 2e 65 6c 28 29 29 3f 76 6f 69 64 20 30 3a 63 2e 74 61 67 4e 61 6d 65 29 3b 29 61 3d 61 2e 70 61 72 65 6e 74 28 29 3b 76 61 72 20 64 3b 72 65 74 75 72 6e 22 47 2d 4d 45 4e 55 2d 49 54 45 4d 22 3d 3d 3d 28 6e 75 6c 6c 3d 3d 28 64 3d 0a 61 2e 65 6c 28 29 29 3f 76 6f 69 64 20 30 3a 64 2e 74 61 67 4e 61 6d 65 29 3f 61 2e 65 6c 28 29 3a 6e 75 6c 6c 7d 3b 5f 2e 6d 3d 79 78 2e 70 72 6f 74 6f 74 79 70 65 3b 5f 2e 6d 2e 68 63 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 7a 31 62 28 61 29 3b 69 66 28 62 29 7b 76 61 72 20 63 3d 61 2e 65 76 65 6e 74 3b 28 63 3d 63 3f 63 2e 77 68 69 63 68 7c 7c 63 2e 6b 65 79 43 6f 64 65 3a 6e 75 6c 6c 29 26 Data Ascii: d 0:b.tagName)&&"G-MENU"!==(null==(c=a.el())?void 0:c.tagName);)a=a.parent();var d;return"G-MENU-ITEM"===(null==(d=a.el())?void 0:d.tagName)?a.el():null};_.m=yx.prototype;_.m.hcd=function(a){var b=z1b(a);if(b){var c=a.event;(c=c?c.which\|\|c.keyCode:null)&
2024-04-17 22:34:37 UTC	1255	IN	Data Raw: 7b 72 65 74 75 72 6e 28 62 3f 41 31 62 28 61 2c 21 30 29 3a 61 2e 74 61 28 29 29 2e 66 69 6e 64 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 61 2e 6b 61 28 63 29 2e 69 73 45 6e 61 62 6c 65 64 28 29 3f 28 63 3d 61 2e 6b 61 28 63 29 2e 67 65 74 43 6f 6e 74 65 6e 74 28 29 2c 5f 2e 68 74 61 28 63 2c 61 2e 70 72 65 66 69 78 29 29 3a 21 31 7d 29 7d 2c 41 31 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2e 6f 61 2c 64 3d 61 2e 74 61 28 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 5f 2e 44 6d 2e 6a 68 28 65 29 7d 29 3b 6e 75 6c 6c 3d 3d 3d 63 26 26 28 22 30 22 3d 3d 3d 61 2e 6d 65 6e 75 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 29 7c 7c 30 3c 64 2e 6c 65 6e Data Ascii: {return(b?A1b(a,!0):a.ta()).find(function(c){return a.ka(c).isEnabled()?(c=a.ka(c).getContent(),_.hta(c,a.prefix)):!1})},A1b=function(a,b){var c=a.oa,d=a.ta().filter(function(e){return _.Dm.jh(e)});null===c&&("0"===a.menu.getAttribute("tabindex")\|\|0<d.len
2024-04-17 22:34:37 UTC	1255	IN	Data Raw: 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 68 63 64 7d 29 3b 5f 2e 49 28 79 78 2e 70 72 6f 74 6f 74 79 70 65 2c 22 78 70 52 73 4e 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 52 55 62 7d 29 3b 5f 2e 49 28 79 78 2e 70 72 6f 74 6f 74 79 70 65 2c 22 4f 47 32 71 71 63 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 53 78 61 7d 29 3b 5f 2e 49 28 79 78 2e 70 72 6f 74 6f 74 79 70 65 2c 22 6b 76 6d 32 38 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 55 34 63 7d 29 3b 5f 2e 49 28 79 78 2e 70 72 6f 74 6f 74 79 70 65 2c 22 6d 46 73 32 53 63 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 36 63 7d 29 3b 0a 5f 2e 49 28 79 78 2e 70 72 Data Ascii: tion(){return this.hcd});_.I(yx.prototype,"xpRsNe",function(){return this.RUb});_.I(yx.prototype,"OG2qqc",function(){return this.Sxa});_.I(yx.prototype,"kvm28d",function(){return this.U4c});_.I(yx.prototype,"mFs2Sc",function(){return this.n6c});_.I(yx.pr
2024-04-17 22:34:37 UTC	1255	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 63 6f 6e 74 72 6f 6c 6c 65 72 3a 7b 78 6c 3a 22 56 36 38 62 64 65 22 7d 7d 7d 3b 0a 66 33 62 2e 70 72 6f 74 6f 74 79 70 65 2e 43 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 2c 63 3d 5b 5d 3b 5f 2e 59 63 28 74 68 69 73 2e 6b 61 29 26 26 63 2e 70 75 73 68 28 6e 65 77 20 5f 2e 78 6e 28 74 68 69 73 2e 6b 61 2c 22 73 68 6f 77 22 29 29 3b 76 61 72 20 64 3d 61 2e 64 61 74 61 26 26 61 2e 64 61 74 61 2e 77 63 3b 64 26 26 5f 2e 59 63 28 64 29 7c 7c 28 64 3d 6e 75 6c 6c 29 3b 28 64 7c 7c 63 2e 6c 65 6e 67 74 68 29 26 26 5f 2e 6f 75 28 63 2c 7b 77 63 3a 64 7c 7c 76 6f 69 64 20 30 7d 29 3b 63 3d 5f 2e 77 6c 28 22 73 65 61 72 63 68 66 6f 72 6d 22 29 3b 64 3d 74 68 69 73 2e 70 6f 70 75 70 2e 67 65 Data Ascii: ction(){return{controller:{xl:"V68bde"}}};f3b.prototype.Ca=function(a){var b=this,c=[];_.Yc(this.ka)&&c.push(new _.xn(this.ka,"show"));var d=a.data&&a.data.wc;d&&_.Yc(d)\|\|(d=null);(d\|\|c.length)&&_.ou(c,{wc:d\|\|void 0});c=_.wl("searchform");d=this.popup.ge
2024-04-17 22:34:37 UTC	1255	IN	Data Raw: 7a 77 65 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 44 61 7d 29 3b 5f 2e 49 28 66 33 62 2e 70 72 6f 74 6f 74 79 70 65 2c 22 67 44 6b 66 34 63 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 61 7d 29 3b 0a 5f 2e 49 28 66 33 62 2e 70 72 6f 74 6f 74 79 70 65 2c 22 59 30 79 34 63 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 43 61 7d 29 3b 5f 2e 71 72 28 5f 2e 65 33 62 2c 66 33 62 29 3b 0a 5f 2e 79 28 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 41 75 3d 5f 2e 66 6f 28 22 42 55 59 77 56 62 22 29 3b 5f 2e 69 76 62 3d 5f 2e 66 6f 28 22 4c 73 4c 47 48 66 22 29 3b 0a 7d 63 61 74 63 68 28 65 29 Data Ascii: zweb",function(){return this.Da});_.I(f3b.prototype,"gDkf4c",function(){return this.ta});_.I(f3b.prototype,"Y0y4c",function(){return this.Ca});_.qr(_.e3b,f3b);_.y();}catch(e){_._DumpException(e)}try{_.Au=_.fo("BUYwVb");_.ivb=_.fo("LsLGHf");}catch(e)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	49786	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:37 UTC	1385	OUT	GET /client_204?cs=1&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU; OGPC=19037049-1:
2024-04-17 22:34:37 UTC	1769	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-O6UlbuvQBoyrYr_zVW20vQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Wed, 17 Apr 2024 22:34:37 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-04-17-22; expires=Fri, 17-May-2024 22:34:37 GMT; path=/; domain=.google.com; Secure; SameSite=none Set-Cookie: NID=513=YOyhOEA-rVSIBR9SawfTVYUzEw0R9DjMddwqqytPkoSkXKP5CwIoweOYvFcUasxUSzmgwHmsn6HfyVprCcJalmvaMFbEHrjiDz1fAXKUBzvjvy5qCLMd-eRyzxg6s27oPd4Mgq1sJvX69FbF6RVNO4FZZeL33WWje9SmqIU3eAOR4Zt8X5b7pQ33; expires=Thu, 17-Oct-2024 22:32:49 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.16	49788	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:37 UTC	2057	OUT	GET /async/hpba?vet=10ahUKEwjW5curp8qFAxVaC0QIHYViBYMQj-0KCB0..i&ei=eU4gZpbFNNqWkPIPhcWVmAg&opi=89978449&yv=3&cs=0&async=isImageHp:false,_ck:xjs.hd.Lo9lRXsykaQ.L.W.O,_k:xjs.hd.en.Gos8NmADZ0A.O,_am:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAkgAIAAAoAACAAAAAAgMAQAEAAQAAWAZAICCAIABgAQhCAhzIBgIAJAAAACAAIAQgCAIAAAABAAQAAAAAAAAAAgAECBAAAAAAAAAAAAAA6AQAIAADBACEAAAEAAADIAxAcgEEKAgAAAAAAAAAAAAAEIEEwFySgIAACAAAAAAAAAAAAACCVTiyMAQ,_cssam:cAEAAAAAAMAAAAAAAAAAAAAAAAAAgAAAAgAAAAAgAHzCAQLAhgAAAEAAAIAAAEAAAAAEAQAAACAIABgAABAAAAAAgRAACIAACSAJQQYCAIhgggFSAYABAAAAIAEAAAACAhAwAAHAQwQAAAQ6AQEkAADIACEAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAEAAAACgAAAAAAAAAAAAAAAAAAAE,_csss:ACT90oF2S7JtbOzl7PcgP8AWv8-OdLvQhA,_fmt:prog,_id:a3JU5b HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU; OGPC=19037049-1:
2024-04-17 22:34:37 UTC	1637	IN	HTTP/1.1 200 OK Version: 623731739 X-Content-Type-Options: nosniff Content-Type: text/plain; charset=UTF-8 Content-Disposition: attachment; filename="f.txt" Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Wed, 17 Apr 2024 22:34:37 GMT Server: gws Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Expires: Wed, 17 Apr 2024 22:34:37 GMT Set-Cookie: 1P_JAR=2024-04-17-22; expires=Fri, 17-May-2024 22:34:37 GMT; path=/; domain=.google.com; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-17 22:34:37 UTC	48	IN	Data Raw: 32 61 0d 0a 29 5d 7d 27 0a 32 32 3b 5b 22 66 55 34 67 5a 75 71 61 47 4a 4b 56 77 62 6b 50 36 70 79 6c 69 41 63 22 2c 22 31 39 39 30 22 5d 0d 0a Data Ascii: 2a)]}'22;["fU4gZuqaGJKVwbkP6pyliAc","1990"]
2024-04-17 22:34:37 UTC	41	IN	Data Raw: 32 33 0d 0a 33 3b 5b 32 5d 31 62 3b 3c 64 69 76 20 6a 73 6e 61 6d 65 3d 22 4e 6c 6c 30 6e 65 22 3e 3c 2f 64 69 76 3e 0d 0a Data Ascii: 233;[2]1b;<div jsname="Nll0ne"></div>
2024-04-17 22:34:37 UTC	12	IN	Data Raw: 37 0d 0a 33 3b 5b 39 5d 30 3b 0d 0a Data Ascii: 73;[9]0;
2024-04-17 22:34:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.16	49789	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:37 UTC	1490	OUT	POST /gen_204?atyp=i&ei=eU4gZpbFNNqWkPIPhcWVmAg&dt19=2&zx=1713393276436&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU; OGPC=19037049-1:
2024-04-17 22:34:37 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-OfATcjpFc34liM7iZvjfWg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Wed, 17 Apr 2024 22:34:37 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.16	49790	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:37 UTC	1507	OUT	POST /gen_204?atyp=csi&ei=eU4gZpbFNNqWkPIPhcWVmAg&s=promo&rt=hpbas.2800&zx=1713393276438&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU; OGPC=19037049-1:
2024-04-17 22:34:37 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-bciDwq0Ed52HbN5TgTv0JA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Wed, 17 Apr 2024 22:34:37 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.16	49792	172.253.124.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:37 UTC	1150	OUT	GET /xjs/_/ss/k=xjs.hd.Lo9lRXsykaQ.L.W.O/am=cAEAAAAAAMAAAAAAAAAAAAAAAAAAgAAAAgAAAAAgAHzCAQLAhgAAAEAAAIAAAEAAAAAEAQAAACAIABgAABAAAAAAgRAACIAACSAJQQYCAIhgggFSAYABAAAAIAEAAAACAhAwAAHAQwQAAAQ6AQEkAADIACEAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAEAAAACgAAAAAAAAAAAAAAAAAAAE/d=0/dg=2/br=1/rs=ACT90oF2S7JtbOzl7PcgP8AWv8-OdLvQhA/m=syk1?xjs=s3 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; NID=513=GyDjLNT_jkHV9K3Nwc3Ov6ganVlVlG52nt2wwSpvUwVzdGdsMqjg_Mszwt5eSQcOEkdYm0o4bCSIY-VMsjEq_6zSNRC1MJ71jhAhf5CPX4fhTcGgDZNR-kWWWX8Sjvt870CR9_Lnnbtum9cZcexmaYkBNe4lwtG-qQwWFwi8SfU; OGPC=19037049-1:
2024-04-17 22:34:37 UTC	808	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/css; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 833 Date: Wed, 17 Apr 2024 22:34:37 GMT Expires: Thu, 17 Apr 2025 22:34:37 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Tue, 16 Apr 2024 23:00:34 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:34:37 UTC	447	IN	Data Raw: 2e 45 70 50 59 4c 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 59 70 63 44 6e 66 7b 70 61 64 64 69 6e 67 3a 30 20 31 36 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 59 70 63 44 6e 66 2e 48 47 31 64 76 64 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 48 47 31 64 76 64 3e 2a 7b 70 61 64 64 69 6e 67 3a 30 20 31 36 70 78 7d 2e 57 74 56 35 6e 64 20 2e 59 70 63 44 6e 66 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 38 70 78 7d 2e 5a 74 30 61 35 65 20 2e 59 70 63 44 6e 66 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 34 38 70 78 7d 2e 47 5a 6e 51 71 65 20 2e 59 70 63 44 6e 66 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 33 70 78 7d 2e 45 70 50 59 4c 64 3a 68 6f 76 65 72 7b 63 75 72 73 6f 72 Data Ascii: .EpPYLd{display:block;position:relative}.YpcDnf{padding:0 16px;vertical-align:middle}.YpcDnf.HG1dvd{padding:0}.HG1dvd>*{padding:0 16px}.WtV5nd .YpcDnf{padding-left:28px}.Zt0a5e .YpcDnf{line-height:48px}.GZnQqe .YpcDnf{line-height:23px}.EpPYLd:hover{cursor
2024-04-17 22:34:37 UTC	386	IN	Data Raw: 74 20 6c 65 66 74 20 38 70 78 20 63 65 6e 74 65 72 7d 2e 5a 74 30 61 35 65 2e 43 42 38 6e 44 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 73 6c 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 73 2f 6d 61 74 65 72 69 61 6c 2f 73 79 73 74 65 6d 2f 31 78 2f 64 6f 6e 65 5f 62 6c 61 63 6b 5f 31 36 64 70 2e 70 6e 67 29 7d 2e 47 5a 6e 51 71 65 2e 43 42 38 6e 44 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 2d 72 65 70 65 61 74 20 6c 65 66 74 20 63 65 6e 74 65 72 7d 2e 47 5a 6e 51 71 65 2e 43 42 38 6e 44 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 73 6c 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 75 69 2f 76 31 2f 6d 65 6e 75 2f 63 68 65 63 6b Data Ascii: t left 8px center}.Zt0a5e.CB8nDe{background-image:url(https://ssl.gstatic.com/images/icons/material/system/1x/done_black_16dp.png)}.GZnQqe.CB8nDe{background:no-repeat left center}.GZnQqe.CB8nDe{background-image:url(https://ssl.gstatic.com/ui/v1/menu/check

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.16	49793	142.250.105.100	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:37 UTC	875	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; OGPC=19037049-1:; NID=513=W5yCzMT05Sv_9SmhCPFD4YomQcTLqx6qQ3jjGL6k3A7jAhYzX-y8zw1aSlsp7op7l1UJQAsPOnLEPoVQCpYTeUPRyviJZSs6kBZUURyMzCs3bKOFSEJEib1nfjXwC_4gAmf4jXhuxWCAJVO78O-wlIgUFbPq3-78pdmQf7DXhiqzGdRvYGSKk74qiA_J
2024-04-17 22:34:37 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 17 Apr 2024 22:34:37 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:34:37 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-17 22:34:37 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.16	49794	172.253.124.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:37 UTC	1542	OUT	GET /async/hpba?vet=10ahUKEwjW5curp8qFAxVaC0QIHYViBYMQj-0KCB0..i&ei=eU4gZpbFNNqWkPIPhcWVmAg&opi=89978449&yv=3&cs=0&async=isImageHp:false,_ck:xjs.hd.Lo9lRXsykaQ.L.W.O,_k:xjs.hd.en.Gos8NmADZ0A.O,_am:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAkgAIAAAoAACAAAAAAgMAQAEAAQAAWAZAICCAIABgAQhCAhzIBgIAJAAAACAAIAQgCAIAAAABAAQAAAAAAAAAAgAECBAAAAAAAAAAAAAA6AQAIAADBACEAAAEAAADIAxAcgEEKAgAAAAAAAAAAAAAEIEEwFySgIAACAAAAAAAAAAAAACCVTiyMAQ,_cssam:cAEAAAAAAMAAAAAAAAAAAAAAAAAAgAAAAgAAAAAgAHzCAQLAhgAAAEAAAIAAAEAAAAAEAQAAACAIABgAABAAAAAAgRAACIAACSAJQQYCAIhgggFSAYABAAAAIAEAAAACAhAwAAHAQwQAAAQ6AQEkAADIACEAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAEAAAACgAAAAAAAAAAAAAAAAAAAE,_csss:ACT90oF2S7JtbOzl7PcgP8AWv8-OdLvQhA,_fmt:prog,_id:a3JU5b HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; OGPC=19037049-1:; NID=513=YOyhOEA-rVSIBR9SawfTVYUzEw0R9DjMddwqqytPkoSkXKP5CwIoweOYvFcUasxUSzmgwHmsn6HfyVprCcJalmvaMFbEHrjiDz1fAXKUBzvjvy5qCLMd-eRyzxg6s27oPd4Mgq1sJvX69FbF6RVNO4FZZeL33WWje9SmqIU3eAOR4Zt8X5b7pQ33
2024-04-17 22:34:37 UTC	1637	IN	HTTP/1.1 200 OK Version: 623731739 X-Content-Type-Options: nosniff Content-Type: text/plain; charset=UTF-8 Content-Disposition: attachment; filename="f.txt" Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Wed, 17 Apr 2024 22:34:37 GMT Server: gws Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Expires: Wed, 17 Apr 2024 22:34:37 GMT Set-Cookie: 1P_JAR=2024-04-17-22; expires=Fri, 17-May-2024 22:34:37 GMT; path=/; domain=.google.com; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-17 22:34:37 UTC	47	IN	Data Raw: 32 39 0d 0a 29 5d 7d 27 0a 32 31 3b 5b 22 66 55 34 67 5a 72 79 5f 4e 49 4b 74 31 51 47 6b 2d 36 7a 51 43 77 22 2c 22 31 39 39 30 22 5d 0d 0a Data Ascii: 29)]}'21;["fU4gZry_NIKt1QGk-6zQCw","1990"]
2024-04-17 22:34:37 UTC	41	IN	Data Raw: 32 33 0d 0a 33 3b 5b 32 5d 31 62 3b 3c 64 69 76 20 6a 73 6e 61 6d 65 3d 22 4e 6c 6c 30 6e 65 22 3e 3c 2f 64 69 76 3e 0d 0a Data Ascii: 233;[2]1b;<div jsname="Nll0ne"></div>
2024-04-17 22:34:37 UTC	12	IN	Data Raw: 37 0d 0a 33 3b 5b 39 5d 30 3b 0d 0a Data Ascii: 73;[9]0;
2024-04-17 22:34:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.16	49795	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:37 UTC	1669	OUT	POST /gen_204?atyp=csi&ei=fU4gZuqaGJKVwbkP6pyliAc&s=async&astyp=hpba&ima=0&imn=0&mem=ujhs.17,tjhs.22,jhsl.2173,dm.8&nv=ne.2,feid.d86e3dcc-32a9-4378-905e-22a63a987187&hp=&rt=ttfb.675,st.676,bs.27,aaft.678,acrt.678,art.678&zx=1713393277118&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; OGPC=19037049-1:; NID=513=YOyhOEA-rVSIBR9SawfTVYUzEw0R9DjMddwqqytPkoSkXKP5CwIoweOYvFcUasxUSzmgwHmsn6HfyVprCcJalmvaMFbEHrjiDz1fAXKUBzvjvy5qCLMd-eRyzxg6s27oPd4Mgq1sJvX69FbF6RVNO4FZZeL33WWje9SmqIU3eAOR4Zt8X5b7pQ33
2024-04-17 22:34:37 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-DXFjFRvvczxC1VkyuN9zgg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Wed, 17 Apr 2024 22:34:37 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.16	49797	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:37 UTC	1706	OUT	GET /xjs/_/js/k=xjs.hd.en.Gos8NmADZ0A.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAkgAIAAAoAACAAAAAAgMAQAEAAQAAWAZAICCAIABgAQhCAhzIBgIAJAAAACAAIAQgCAIAAAABAAQAAAAAAAAAAgAECBAAAAAAAAAAAAAA6AQAIAADBACEAAAEAAADIAxAcgEEKAgAAAAAAAAAAAAAEIEEwFySgIAACAAAAAAAAAAAAACCVTiyMAQ/d=0/dg=2/br=1/rs=ACT90oHjHvDG23MtVpqokFyaqpDqKHsdQA/m=syev,aLUfP?xjs=s3 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; OGPC=19037049-1:; NID=513=YOyhOEA-rVSIBR9SawfTVYUzEw0R9DjMddwqqytPkoSkXKP5CwIoweOYvFcUasxUSzmgwHmsn6HfyVprCcJalmvaMFbEHrjiDz1fAXKUBzvjvy5qCLMd-eRyzxg6s27oPd4Mgq1sJvX69FbF6RVNO4FZZeL33WWje9SmqIU3eAOR4Zt8X5b7pQ33
2024-04-17 22:34:38 UTC	816	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 1573 Date: Wed, 17 Apr 2024 22:34:38 GMT Expires: Thu, 17 Apr 2025 22:34:38 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Tue, 16 Apr 2024 23:00:34 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:34:38 UTC	439	IN	Data Raw: 74 68 69 73 2e 5f 68 64 3d 74 68 69 73 2e 5f 68 64 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 46 6f 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 4d 76 3d 61 7d 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 78 28 22 61 4c 55 66 50 22 29 3b 0a 76 61 72 20 47 6f 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 4d 6e 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 4d 61 29 3b 76 61 72 20 62 3d 74 68 69 73 3b 74 68 69 73 2e 77 69 6e 64 6f 77 3d 61 2e 73 65 72 76 69 63 65 2e 77 69 6e 64 6f 77 2e 67 65 74 28 29 3b 74 68 69 73 2e 74 61 3d 74 68 69 73 2e 4d 76 28 29 3b 74 68 69 73 2e 6f 61 3d 77 69 6e 64 6f Data Ascii: this._hd=this._hd\|\|{};(function(_){var window=this;try{_.Fob=function(a){this.Mv=a};}catch(e){_._DumpException(e)}try{_.x("aLUfP");var Gob=function(a){_.Mn.call(this,a.Ma);var b=this;this.window=a.service.window.get();this.ta=this.Mv();this.oa=windo
2024-04-17 22:34:38 UTC	585	IN	Data Raw: 28 76 61 72 20 65 3d 64 2e 6e 65 78 74 28 29 3b 21 65 2e 64 6f 6e 65 3b 65 3d 64 2e 6e 65 78 74 28 29 29 7b 65 3d 65 2e 76 61 6c 75 65 3b 76 61 72 20 66 3d 6e 65 77 20 5f 2e 46 6f 62 28 63 29 3b 74 72 79 7b 65 28 66 29 7d 63 61 74 63 68 28 67 29 7b 5f 2e 64 61 28 67 29 7d 7d 7d 7d 3b 74 68 69 73 2e 51 64 3d 6e 65 77 20 53 65 74 3b 74 68 69 73 2e 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 73 69 7a 65 22 2c 74 68 69 73 2e 6b 61 29 3b 74 68 69 73 2e 6a 53 61 28 29 26 26 74 68 69 73 2e 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6f 72 69 65 6e 74 61 74 69 6f 6e 63 68 61 6e 67 65 22 2c 0a 74 68 69 73 2e 6b 61 29 7d 3b 5f 2e 43 28 47 6f 62 2c 5f 2e 4d 6e 29 3b 47 6f 62 2e 56 61 3d 5f 2e 4d 6e Data Ascii: (var e=d.next();!e.done;e=d.next()){e=e.value;var f=new _.Fob(c);try{e(f)}catch(g){_.da(g)}}}};this.Qd=new Set;this.window.addEventListener("resize",this.ka);this.jSa()&&this.window.addEventListener("orientationchange",this.ka)};_.C(Gob,_.Mn);Gob.Va=_.Mn
2024-04-17 22:34:38 UTC	549	IN	Data Raw: 73 2e 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 29 29 7d 65 6c 73 65 20 61 3d 74 68 69 73 2e 4a 63 28 29 7c 7c 28 5f 2e 6e 61 28 29 3f 5f 2e 6e 61 28 29 26 26 5f 2e 6c 61 28 29 26 26 21 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 63 6c 75 64 65 73 28 22 47 53 41 22 29 3a 74 68 69 73 2e 77 69 6e 64 6f 77 2e 76 69 73 75 61 6c 56 69 65 77 70 6f 72 74 29 3f 5f 2e 43 6c 28 74 68 69 73 2e 77 69 6e 64 6f 77 29 3a 6e 65 77 20 5f 2e 6d 6c 28 74 68 69 73 2e 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 2c 74 68 69 73 2e 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 29 3b 72 65 74 75 72 6e 20 61 2e 68 65 69 67 68 74 3c 61 2e 77 69 64 74 68 7d 3b 0a 5f 2e 6d 2e 64 65 73 74 72 6f 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 Data Ascii: s.window.innerWidth))}else a=this.Jc()\|\|(_.na()?_.na()&&_.la()&&!navigator.userAgent.includes("GSA"):this.window.visualViewport)?_.Cl(this.window):new _.ml(this.window.innerWidth,this.window.innerHeight);return a.height<a.width};_.m.destroy=function(){th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.16	49796	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:37 UTC	1531	OUT	POST /gen_204?atyp=csi&ei=eU4gZpbFNNqWkPIPhcWVmAg&s=promo&rt=hpbas.2800,hpbarr.680&zx=1713393277118&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; OGPC=19037049-1:; NID=513=YOyhOEA-rVSIBR9SawfTVYUzEw0R9DjMddwqqytPkoSkXKP5CwIoweOYvFcUasxUSzmgwHmsn6HfyVprCcJalmvaMFbEHrjiDz1fAXKUBzvjvy5qCLMd-eRyzxg6s27oPd4Mgq1sJvX69FbF6RVNO4FZZeL33WWje9SmqIU3eAOR4Zt8X5b7pQ33
2024-04-17 22:34:38 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-QdvM6Y2VovALf9ytU4YdHw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Wed, 17 Apr 2024 22:34:38 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.16	49800	64.233.177.102	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:38 UTC	539	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://ogs.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://ogs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:34:38 UTC	515	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://ogs.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Wed, 17 Apr 2024 22:34:38 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.16	49801	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:38 UTC	1714	OUT	GET /xjs/_/js/k=xjs.hd.en.Gos8NmADZ0A.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAkgAIAAAoAACAAAAAAgMAQAEAAQAAWAZAICCAIABgAQhCAhzIBgIAJAAAACAAIAQgCAIAAAABAAQAAAAAAAAAAgAECBAAAAAAAAAAAAAA6AQAIAADBACEAAAEAAADIAxAcgEEKAgAAAAAAAAAAAAAEIEEwFySgIAACAAAAAAAAAAAAACCVTiyMAQ/d=0/dg=2/br=1/rs=ACT90oHjHvDG23MtVpqokFyaqpDqKHsdQA/m=kMFpHd,sy8l,bm51tf?xjs=s3 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; OGPC=19037049-1:; NID=513=YOyhOEA-rVSIBR9SawfTVYUzEw0R9DjMddwqqytPkoSkXKP5CwIoweOYvFcUasxUSzmgwHmsn6HfyVprCcJalmvaMFbEHrjiDz1fAXKUBzvjvy5qCLMd-eRyzxg6s27oPd4Mgq1sJvX69FbF6RVNO4FZZeL33WWje9SmqIU3eAOR4Zt8X5b7pQ33
2024-04-17 22:34:38 UTC	816	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 1670 Date: Wed, 17 Apr 2024 22:34:38 GMT Expires: Thu, 17 Apr 2025 22:34:38 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Tue, 16 Apr 2024 23:00:34 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:34:38 UTC	439	IN	Data Raw: 74 68 69 73 2e 5f 68 64 3d 74 68 69 73 2e 5f 68 64 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 78 28 22 6b 4d 46 70 48 64 22 29 3b 0a 5f 2e 65 24 61 3d 6e 65 77 20 5f 2e 4d 64 28 5f 2e 41 4a 61 29 3b 0a 5f 2e 79 28 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 76 61 72 20 6e 24 61 3b 5f 2e 6f 24 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 74 68 69 73 2e 64 41 61 3d 61 3b 74 68 69 73 2e 53 6a 64 3d 62 3b 74 68 69 73 2e 43 66 62 3d 63 3b 74 68 69 73 2e 47 70 64 3d 64 3b 74 68 69 73 2e 6c 42 64 3d 65 3b 74 68 69 73 2e 73 37 61 3d 30 3b 74 68 69 73 2e 42 66 62 3d 6e 24 61 28 74 68 69 73 Data Ascii: this._hd=this._hd\|\|{};(function(_){var window=this;try{_.x("kMFpHd");_.e$a=new _.Md(_.AJa);_.y();}catch(e){_._DumpException(e)}try{var n$a;_.o$a=function(a,b,c,d,e){this.dAa=a;this.Sjd=b;this.Cfb=c;this.Gpd=d;this.lBd=e;this.s7a=0;this.Bfb=n$a(this
2024-04-17 22:34:38 UTC	585	IN	Data Raw: 69 73 2e 64 41 61 3f 21 31 3a 6e 75 6c 6c 21 3d 61 3f 21 21 74 68 69 73 2e 6c 42 64 5b 61 5d 3a 21 30 7d 3b 5f 2e 70 24 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 74 67 61 28 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 64 65 60 22 2b 61 2e 64 41 61 29 3b 2b 2b 61 2e 73 37 61 3b 61 2e 42 66 62 3d 6e 24 61 28 61 29 7d 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 78 28 22 62 6d 35 31 74 66 22 29 3b 0a 76 61 72 20 71 24 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 7b 7d 3b 5f 2e 4a 61 28 61 2e 44 6d 62 28 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 62 5b 65 5d 3d 21 30 7d 29 3b 76 61 72 20 63 3d 61 2e 78 6c 62 28 29 2c 64 3d 61 2e 53 6c 62 28 29 3b 72 65 Data Ascii: is.dAa?!1:null!=a?!!this.lBd[a]:!0};_.p$a=function(a){if(!a.tga())throw Error("de`"+a.dAa);++a.s7a;a.Bfb=n$a(a)};}catch(e){_._DumpException(e)}try{_.x("bm51tf");var q$a=function(a){var b={};_.Ja(a.Dmb(),function(e){b[e]=!0});var c=a.xlb(),d=a.Slb();re
2024-04-17 22:34:38 UTC	646	IN	Data Raw: 6f 74 79 70 65 2e 6f 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 31 21 3d 74 68 69 73 2e 43 61 2e 67 65 74 54 79 70 65 28 61 2e 59 6b 28 29 29 29 72 65 74 75 72 6e 20 5f 2e 4b 39 61 28 61 29 3b 76 61 72 20 63 3d 74 68 69 73 2e 74 61 2e 6b 61 3b 28 63 3d 63 3f 71 24 61 28 63 29 3a 6e 75 6c 6c 29 26 26 63 2e 74 67 61 28 29 3f 28 62 3d 74 24 61 28 74 68 69 73 2c 61 2c 62 2c 63 29 2c 61 3d 6e 65 77 20 5f 2e 47 39 61 28 61 2c 62 2c 32 29 29 3a 61 3d 5f 2e 4b 39 61 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 76 61 72 20 74 24 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 63 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 72 24 61 29 Data Ascii: otype.oa=function(a,b){if(1!=this.Ca.getType(a.Yk()))return _.K9a(a);var c=this.ta.ka;(c=c?q$a(c):null)&&c.tga()?(b=t$a(this,a,b,c),a=new _.G9a(a,b,2)):a=_.K9a(a);return a};var t$a=function(a,b,c,d){return c.then(function(e){return e},function(e){if(r$a)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.16	49802	64.233.177.102	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:38 UTC	1229	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 447 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ogs.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ogs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; OGPC=19037049-1:; NID=513=YOyhOEA-rVSIBR9SawfTVYUzEw0R9DjMddwqqytPkoSkXKP5CwIoweOYvFcUasxUSzmgwHmsn6HfyVprCcJalmvaMFbEHrjiDz1fAXKUBzvjvy5qCLMd-eRyzxg6s27oPd4Mgq1sJvX69FbF6RVNO4FZZeL33WWje9SmqIU3eAOR4Zt8X5b7pQ33
2024-04-17 22:34:38 UTC	447	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 62 6f 71 5f 6f 6e 65 67 6f 6f 67 6c 65 68 74 74 70 73 65 72 76 65 72 5f 32 30 32 34 30 34 31 34 2e 30 33 5f 70 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 37 32 39 2c 5b 5b 22 31 37 31 33 33 39 33 32 37 37 37 30 32 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5b 37 30 38 38 31 5d 2c 35 33 38 2c 5b 5d 5d 5d 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 2d 37 32 30 30 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"boq_onegooglehttpserver_20240414.03_p0",null,null,[4,0,0,0,0]]],729,[["1713393277702",null,null,null,null,null,null,"[[[70881],538,[]]]",null,null,null,null,null,null,-7200,n
2024-04-17 22:34:38 UTC	948	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://ogs.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=513=SPfeMcrZWCeKTY7Ps4VGmUPgmzJtr2sHk1u1kY5o7iw7DktQiP5TdP5a3X6wyEZJjuVhAFCBYmbSHOVqOhWy87wcIp9Wt_TxiUbfmTshiCclORY6pOFJLZ2Z9hm6DoiWYpjxwzKABlo9AEcetQUjScGijdCtJ98zl9rz7vPINNGPXa1-h4_EdtrPYKDMVHJ7kKq45Rs; expires=Thu, 17-Oct-2024 22:34:38 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Wed, 17 Apr 2024 22:34:38 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 17 Apr 2024 22:34:38 GMT Connection: close Transfer-Encoding: chunked
2024-04-17 22:34:38 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-17 22:34:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.16	49803	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:38 UTC	1530	OUT	GET /gen_204?atyp=i&ct=psnt&cad=&nt=navigate&ei=eU4gZpbFNNqWkPIPhcWVmAg&zx=1713393278214&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; OGPC=19037049-1:; NID=513=YOyhOEA-rVSIBR9SawfTVYUzEw0R9DjMddwqqytPkoSkXKP5CwIoweOYvFcUasxUSzmgwHmsn6HfyVprCcJalmvaMFbEHrjiDz1fAXKUBzvjvy5qCLMd-eRyzxg6s27oPd4Mgq1sJvX69FbF6RVNO4FZZeL33WWje9SmqIU3eAOR4Zt8X5b7pQ33
2024-04-17 22:34:39 UTC	1351	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-JMHRSKJeHKTFdng7eSTEIQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Wed, 17 Apr 2024 22:34:38 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-04-17-22; expires=Fri, 17-May-2024 22:34:38 GMT; path=/; domain=.google.com; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.16	49805	64.233.176.157	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:38 UTC	1160	OUT	GET /adsid/google/ui HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; OGPC=19037049-1:; NID=513=YOyhOEA-rVSIBR9SawfTVYUzEw0R9DjMddwqqytPkoSkXKP5CwIoweOYvFcUasxUSzmgwHmsn6HfyVprCcJalmvaMFbEHrjiDz1fAXKUBzvjvy5qCLMd-eRyzxg6s27oPd4Mgq1sJvX69FbF6RVNO4FZZeL33WWje9SmqIU3eAOR4Zt8X5b7pQ33
2024-04-17 22:34:39 UTC	476	IN	HTTP/1.1 204 No Content P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info." Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cache-Control: private, max-age=15 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 17 Apr 2024 22:34:39 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.16	49806	142.250.105.100	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:39 UTC	897	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; OGPC=19037049-1:; NID=513=SPfeMcrZWCeKTY7Ps4VGmUPgmzJtr2sHk1u1kY5o7iw7DktQiP5TdP5a3X6wyEZJjuVhAFCBYmbSHOVqOhWy87wcIp9Wt_TxiUbfmTshiCclORY6pOFJLZ2Z9hm6DoiWYpjxwzKABlo9AEcetQUjScGijdCtJ98zl9rz7vPINNGPXa1-h4_EdtrPYKDMVHJ7kKq45Rs
2024-04-17 22:34:39 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 17 Apr 2024 22:34:39 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-17 22:34:39 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-17 22:34:39 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.16	49809	74.125.138.147	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:34:42 UTC	1553	OUT	POST /gen_204?atyp=csi&ei=eU4gZpbFNNqWkPIPhcWVmAg&s=webhp&nt=navigate&t=fi&st=10938&fid=0&zx=1713393282184&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-17-22; AEC=AQTF6HxdKwiKVVD6eD6k8oKDRmOuglsKEEJRXB85qTAexIp43fxHTjtpmQ; GOOGLE_ABUSE_EXEMPTION=ID=f6cbabc468d23ca7:TM=1713393272:C=r:IP=81.181.57.52-:S=iVHo9U4tubQjOCbzM2Vqao0; OGPC=19037049-1:; NID=513=SPfeMcrZWCeKTY7Ps4VGmUPgmzJtr2sHk1u1kY5o7iw7DktQiP5TdP5a3X6wyEZJjuVhAFCBYmbSHOVqOhWy87wcIp9Wt_TxiUbfmTshiCclORY6pOFJLZ2Z9hm6DoiWYpjxwzKABlo9AEcetQUjScGijdCtJ98zl9rz7vPINNGPXa1-h4_EdtrPYKDMVHJ7kKq45Rs
2024-04-17 22:34:43 UTC	1227	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-QHL7LsM3mH1sv4NeyrzkXw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Wed, 17 Apr 2024 22:34:42 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	0
Start time:	00:32:47
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://makeupenumerate.com/
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	00:32:48
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1964,i,11828674635919050381,7814478135417287115,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://makeupenumerate.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Windows Analysis Report
http://makeupenumerate.com