Edit tour

Windows Analysis Report
http://af.uppromote.com

Overview

General Information

Sample URL:	http://af.uppromote.com
Analysis ID:	1428360
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Found iframes

HTML body contains low number of good links

HTML title does not match URL

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 5292 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://af.uppromote.com/ MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1472 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1956,i,5459667013927682966,7205913079346083900,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://af.uppromote.com/	HTTP Parser: Iframe src: javascript:false
Source: https://af.uppromote.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-VWZPYDCSKQ&gacid=130039912.1713467925&gtm=45je44f0v894741970za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&z=364272637
Source: https://af.uppromote.com/	HTTP Parser: Iframe src: javascript:false
Source: https://af.uppromote.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-VWZPYDCSKQ&gacid=130039912.1713467925&gtm=45je44f0v894741970za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&z=364272637
Source: https://af.uppromote.com/	HTTP Parser: Iframe src: javascript:false
Source: https://af.uppromote.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-VWZPYDCSKQ&gacid=130039912.1713467925&gtm=45je44f0v894741970za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&z=364272637
Source: https://af.uppromote.com/	HTTP Parser: Iframe src: javascript:false
Source: https://af.uppromote.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-VWZPYDCSKQ&gacid=130039912.1713467925&gtm=45je44f0v894741970za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&z=364272637

Source: https://af.uppromote.com/

HTTP Parser: Number of links: 1

Source: https://af.uppromote.com/

HTTP Parser: Title: AFFILIATE | Login does not match URL

Source: https://af.uppromote.com/	HTTP Parser: No favicon
Source: https://af.uppromote.com/	HTTP Parser: No favicon
Source: https://af.uppromote.com/	HTTP Parser: No favicon
Source: https://af.uppromote.com/	HTTP Parser: No favicon
Source: https://af.uppromote.com/	HTTP Parser: No favicon
Source: about:blank	HTTP Parser: No favicon

Source: https://af.uppromote.com/	HTTP Parser: No <meta name="author".. found
Source: https://af.uppromote.com/	HTTP Parser: No <meta name="author".. found
Source: https://af.uppromote.com/	HTTP Parser: No <meta name="author".. found
Source: https://af.uppromote.com/	HTTP Parser: No <meta name="author".. found

Source: https://af.uppromote.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://af.uppromote.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://af.uppromote.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://af.uppromote.com/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.220.189.216:443 -> 192.168.2.16:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.189.216:443 -> 192.168.2.16:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.16:49771 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: af.uppromote.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/bootstrap.min.css HTTP/1.1Host: af.uppromote.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://af.uppromote.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InppOEtYM0hPXC8yWFJzMnRvODZrRGhRPT0iLCJ2YWx1ZSI6IkRsckxwSDRBTGtGU1pNUjVWdldIZjZvbTBiSXFJWVE2TUgzK0pKcXRiTitab0JRZGNHMWZVK2o4R2JDNHo2SkEiLCJtYWMiOiI0NWY1NGFkMWI1NzBhMmZhMjQ1N2JlZjIzMTA1M2Y0YmFiYjc1Njk2Y2FlYmJhOWZiMDRkYTNkOTFmNzQwYzhjIn0%3D; laravel_session=eyJpdiI6ImhseUNxSzk2UWZQRFBLYzhkZTJwUFE9PSIsInZhbHVlIjoiam9OK2RRa2xmSUlqbWZTeEZJc2hLUVZRS2c2S3AwT1FIaU5aZHQ1UU1sYjJIZlMzQWdVWDl3OVRwZU52bWR0QmhvRVgrOW9qeVA0QmtKTVBpdjVwMWdaa3FuWkxCeU1CSEVZaXRYRzM4MTIwMlhxWlwvbVZURk5kYVJxQXZnVmk4IiwibWFjIjoiNzMxYjMyNDVlYjE2NjEwYTFiN2ZiM2ZlZWQ4N2VlNWFkYjE2MzE2ODI2MWEzNDg3YzA3MTNlYWQ1YmRlNWZiOSJ9
Source: global traffic	HTTP traffic detected: GET /css/animate.css HTTP/1.1Host: af.uppromote.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://af.uppromote.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InppOEtYM0hPXC8yWFJzMnRvODZrRGhRPT0iLCJ2YWx1ZSI6IkRsckxwSDRBTGtGU1pNUjVWdldIZjZvbTBiSXFJWVE2TUgzK0pKcXRiTitab0JRZGNHMWZVK2o4R2JDNHo2SkEiLCJtYWMiOiI0NWY1NGFkMWI1NzBhMmZhMjQ1N2JlZjIzMTA1M2Y0YmFiYjc1Njk2Y2FlYmJhOWZiMDRkYTNkOTFmNzQwYzhjIn0%3D; laravel_session=eyJpdiI6ImhseUNxSzk2UWZQRFBLYzhkZTJwUFE9PSIsInZhbHVlIjoiam9OK2RRa2xmSUlqbWZTeEZJc2hLUVZRS2c2S3AwT1FIaU5aZHQ1UU1sYjJIZlMzQWdVWDl3OVRwZU52bWR0QmhvRVgrOW9qeVA0QmtKTVBpdjVwMWdaa3FuWkxCeU1CSEVZaXRYRzM4MTIwMlhxWlwvbVZURk5kYVJxQXZnVmk4IiwibWFjIjoiNzMxYjMyNDVlYjE2NjEwYTFiN2ZiM2ZlZWQ4N2VlNWFkYjE2MzE2ODI2MWEzNDg3YzA3MTNlYWQ1YmRlNWZiOSJ9
Source: global traffic	HTTP traffic detected: GET /css/style.css HTTP/1.1Host: af.uppromote.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://af.uppromote.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InppOEtYM0hPXC8yWFJzMnRvODZrRGhRPT0iLCJ2YWx1ZSI6IkRsckxwSDRBTGtGU1pNUjVWdldIZjZvbTBiSXFJWVE2TUgzK0pKcXRiTitab0JRZGNHMWZVK2o4R2JDNHo2SkEiLCJtYWMiOiI0NWY1NGFkMWI1NzBhMmZhMjQ1N2JlZjIzMTA1M2Y0YmFiYjc1Njk2Y2FlYmJhOWZiMDRkYTNkOTFmNzQwYzhjIn0%3D; laravel_session=eyJpdiI6ImhseUNxSzk2UWZQRFBLYzhkZTJwUFE9PSIsInZhbHVlIjoiam9OK2RRa2xmSUlqbWZTeEZJc2hLUVZRS2c2S3AwT1FIaU5aZHQ1UU1sYjJIZlMzQWdVWDl3OVRwZU52bWR0QmhvRVgrOW9qeVA0QmtKTVBpdjVwMWdaa3FuWkxCeU1CSEVZaXRYRzM4MTIwMlhxWlwvbVZURk5kYVJxQXZnVmk4IiwibWFjIjoiNzMxYjMyNDVlYjE2NjEwYTFiN2ZiM2ZlZWQ4N2VlNWFkYjE2MzE2ODI2MWEzNDg3YzA3MTNlYWQ1YmRlNWZiOSJ9
Source: global traffic	HTTP traffic detected: GET /npm/slick-carousel@1.8.1/slick/slick.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://af.uppromote.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/slick-carousel@1.8.1/slick/slick-theme.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://af.uppromote.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /affbootstrap/css/aff-style.css HTTP/1.1Host: d1639lhkj5l89m.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://af.uppromote.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/merchant/auth/auth.min.css HTTP/1.1Host: d1639lhkj5l89m.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://af.uppromote.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/jquery-3.1.1.min.js HTTP/1.1Host: d1639lhkj5l89m.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://af.uppromote.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/merchant/auth/login_left_side.png HTTP/1.1Host: d1639lhkj5l89m.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://af.uppromote.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/merchant/auth/right_side_bg.png HTTP/1.1Host: d1639lhkj5l89m.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://af.uppromote.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/merchant/auth/logo_with_text.png HTTP/1.1Host: d1639lhkj5l89m.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://af.uppromote.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bootstrap.min.js HTTP/1.1Host: d1639lhkj5l89m.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://af.uppromote.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/plugins/slick/1.8.1/slick.min.js HTTP/1.1Host: d1639lhkj5l89m.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://af.uppromote.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/merchant/auth/login_register.min.js HTTP/1.1Host: d1639lhkj5l89m.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://af.uppromote.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/merchant/auth/logo_with_text.png HTTP/1.1Host: d1639lhkj5l89m.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/merchant/auth/right_side_bg.png HTTP/1.1Host: d1639lhkj5l89m.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/merchant/auth/login_left_side.png HTTP/1.1Host: d1639lhkj5l89m.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/slick-carousel@1.8.1/slick/ajax-loader.gif HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick-theme.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/slick-carousel@1.8.1/slick/fonts/slick.woff HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://af.uppromote.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick-theme.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embeddable_framework/main.js HTTP/1.1Host: assets.zendesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://af.uppromote.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/slick-carousel@1.8.1/slick/ajax-loader.gif HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ekr/asset_composer.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://af.uppromote.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-VWZPYDCSKQ&gacid=130039912.1713467925&gtm=45je44f0v894741970za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&z=364272637 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://af.uppromote.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /compose/web_widget/secomapp.zendesk.com HTTP/1.1Host: ekr.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://af.uppromote.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://af.uppromote.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-53113273-27&cid=130039912.1713467925&jid=1329057363&gjid=2076597767&_gid=1443929882.1713467925&_u=YEBAAUAAAAAAACAAI~&z=1669976494 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-53113273-27&cid=130039912.1713467925&jid=1329057363&_u=YEBAAUAAAAAAACAAI~&z=152713507 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://af.uppromote.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web_widget/classic/latest/web-widget-main-7bc1c0f.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /compose/web_widget/secomapp.zendesk.com HTTP/1.1Host: ekr.zdassets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: af.uppromote.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://af.uppromote.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InppOEtYM0hPXC8yWFJzMnRvODZrRGhRPT0iLCJ2YWx1ZSI6IkRsckxwSDRBTGtGU1pNUjVWdldIZjZvbTBiSXFJWVE2TUgzK0pKcXRiTitab0JRZGNHMWZVK2o4R2JDNHo2SkEiLCJtYWMiOiI0NWY1NGFkMWI1NzBhMmZhMjQ1N2JlZjIzMTA1M2Y0YmFiYjc1Njk2Y2FlYmJhOWZiMDRkYTNkOTFmNzQwYzhjIn0%3D; laravel_session=eyJpdiI6ImhseUNxSzk2UWZQRFBLYzhkZTJwUFE9PSIsInZhbHVlIjoiam9OK2RRa2xmSUlqbWZTeEZJc2hLUVZRS2c2S3AwT1FIaU5aZHQ1UU1sYjJIZlMzQWdVWDl3OVRwZU52bWR0QmhvRVgrOW9qeVA0QmtKTVBpdjVwMWdaa3FuWkxCeU1CSEVZaXRYRzM4MTIwMlhxWlwvbVZURk5kYVJxQXZnVmk4IiwibWFjIjoiNzMxYjMyNDVlYjE2NjEwYTFiN2ZiM2ZlZWQ4N2VlNWFkYjE2MzE2ODI2MWEzNDg3YzA3MTNlYWQ1YmRlNWZiOSJ9; _gid=GA1.2.1443929882.1713467925; _gat_gtag_UA_53113273_27=1; _ga=GA1.1.130039912.1713467925; _ga_VWZPYDCSKQ=GS1.1.1713467924.1.0.1713467924.60.0.0
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-53113273-27&cid=130039912.1713467925&jid=1329057363&_u=YEBAAUAAAAAAACAAI~&z=152713507 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: af.uppromote.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InppOEtYM0hPXC8yWFJzMnRvODZrRGhRPT0iLCJ2YWx1ZSI6IkRsckxwSDRBTGtGU1pNUjVWdldIZjZvbTBiSXFJWVE2TUgzK0pKcXRiTitab0JRZGNHMWZVK2o4R2JDNHo2SkEiLCJtYWMiOiI0NWY1NGFkMWI1NzBhMmZhMjQ1N2JlZjIzMTA1M2Y0YmFiYjc1Njk2Y2FlYmJhOWZiMDRkYTNkOTFmNzQwYzhjIn0%3D; laravel_session=eyJpdiI6ImhseUNxSzk2UWZQRFBLYzhkZTJwUFE9PSIsInZhbHVlIjoiam9OK2RRa2xmSUlqbWZTeEZJc2hLUVZRS2c2S3AwT1FIaU5aZHQ1UU1sYjJIZlMzQWdVWDl3OVRwZU52bWR0QmhvRVgrOW9qeVA0QmtKTVBpdjVwMWdaa3FuWkxCeU1CSEVZaXRYRzM4MTIwMlhxWlwvbVZURk5kYVJxQXZnVmk4IiwibWFjIjoiNzMxYjMyNDVlYjE2NjEwYTFiN2ZiM2ZlZWQ4N2VlNWFkYjE2MzE2ODI2MWEzNDg3YzA3MTNlYWQ1YmRlNWZiOSJ9; _gid=GA1.2.1443929882.1713467925; _gat_gtag_UA_53113273_27=1; _ga=GA1.1.130039912.1713467925; _ga_VWZPYDCSKQ=GS1.1.1713467924.1.0.1713467924.60.0.0
Source: global traffic	HTTP traffic detected: GET /web_widget/classic/latest/web-widget-locales/classic/en-us-json-7bc1c0f.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embeddable/config HTTP/1.1Host: secomapp.zendesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://af.uppromote.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embeddable/config HTTP/1.1Host: secomapp.zendesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=4azP9xWtRUeNfXy&MD=XhVKEk1h HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sorry/index?continue=https://www.google.com/complete/search%3Fclient%3Dchrome-omni%26gs_ri%3Dchrome-ext-ansg%26xssi%3Dt%26q%3D%26oit%3D0%26gs_rn%3D42%26sugkey%3DAIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw&q=EgRRtTk0GKPkhbEGIjDXNNgTxoHfWVKTTBihP5c2kHUHsukbzZky06WzqUC1whYr2AOgh-8SrTqeGy3xSDYyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=4azP9xWtRUeNfXy&MD=XhVKEk1h HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: af.uppromote.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_154.1.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Hj:function(){e=zb()},od:function(){d()}}};var gc=ia(["data-gtm-yt-inspected-"]),qC=["www.youtube.com","www.youtube-nocookie.com"],rC,sC=!1; equals www.youtube.com (Youtube)
Source: chromecache_154.1.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|h.length))return;var n={Sg:d,Qg:e,Rg:f,Ch:g,Dh:h,we:m,zb:b},p=D.YT,q=function(){yC(n)};if(p)return p.ready&&p.ready(q),b;var r=D.onYouTubeIframeAPIReady;D.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=G.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(BC(w,"iframe_api")\|\|BC(w,"player_api"))return b}for(var x=G.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!sC&&zC(x[B],n.we))return Lc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: af.uppromote.com

Source: unknown

HTTP traffic detected: POST /g/collect?v=2&tid=G-VWZPYDCSKQ&gtm=45je44f0v894741970za200&_p=1713467923933&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=130039912.1713467925&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=AAAI&_s=1&sid=1713467924&sct=1&seg=0&dl=https%3A%2F%2Faf.uppromote.com%2F&dt=AFFILIATE%20%7C%20Login&en=page_view&_fv=1&_ss=1&tfd=3693 HTTP/1.1Host: analytics.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://af.uppromote.comX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://af.uppromote.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_147.1.dr	String found in binary or memory: http://af.secomapp.com/
Source: chromecache_155.1.dr	String found in binary or memory: http://daneden.me/animate
Source: chromecache_161.1.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_154.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_154.1.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_143.1.dr	String found in binary or memory: https://af.uppromote.com/
Source: chromecache_143.1.dr	String found in binary or memory: https://af.uppromote.com/css/animate.css
Source: chromecache_143.1.dr	String found in binary or memory: https://af.uppromote.com/css/bootstrap.min.css
Source: chromecache_143.1.dr	String found in binary or memory: https://af.uppromote.com/css/style.css
Source: chromecache_143.1.dr	String found in binary or memory: https://af.uppromote.com/login
Source: chromecache_144.1.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_143.1.dr	String found in binary or memory: https://assets.zendesk.com/embeddable_framework/main.js
Source: chromecache_154.1.dr, chromecache_139.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_143.1.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/slick-carousel
Source: chromecache_143.1.dr	String found in binary or memory: https://d1639lhkj5l89m.cloudfront.net/affbootstrap/css/aff-style.css
Source: chromecache_143.1.dr	String found in binary or memory: https://d1639lhkj5l89m.cloudfront.net/css/merchant/auth/auth.min.css
Source: chromecache_133.1.dr	String found in binary or memory: https://d1639lhkj5l89m.cloudfront.net/css/patterns/3.png
Source: chromecache_133.1.dr	String found in binary or memory: https://d1639lhkj5l89m.cloudfront.net/css/patterns/4.png
Source: chromecache_133.1.dr	String found in binary or memory: https://d1639lhkj5l89m.cloudfront.net/css/patterns/header-profile-skin-1.png
Source: chromecache_133.1.dr	String found in binary or memory: https://d1639lhkj5l89m.cloudfront.net/css/patterns/header-profile-skin-3.png
Source: chromecache_133.1.dr	String found in binary or memory: https://d1639lhkj5l89m.cloudfront.net/css/patterns/header-profile.png
Source: chromecache_143.1.dr	String found in binary or memory: https://d1639lhkj5l89m.cloudfront.net/img/merchant/auth/login_left_side.png
Source: chromecache_143.1.dr	String found in binary or memory: https://d1639lhkj5l89m.cloudfront.net/img/merchant/auth/logo_with_text.png
Source: chromecache_143.1.dr	String found in binary or memory: https://d1639lhkj5l89m.cloudfront.net/img/merchant/auth/right_side_bg.png
Source: chromecache_143.1.dr	String found in binary or memory: https://d1639lhkj5l89m.cloudfront.net/js/bootstrap.min.js
Source: chromecache_143.1.dr	String found in binary or memory: https://d1639lhkj5l89m.cloudfront.net/js/jquery-3.1.1.min.js
Source: chromecache_143.1.dr	String found in binary or memory: https://d1639lhkj5l89m.cloudfront.net/js/merchant/auth/login_register.min.js
Source: chromecache_143.1.dr	String found in binary or memory: https://d1639lhkj5l89m.cloudfront.net/js/plugins/slick/1.8.1/slick.min.js
Source: chromecache_135.1.dr	String found in binary or memory: https://developer.zendesk.com/documentation/classic-web-widget-sdks/web-widget/getting-started/legal
Source: chromecache_145.1.dr, chromecache_148.1.dr	String found in binary or memory: https://ekr.zendesk.com/compose_product/web_widget/7bc1c0f290501106fa41dc515076261e2325fb83?features
Source: chromecache_166.1.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_166.1.dr	String found in binary or memory: https://fontawesome.com/license
Source: chromecache_143.1.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Poppins:ital
Source: chromecache_133.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: chromecache_133.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto:400
Source: chromecache_156.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_156.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_156.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_156.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_156.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_156.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_156.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_156.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_156.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_156.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_132.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: chromecache_132.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: chromecache_132.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_132.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_132.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiGyp8kv8JHgFVrJJLucHtA.woff2)
Source: chromecache_132.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiGyp8kv8JHgFVrJJLufntAKPY.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_155.1.dr	String found in binary or memory: https://github.com/nickpettit/glide
Source: chromecache_133.1.dr	String found in binary or memory: https://github.com/onokumus/metisMenu
Source: chromecache_154.1.dr, chromecache_139.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_154.1.dr, chromecache_139.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_143.1.dr	String found in binary or memory: https://pro.fontawesome.com/releases/v5.15.1/css/all.css
Source: chromecache_145.1.dr, chromecache_148.1.dr	String found in binary or memory: https://static.zdassets.com/web_widget/classic/latest/web-widget-main-7bc1c0f.js
Source: chromecache_154.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_154.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_144.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_144.1.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_154.1.dr, chromecache_139.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_139.1.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_144.1.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_144.1.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_144.1.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_154.1.dr, chromecache_139.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_144.1.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_154.1.dr, chromecache_139.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_154.1.dr, chromecache_139.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_144.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_143.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-53113273-27
Source: chromecache_154.1.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_154.1.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 23.220.189.216:443 -> 192.168.2.16:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.189.216:443 -> 192.168.2.16:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.16:49771 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@15/85@42/17

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://af.uppromote.com/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1956,i,5459667013927682966,7205913079346083900,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1956,i,5459667013927682966,7205913079346083900,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
http://daneden.me/animate	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://www.google.%/ads/ga-audiences	0%	URL Reputation	safe
https://www.merchant-center-analytics.goog	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.193.229	true	false	unknown
static.zdassets.com	104.18.70.113	true	false	high
analytics-alv.google.com	216.239.36.181	true	false	high
d1639lhkj5l89m.cloudfront.net	108.139.16.113	true	false	high
cf.zdassets.com	104.18.70.113	true	false	high
secomapp.zendesk.com	104.16.51.111	true	false	high
ekr.zdassets.com	104.18.72.113	true	false	high
td.doubleclick.net	142.250.105.157	true	false	high
www.google.com	64.233.176.103	true	false	high
af.uppromote.com	206.189.254.86	true	false	unknown
stats.g.doubleclick.net	172.253.124.154	true	false	high
assets.zendesk.com	unknown	unknown	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
analytics.google.com	unknown	unknown	false	high
pro.fontawesome.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://af.uppromote.com/css/bootstrap.min.css	false	unknown
https://cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/fonts/slick.woff	false	high
https://d1639lhkj5l89m.cloudfront.net/js/merchant/auth/login_register.min.js	false	high
https://ekr.zdassets.com/compose/web_widget/secomapp.zendesk.com	false	high
https://af.uppromote.com/css/animate.css	false	unknown
https://d1639lhkj5l89m.cloudfront.net/css/merchant/auth/auth.min.css	false	high
https://www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-53113273-27&cid=130039912.1713467925&jid=1329057363&_u=YEBAAUAAAAAAACAAI~&z=152713507	false	high
https://secomapp.zendesk.com/embeddable/config	false	high
https://d1639lhkj5l89m.cloudfront.net/img/merchant/auth/right_side_bg.png	false	high
https://static.zdassets.com/web_widget/classic/latest/web-widget-main-7bc1c0f.js	false	high
https://www.google.com/sorry/index?continue=https://www.google.com/complete/search%3Fclient%3Dchrome-omni%26gs_ri%3Dchrome-ext-ansg%26xssi%3Dt%26q%3D%26oit%3D0%26gs_rn%3D42%26sugkey%3DAIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw&q=EgRRtTk0GKPkhbEGIjDXNNgTxoHfWVKTTBihP5c2kHUHsukbzZky06WzqUC1whYr2AOgh-8SrTqeGy3xSDYyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	false	high
https://d1639lhkj5l89m.cloudfront.net/img/merchant/auth/logo_with_text.png	false	high
about:blank	false	low
https://analytics.google.com/g/collect?v=2&tid=G-VWZPYDCSKQ&gtm=45je44f0v894741970za200&_p=1713467923933&gcd=13l3l3l3l1&npa=0&dma=0&cid=130039912.1713467925&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=AEAI&_s=2&sid=1713467924&sct=1&seg=0&dl=https%3A%2F%2Faf.uppromote.com%2F&dt=AFFILIATE%20%7C%20Login&en=scroll&epn.percent_scrolled=90&_et=12&tfd=8717	false	high
https://af.uppromote.com/favicon.ico	false	unknown
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-53113273-27&cid=130039912.1713467925&jid=1329057363&gjid=2076597767&_gid=1443929882.1713467925&_u=YEBAAUAAAAAAACAAI~&z=1669976494	false	high
https://d1639lhkj5l89m.cloudfront.net/js/bootstrap.min.js	false	high
https://af.uppromote.com/	false	unknown
https://static.zdassets.com/ekr/asset_composer.js	false	high
https://d1639lhkj5l89m.cloudfront.net/affbootstrap/css/aff-style.css	false	high
https://cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.css	false	high
https://static.zdassets.com/web_widget/classic/latest/web-widget-locales/classic/en-us-json-7bc1c0f.js	false	high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	high
https://d1639lhkj5l89m.cloudfront.net/js/jquery-3.1.1.min.js	false	high
https://stats.g.doubleclick.net/g/collect?v=2&tid=G-VWZPYDCSKQ&cid=130039912.1713467925&gtm=45je44f0v894741970za200&aip=1&dma=0&gcd=13l3l3l3l1&npa=0	false	high
https://af.uppromote.com/css/style.css	false	unknown
https://d1639lhkj5l89m.cloudfront.net/js/plugins/slick/1.8.1/slick.min.js	false	high
https://d1639lhkj5l89m.cloudfront.net/img/merchant/auth/login_left_side.png	false	high
http://af.uppromote.com/	false	unknown
https://td.doubleclick.net/td/ga/rul?tid=G-VWZPYDCSKQ&gacid=130039912.1713467925&gtm=45je44f0v894741970za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&z=364272637	false	high
https://cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/ajax-loader.gif	false	high
https://analytics.google.com/g/collect?v=2&tid=G-VWZPYDCSKQ&gtm=45je44f0v894741970za200&_p=1713467923933&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=130039912.1713467925&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=AAAI&_s=1&sid=1713467924&sct=1&seg=0&dl=https%3A%2F%2Faf.uppromote.com%2F&dt=AFFILIATE%20%7C%20Login&en=page_view&_fv=1&_ss=1&tfd=3693	false	high
https://assets.zendesk.com/embeddable_framework/main.js	false	high
https://cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick-theme.css	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://d1639lhkj5l89m.cloudfront.net/css/patterns/3.png	chromecache_133.1.dr	false		high
https://stats.g.doubleclick.net/g/collect	chromecache_154.1.dr	false		high
https://d1639lhkj5l89m.cloudfront.net/css/patterns/4.png	chromecache_133.1.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_144.1.dr	false		high
https://fontawesome.com	chromecache_166.1.dr	false		high
https://www.google.com	chromecache_154.1.dr, chromecache_139.1.dr	false		high
https://www.youtube.com/iframe_api	chromecache_154.1.dr	false		high
http://daneden.me/animate	chromecache_155.1.dr	false	URL Reputation: safe	unknown
https://fontawesome.com/license	chromecache_166.1.dr	false		high
https://cdn.jsdelivr.net/npm/slick-carousel	chromecache_143.1.dr	false		high
http://getbootstrap.com)	chromecache_161.1.dr	false		low
https://stats.g.doubleclick.net/j/collect	chromecache_144.1.dr	false		high
https://pro.fontawesome.com/releases/v5.15.1/css/all.css	chromecache_143.1.dr	false		high
https://github.com/nickpettit/glide	chromecache_155.1.dr	false		high
https://d1639lhkj5l89m.cloudfront.net/css/patterns/header-profile-skin-1.png	chromecache_133.1.dr	false		high
http://af.secomapp.com/	chromecache_147.1.dr	false		high
https://tagassistant.google.com/	chromecache_144.1.dr	false		high
https://github.com/onokumus/metisMenu	chromecache_133.1.dr	false		high
https://ekr.zendesk.com/compose_product/web_widget/7bc1c0f290501106fa41dc515076261e2325fb83?features	chromecache_145.1.dr, chromecache_148.1.dr	false		high
https://adservice.google.com/pagead/regclk	chromecache_154.1.dr	false		high
https://af.uppromote.com/login	chromecache_143.1.dr	false		unknown
https://d1639lhkj5l89m.cloudfront.net/css/patterns/header-profile-skin-3.png	chromecache_133.1.dr	false		high
https://cct.google/taggy/agent.js	chromecache_154.1.dr, chromecache_139.1.dr	false	URL Reputation: safe	unknown
https://developer.zendesk.com/documentation/classic-web-widget-sdks/web-widget/getting-started/legal	chromecache_135.1.dr	false		high
https://www.google.com/ads/ga-audiences	chromecache_144.1.dr	false		high
https://www.google.%/ads/ga-audiences	chromecache_144.1.dr	false	URL Reputation: safe	low
https://td.doubleclick.net	chromecache_154.1.dr, chromecache_139.1.dr	false		high
https://www.merchant-center-analytics.goog	chromecache_154.1.dr	false	URL Reputation: safe	unknown
https://d1639lhkj5l89m.cloudfront.net/css/patterns/header-profile.png	chromecache_133.1.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_154.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
108.139.16.113	d1639lhkj5l89m.cloudfront.net	United States	16509	AMAZON-02US	false
151.101.193.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
142.250.105.157	td.doubleclick.net	United States	15169	GOOGLEUS	false
104.16.51.111	secomapp.zendesk.com	United States	13335	CLOUDFLARENETUS	false
104.18.72.113	ekr.zdassets.com	United States	13335	CLOUDFLARENETUS	false
74.125.138.105	unknown	United States	15169	GOOGLEUS	false
172.253.124.154	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
216.239.36.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
104.16.53.111	unknown	United States	13335	CLOUDFLARENETUS	false
108.138.82.25	unknown	United States	16509	AMAZON-02US	false
142.251.15.156	unknown	United States	15169	GOOGLEUS	false
108.177.122.106	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.18.70.113	static.zdassets.com	United States	13335	CLOUDFLARENETUS	false
64.233.176.103	www.google.com	United States	15169	GOOGLEUS	false
206.189.254.86	af.uppromote.com	United States	14061	DIGITALOCEAN-ASNUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1428360
Start date and time:	2024-04-18 21:18:12 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 4s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://af.uppromote.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@15/85@42/17
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 74.125.136.94, 64.233.176.113, 64.233.176.138, 64.233.176.139, 64.233.176.100, 64.233.176.102, 64.233.176.101, 173.194.219.84, 34.104.35.123, 108.177.122.95, 172.64.147.188, 104.18.40.68, 173.194.219.97, 64.233.185.94, 74.125.138.95, 172.253.124.95, 142.250.9.95, 142.250.105.95, 172.217.215.95, 74.125.136.95, 64.233.185.95, 64.233.177.95, 173.194.219.95, 142.251.15.95, 64.233.185.113, 64.233.185.102, 64.233.185.101, 64.233.185.138, 64.233.185.139, 64.233.185.100, 142.250.105.100, 142.250.105.138, 142.250.105.139, 142.250.105.102, 142.250.105.113, 142.250.105.101, 142.250.105.94
Excluded domains from analysis (whitelisted): pro.fontawesome.com.cdn.cloudflare.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, www.googletagmanager.com, update.googleapis.com, clients.l.google.com, www.google-analytics.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
VT rate limit hit for: http://af.uppromote.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 18:18:43 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.987362763156467
Encrypted:	false
SSDEEP:	48:8XudYjT4gvfHSidAKZdA1FehwiZUklqehqy+3:8RPApy
MD5:	AA5E10A761AD6C5D2E9B3FD6C49B7A59
SHA1:	4C00443ED2EB26E66AAB11358AD42D69C7EB37AF
SHA-256:	A6355E4A1DBC5FBE7CD837E5E8912ED4922C71493966B78F817E6CA54396032F
SHA-512:	48B83BFCCB812E85B0AFBD91D753AB4BCD43331A2909493B73182D1A59BB8CA7719EE78FD8D5E5F676AFEA193D123D15ACEECB14B8D32A400CCC9BC656D46FE1
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......:...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.XL.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XU.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XU.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XU............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XV............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............^4.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 18:18:43 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.00279715370875
Encrypted:	false
SSDEEP:	48:8jjdYjT4gvfHSidAKZdA1seh/iZUkAQkqehZy+2:8jyPW9QQy
MD5:	6EC036E35C04AFA9FA1E6885F6321CB7
SHA1:	EEDABD6C894B7B64C0528BF20B180C87782B8530
SHA-256:	A6C516B2AD3AE30414380E08CC75EAFD60FB2A6567807A45AE6B962667DE8BA8
SHA-512:	BB62F46043ADAE706BF3E16FDAC800BEDD42FEB4BA8DC73D47FC8DE781CD25C4A4E18BC9F82F531E0C0927E0A5931C7484C82DC42FF1ACFA235DC38BCE0E3C29
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......\|:...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.XL.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XU.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XU.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XU............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XV............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............^4.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.008321861269311
Encrypted:	false
SSDEEP:	48:8EdYjT4gAHSidAKZdA14meh7sFiZUkmgqeh7sny+BX:8XPXn1y
MD5:	7989243C382937815E8ABFA11E212125
SHA1:	D35407BC0D2B53B6DF301905BD0B0EDB0416EE6B
SHA-256:	0C34C9D8ECBA4D0C71D15591B746AE711001D7AD4E517EBDCBF0B41FBED48847
SHA-512:	06C543AE77122F99FD629EB0F8CAED1E5D3F85C11888BFDF7B5D509C7465A82C84CC2A1638FAAB9350F925E435A09C16F427E296D479582903C62335EFCAE272
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.XL.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XU.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XU.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XU............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............^4.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 18:18:43 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.999182501128193
Encrypted:	false
SSDEEP:	48:8RdYjT4gvfHSidAKZdA1TehDiZUkwqehNy+R:8QPN/y
MD5:	10432F1825238462D7F701E1B0CE4CB0
SHA1:	BDA1B60DD13E4C4AE7DFB631C07405CB7701E1E6
SHA-256:	5D96E1333FAAE7547BBAC3B0CE25D0B3EDF3A9BCC38491068414BE747C0B8F49
SHA-512:	5F93983A463FA7C4A84E427085052934061FF3BCE74BE40F4325EB930760255A3A466B180817ABDDC96B215E70884A1031312903729876CF56D726FBC6AEE7CE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....qww:...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.XL.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XU.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XU.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XU............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XV............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............^4.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 18:18:43 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.990078901268333
Encrypted:	false
SSDEEP:	48:8+dYjT4gvfHSidAKZdA1dehBiZUk1W1qehDy+C:8RPt9jy
MD5:	67058387FE9A7512B99EAB1C5C044446
SHA1:	9D5103A328FEC7B4B8FCD479FC8FAF599DFE8A8D
SHA-256:	49C779F67E66DD14F315F044957831A2CAE07408EF551F51F46654C954C4AADA
SHA-512:	4290223D6A93B90F44E5E258D01786834409540F7E46ECE5BC170F17B825A1CDB91E933BFF9CA6E2E1254092F12748A01D03790100EDE59CF0F40C3AAE8173C2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....:...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.XL.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XU.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XU.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XU............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XV............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............^4.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 18:18:43 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9959710109049413
Encrypted:	false
SSDEEP:	48:8vdYjT4gvfHSidAKZdA1duTeehOuTbbiZUk5OjqehOuTb1y+yT+:82PVTfTbxWOvTb1y7T
MD5:	922017028A78F444BDE00E0DF8C156B7
SHA1:	4AD4D585CD936AE267464EECCBAF29188435718E
SHA-256:	60E0740CC639F4F3EC6ABC31552CDACCE9CC9A8CBAF3C8D23832C3624B09B762
SHA-512:	8A830F7F779F496AD92C0E691519C904B50CEE9058AE7DE67EB4405753F17FE4F092FF381A48B6293550842EF3EEB11DAA8C96FF8DF10944C90F9CCBEDC71376
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......n:...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.XL.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XU.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XU.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XU............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XV............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............^4.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.577819531114783
Encrypted:	false
SSDEEP:	3:H1MRiY:SRL
MD5:	9B533814759386E5DCE300ADEF1AF644
SHA1:	A5A1BDA8ECDCD410A4937DD9F4DCD49F298789B8
SHA-256:	60C0C85FA2AB2EC2A71020A1A09DC6C8DD714EBEF4D188BC4DD2FF203CB76AC4
SHA-512:	1251E2568926BDEA46049C493839CEE93FBEAA0DE8E4F1373801A4DE117C95A0ADD5B1C537785BFB27AF51E84C17A294DC2A61C2F82179226B8E6DAF7BFF0310
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnGzKutQ9TyKBIFDZiCMG0=?alt=proto
Preview:	CgkKBw2YgjBtGgA=

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Category:	downloaded
Size (bytes):	7884
Entropy (8bit):	7.971946419873228
Encrypted:	false
SSDEEP:	192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI
MD5:	9212F6F9860F9FC6C69B02FEDF6DB8C3
SHA1:	AC6D71B4D5FDD2B3DABC9A06FF6C001E4251DA0B
SHA-256:	7D93459D86585BFCDBB7E0376056226ADB25821EE54B96236FE2123E9560929F
SHA-512:	67317495F4B53E20A9F31C034E456E6C37F387DFFB2C092CAA5159BC441CFCADD02749FFE5BBED1D580D5300A59E48A767EF2C6D9978B474F84C1A2CD095C126
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2
Preview:	wOF2..............?....x.............................`..T..L.6..6..6.$..h. ..\....~2.".8. .w.Q.Y,.?$pC.....)bT(i..@X.m...+...D.Q.O.\-?g.U..Z..._...l..!.lKD.Q..>.9v..V..<...Td$.E..,...o..c.t....!...#..8.A..3..cx~n=Di#....U......K.5jXH.].....j.(.6..]{..IDhZ.......R.....[..X".B~.(Su2..../.I.E...T.l%....'.N.aN.2\,70.....V.RQ..k~..".1. Lg.zd....}.yyys&D.K.g....)....2&%$.nm.\.._.e.tU..I.w;W.\|..6..XUv...!......>@.V..'..`.H`...5.7.X.?..@#..:..<.R.\|.;K..}.6..IA.C.....z.n.G............[.....z........`.X....D..{<..j...).......FQ..T..m.&s_k[%ZILV.8.l.o.z$.)/]......}..Kg.}..O...o\|..>.,U..?..{b<........._.._.06.........R01.@..[......a8..7.V%..B.0F...4 ....q..u#.lg....x....a.=w...8..A6.>f.+.8..Xm@`.m....G.....i..^R}9.aB...?._#.[f.d,V....bG.]...iED.@[.:.....P...........~.{,.x...~.!...C....b.....ze..).:+N....2sd..s..MEp.?^[.k........p..nz...[-.XI.%.."..`..<.2b\.w.VS.a.+......~..J..uGq..)..1...4o3v.Sb......5.w7...-....Wd>..B....R^.4'..B.2G>.en.q..._.@s......

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15406
Entropy (8bit):	2.9406015946204427
Encrypted:	false
SSDEEP:	96:7TI4TBsnckS6sQlQBGvZOZANrQqGLennOABl0ZD:7TI4T2dS6sQlQBGeOrQXAOA4
MD5:	41BBB5A57E551BD81C8F9AD73C95B058
SHA1:	53EF4385E62044966871D37209949B5AB8B17ED3
SHA-256:	881F74D0EFE1D85B3FBA4F200A4096612D8284F6644B10AA22EC73D64EF4AA5E
SHA-512:	F1D00A372749E4B6884490638715A0060172A033044C20661EB9DCE21E1DE96B4DA0BDEF9B521B3A95A2D7431FB5F332F7450A37C0C2DD0404128F84EEF297CE
Malicious:	false
Reputation:	low
Preview:	............ .h...6... .... .(.......00.... .h&......(....... ..... .........................@M..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..@M..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..LX..al..DQ..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..{.......Q]..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..IV..Q]..oy..........pz..O[..AN..AN..AN..AN..AN..AN..AN..AN..al..............................ER..AN..AN..AN..AN..AN..AN..AN..........hs..........MY..~.......JW..AN..AN..AN..AN..AN..AN..AN..........EQ..........`j..........JV..AN..AN..AN..AN..AN..AN..AN..........EQ......................CP..AN..AN..AN..AN..AN..AN..AN..\|.......EQ..........R^..Q]..CP..AN..AN..AN..AN..AN..AN..AN..AN..Wb..cn..BO..Xc..fq..FS..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..........cm..........IV..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..Ze..................AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..IU..}...Ze..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	downloaded
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
URL:	https://d1639lhkj5l89m.cloudfront.net/js/jquery-3.1.1.min.js
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 960 x 1080, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	107082
Entropy (8bit):	7.947710925760712
Encrypted:	false
SSDEEP:	1536:SXjsMD4bzW8ZNt0PJWDqGRoWXrQQ5NgN+sdb3VoOWppibHPgjKClaH4DHiXwJs:SKW8ZYFGR7x5NgN3db3xWubHoHaHCfs
MD5:	CED9E91EFFA5C50AFC930B2AC4BC2A23
SHA1:	377DEADACDBBAAD71E5AA601187B7871B0D1D28C
SHA-256:	3655DBC7F1EFEFBB634D821623799CB477C29975F134685F1F2F205CCF786F52
SHA-512:	C2D54C0CC71C5584AEC4741004AB536CB48FCA2B92E238F2BD50FD4777EF3C04B0966F92D5C1BF50ABB250209D45CEDFCDA6D3FC5D290777B5F3B6F1B6CF79FE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......8.......a....pHYs.................sRGB.........gAMA......a.....IDATx....m.....N..9c{<.x&u...l4.. H......U.o%. ~..z.../.O..~.?.^...G....k..._..^.{.+0N........_...4.\.z...ih?.\O..b.\|..k......q.%z.q..f.?;]v.b-.X...m....Y.Y..............Y..cc3..<W6,.j...?../..O..`......q.R.g..%.0k.q..2AH.,.#..;...8X.lQqL..t].s.m]u.O....sbQ...t.RZ.....J,.Z.p.dV...'G.r.....8j..Lp.g...j...3..].l{.-z.v~.{..x.c.....w.%{..+...s..#.....V.p.'..1.......G...QE...K.rehuF>.'.)`...1..s..D.w.-F.P..u.....c\|.K.p....Q,G..h.^.w.9..r..>.Q.U...).f.~e.kk].oF.+.\|T.F.=.....q.q..g'...)..~..7-.....'0.yg..,...p..U.q.p...s."4...d.N...m...>..-..G.+.k...A....s.h..#Z_.Y..j...el...\%.g...<....6J..'..m...^\|...._a...J...<......o....q.....V)B....+.k#5.-*....s.O..8.tl..O.a3.,.Z.o.Y}.g...l....DT.Z.\..'..F..'......rb8c\J~......{N;~.....w.}.u+3./.Q..s.%..J....y.3.......?..... .p..W.."e...;.!....m...."...X.M.........O.'$..P......k..y....t[..k.8..'0-.I....zL:...I`s...".d...b

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2356
Entropy (8bit):	5.3449420052626495
Encrypted:	false
SSDEEP:	48:QY3QEas4RVc+ukY3QEasQN0osOEaZRVc+ukOEaHN0osOpapoRVc+ukOpapjRN0oD:QYgEaFVc+ukYgEatNQOEaDVc+ukOEaHp
MD5:	61A63313FE6BF5F778834224A1C01357
SHA1:	C9A43240DFE085C212C319676FD8CFD38AF4552B
SHA-256:	894DF9F98F2C26FCC85AC55008D4EB0B9B3440A4603A07BAE1FA85E3D596D43C
SHA-512:	1487D704D68ABA112CE1EA0F9C991334EC40F100EDB6EFE0D795DAE904C0A760092F607D34265F7E614C0963D7A94F261D35435D3153F43EAC1D5FEA513B6CE9
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css2?family=Poppins:ital,wght@0,400;0,700;1,400&display=swap"
Preview:	/* latin-ext /.@font-face {. font-family: 'Poppins';. font-style: italic;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiGyp8kv8JHgFVrJJLufntAKPY.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Poppins';. font-style: italic;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiGyp8kv8JHgFVrJJLucHtA.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2) format('woff

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	181520
Entropy (8bit):	5.13857241210898
Encrypted:	false
SSDEEP:	3072:C4H6etnOVm7OdJpM9nuzCSDUyKlcnPp629eZaJ2lpmM+Xdr39LRoQRo29D0Pkjp/:C4H6etnOVm7OdJpM9nuzC2UyKlcnPphz
MD5:	4D72A707046C864EA151267DB5AF84BB
SHA1:	EF6D3F2DDBF579BCBFBA0DC35219CD77242438DD
SHA-256:	DCDF0B14F0A1F012B7EB30042D98F9F597B02A2C40F87CE26D30FC2C767FA8DE
SHA-512:	82FE4F02554FB6077E436FFDC5783C56F603AC79834E0F1FDED9ABDE40B96A1AD095EEE74855C62AFFA93E8BB487F4049D82017594D8D4746F7A52DA5807C56F
Malicious:	false
Reputation:	low
URL:	https://af.uppromote.com/css/style.css
Preview:	/. . * INSPINIA - Responsive Admin Theme. * version 2.7. ./.@import url("https://fonts.googleapis.com/css?family=Open+Sans:300,400,600,700");.@import url("https://fonts.googleapis.com/css?family=Roboto:400,300,500,700");.h1,.h2,.h3,.h4,.breadcrumb > li a.h5,.h6 {. font-weight: 100;.}.h1 {. font-size: 30px;.}.h2 {. font-size: 24px;.}.h3 {. font-size: 16px;.}.h4 {. font-size: 14px;.}.h5 {. font-size: 12px;.}.h6 {. font-size: 10px;.}.h3,.h4,.h5 {. margin-top: 5px;. font-weight: 600;.}..nav > li > a {. color: #a7b1c2;. font-weight: 600;. padding: 5px 20px 5px 25px;.}..nav.nav-dashboard > li > a{. color: #a7b1c2;. font-weight: 600;. padding: 14px 20px 14px 25px;.}..nav.navbar-right > li > a {. color: #999c9e;.}..nav > li.active > a {. color: #ffffff;.}..navbar-default .nav > li > a:hover,..navbar-default .nav > li > a:focus,..navbar-default .nav > li.active > a {. background-color: #000000;. color: white;.}..nav .open > a,..nav .open > a:hover,..nav .open > a:focu

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 1380, version 1.0
Category:	downloaded
Size (bytes):	1380
Entropy (8bit):	7.3037706743203845
Encrypted:	false
SSDEEP:	24:IgOu0UjAzqx3dB4ukwkGLTZ2hCJglrujOXZRrzt8Z8DcxLlMRSWIUhP/6f:IgOpUMzaBrkZG8CJgNsK1z6ZAGlEFV6f
MD5:	B7C9E1E479DE3B53F1E4E30EBAC2403A
SHA1:	AF91C12F0F406A4F801AEB3B398768FE41D8F864
SHA-256:	26726BAC4060ABB1226E6CEEBC1336E84930FE7A7AF1B3895A109D067F5B5DCC
SHA-512:	976F6E9D65859B1A5E3BBD426441E6885D1912F5694F40E2897B10F46B3BD0C7D940F7917A6050D6BB8CDEAAA5E5F0332391D3D398F6C21CE27299DFC7036911
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/fonts/slick.woff
Preview:	wOFFOTTO...d.......\........................CFF ..............V.FFTM...8........m..GDEF...T....... .2..OS/2...p...R...`P...cmap.......P...b".D.head...........6..1.hhea...D.......$....hmtx...`.........J.Jmaxp...p..........P.name...x.......n.'..post...T....... ....x.=..o.A..g)['..V 6A..k{7z.w..u.,....B..?x.;[X,...X..HP...H.'x.Mz.YJ.$o...y...7.....0......1..g........0......!t.j./.....Zy.'..T..@.^...'P8.x...>f.E..J....).z...Q'o...mC...QQ.=G._.@../...F...TU.d..PM.q..F.........}..8.:.9k.4I...v.7q.(..#4EQ.~.q(.....[..7q7.dK'..Z.&..,.6.D.dE.G.W..#o....\|Op...{...j5H.l.[-..4....b/k...A.V..\|.(I.r..Lm..K8.g.y.8.../...<..\|;...........................+..T.j...HP$.N.[.U..._.6F.2...2...p....=;c......T..1.j..f.4,.......t<4..#....Y8D....F/a]_I.i)NRN..m.8..i)%."..:.....i65.....5..t&......x........x.c```d..s.o....+.a4.Zy....x.c`d``..b...`b`.B.0.....v.7x.c`fb`...............2H2.0001.r2.A...#.R`...4.....D.I...?`.c...6.D...m.J..F.7.....x.c```f.`..F.......\|... ......d30$*(

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65307)
Category:	downloaded
Size (bytes):	992059
Entropy (8bit):	5.51512413886698
Encrypted:	false
SSDEEP:	6144:+MjOm+cvh9e8/4qAhVStRiX0xpVCrg+6GbC2BDtNMGDGWdwD6TwFfy9MOQaTgU5G:7VUktyeG4be1chePwAG3bmFy+fo
MD5:	3784CF5E1DDD3A68E335F3BB4A5E2FCD
SHA1:	617BEBEE8C2ACFFF41763B25AA8E2B65BDEBC1D3
SHA-256:	7F4AC95D1AB40C0D78D98ACF1DA862B901CE896B43F738C7B1731C986A612BF4
SHA-512:	A53D86A35C099EC66735015D479ABA8865D1AB318AF49E88636CF608CEE12677781EE38CCD09CC890F70EDEEABA545591377D7318225196CD9A20DAD3FE0E3DA
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/web_widget/classic/latest/web-widget-main-7bc1c0f.js
Preview:	/! Our embeddable contains third-party, open source software and/or libraries. To view them and their license terms, go to https://developer.zendesk.com/documentation/classic-web-widget-sdks/web-widget/getting-started/legal/ /.(()=>{var e,t,n,r,o={20916:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o=n(15826);function a(){return a=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},a.apply(this,arguments)}const i=e=>{let{title:t,titleId:n,...i}=e;return o.createElement("svg",a({xmlns:"http://www.w3.org/2000/svg",width:12,height:12,focusable:"false",viewBox:"0 0 12 12","aria-labelledby":n},i),t?o.createElement("title",{id:n},t):null,r\|\|(r=o.createElement("path",{fill:"none",stroke:"currentColor",strokeLinecap:"round",strokeLinejoin:"round",strokeWidth:1.25,d:"M3 6l2 2 4-4"})))}},18266:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	3145
Entropy (8bit):	4.842322330045504
Encrypted:	false
SSDEEP:	48:rnbVUBxX7wSLr2dc40BM3jyFjvsmNrCzqu/eBMThmn:DbVel7wSLs3jUvsmN+Tcn
MD5:	F9FABA678C4D6DCFDDE69E5B11B37A2E
SHA1:	81A434F94F2B1124F3232BB86F2944F82FB23AC0
SHA-256:	7ADAF08052C6A6A0F8A0D0055B4F191FD07389FE41C972B69573472B2ECB406A
SHA-512:	EA52D475E439BA178C15B5A6DC23F6EF5975E11B17D71B71F89E71DB27880E49220697954CD853AA28CC13B1A044A2A2EA10AAA2FC02A014E5441102DB433C32
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick-theme.css
Preview:	@charset 'UTF-8';./* Slider /..slick-loading .slick-list.{. background: #fff url('./ajax-loader.gif') center center no-repeat;.}../ Icons /.@font-face.{. font-family: 'slick';. font-weight: normal;. font-style: normal;.. src: url('./fonts/slick.eot');. src: url('./fonts/slick.eot?#iefix') format('embedded-opentype'), url('./fonts/slick.woff') format('woff'), url('./fonts/slick.ttf') format('truetype'), url('./fonts/slick.svg#slick') format('svg');.}./ Arrows */..slick-prev,..slick-next.{. font-size: 0;. line-height: 0;.. position: absolute;. top: 50%;.. display: block;.. width: 20px;. height: 20px;. padding: 0;. -webkit-transform: translate(0, -50%);. -ms-transform: translate(0, -50%);. transform: translate(0, -50%);.. cursor: pointer;.. color: transparent;. border: none;. outline: none;. background: transparent;.}..slick-prev:hover,..slick-prev:focus,..slick-next:hover,..slick-next:focus.{. color: transparent;.

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	370
Entropy (8bit):	4.813324231905857
Encrypted:	false
SSDEEP:	6:Y0NO2v/aWgWfcx3OAwzHdNGYzHQ5wFwpNBBPxZXete/4HdSHYYiNb:Yj2virWfcx+AcdAfYMvfvKd0wb
MD5:	F1F4D7C9D026A8CFB6E3C8974B3C7931
SHA1:	F2C5D2B39E47479B0C093A32934A2F9025CBFA34
SHA-256:	DAA6CFDB36C7890DC4001517991D263A88A38F935747B804897D25D9CED340A6
SHA-512:	3F30F50DEE979D085C031AC8DDF447C95CF95BF38459CD03F35BEC2C609FEF5EF81D1B5263BC7E614028BF08EA07C0B216882EA6BD3416C9A99B0AF22A15F48E
Malicious:	false
Reputation:	low
URL:	https://secomapp.zendesk.com/embeddable/config
Preview:	{"brand":"secomapp","brandCount":1,"color":"#78a300","embeds":{"ticketSubmissionForm":{"embed":"submitTicket","props":{"color":"#78a300","customFields":{"ids":["21987449","21960575"]},"attachmentsEnabled":true,"maxFileSize":52428800,"nameFieldEnabled":true}},"launcher":{"embed":"launcher","props":{"color":"#78a300","labelKey":"support"}}},"features":{"fastLoad":true}}

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-VWZPYDCSKQ&gacid=130039912.1713467925&gtm=45je44f0v894741970za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&z=364272637
Preview:	<html></html>

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1900)
Category:	downloaded
Size (bytes):	145471
Entropy (8bit):	5.550710966390851
Encrypted:	false
SSDEEP:	3072:9flV4Kaglu0Y71BF/p+cAd78YW8UhRf50:nys+rvS78YW8UhI
MD5:	2A1B6A29F50F831BFC7008087E375F54
SHA1:	2C70929F5547C524BFDD8B713BE9AB2D4BFBBDD1
SHA-256:	77E7CD61685F3D47A95C6502308F4D75A3A86AEFD08821B1E9A29E46103B165C
SHA-512:	5FB5D6A1ED10BC55BD58E3176DF0A765C55DB15C470DBC8CBB291746A51FED71A58932EE68DE89DA2DF2340BAF0EBC12D011A064E3A787F17AF5ABC4123BC6D0
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-53113273-27
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"undefined"}],. "tags":[{"function":"__rep","vtp_containerId":"UA-53113273-27","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__zone","vtp_childContainers":["list",["map","publicId","G-VWZPYDCSKQ"]],"vtp_enableConfiguration":false,"tag_id":3}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0,1]]].},."runtime":[ .]..........};...var ba,ea=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ha="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ia=function(a){for(var b=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global],c=0;c<b.lengt

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1776
Entropy (8bit):	4.594956707081927
Encrypted:	false
SSDEEP:	24:ve0hjm0M3ZGwgbb6qSiRDI2QWTF3IZcVkTFxchwQUm8B5Td:vel5wXbbsi5hBTmpTXbS8Td
MD5:	F38B2DB10E01B1572732A3191D538707
SHA1:	A94A059B3178B4ADEC09E3281ACE2819A30095A4
SHA-256:	DE1E399B07289F3B0A8D35142E363E128124A1185770E214E25E58030DAD48E5
SHA-512:	C11E283612C11DFEEC9A3CB42B8A2ACDD5AE99DFABE7FFBA40EFEF0DD6BBE8C5B98AE8383D3EEFF3A168124C922097EDDD703401EE9AC6122F1EBAB09BBF7737
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.css
Preview:	/* Slider */..slick-slider.{. position: relative;.. display: block;. box-sizing: border-box;.. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;.. -webkit-touch-callout: none;. -khtml-user-select: none;. -ms-touch-action: pan-y;. touch-action: pan-y;. -webkit-tap-highlight-color: transparent;.}...slick-list.{. position: relative;.. display: block;. overflow: hidden;.. margin: 0;. padding: 0;.}..slick-list:focus.{. outline: none;.}..slick-list.dragging.{. cursor: pointer;. cursor: hand;.}...slick-slider .slick-track,..slick-slider .slick-list.{. -webkit-transform: translate3d(0, 0, 0);. -moz-transform: translate3d(0, 0, 0);. -ms-transform: translate3d(0, 0, 0);. -o-transform: translate3d(0, 0, 0);. transform: translate3d(0, 0, 0);.}...slick-track.{. position: relative;. top: 0;. left: 0;.. display: block;. margin-l

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
Category:	downloaded
Size (bytes):	7816
Entropy (8bit):	7.974758688549932
Encrypted:	false
SSDEEP:	192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4
MD5:	25B0E113CA7CCE3770D542736DB26368
SHA1:	CB726212D5D525021752A1D8470A0FB593E0C49E
SHA-256:	9338E65FC077355C7A87AE0D64CC101E23B9BF8AD78AE65F0F319C857311B526
SHA-512:	A0D331E62AB4727F49CA286A1EE7FB81CDDC5BB9EDF71EF84F4BD4FA1552069AF1A82752011BA88FAE80862D034135926B7E99D70E59D626D66D4EDE90E94C30
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
Preview:	wOF2..............>P...4.............................`..T.......6..6.$..h. ..D.....03......~.(J........".!]X.......fD .s..I......(&.:..K..3=/.?0.?B........}.}.L....9.!1..6.u....(...m..\.6R.H....(..J.....YXus..2..susq.E^.v.....z..{........BN^...}[a.8&.By.9......O......3..zW.\|R.I.8 .Z.V. ..v...X_F....,[ye....wU.m..U.....}....'.^.jQK..@....n....)...;.. T..@]...hz.>.6.Y.tgeF.p...k?.g.jIb..."'.p.j.W}..X..........0'@.!<..$.<\TG...........^......W..<..LhX...r..Q.8........W.8[...W.z.W...,`...}...CY..z..m.B...z._..}..0$..F. ....<........!...X.....`.._UY{..k....[.+....h..G...x4.h...#...n=.!....G.G..<....~.nS...M.d.RT...g..$:/..j..y.@.FIg.".#..]'...4...n..y.Q.s'..I@P.w..xI.......#.J.n.n.i...'....@..H...H..1.;7...ddSF.d..]....Z......W.../S....^V..k..%.......CF....B4.kN....Mp.......+..i...M.>.`m...=..$c..$.h.t..\|..d+...6j..W...~a.M.'4..f.`...( .0Vq,.&f.?k.%i.\|tr..`k...F..{l.T.T=.......aK..F....nAu..."....Cpc..B.`..s...,S.......P._[K?..+...\|2...z....

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 32 x 32
Category:	dropped
Size (bytes):	4178
Entropy (8bit):	7.490050296203736
Encrypted:	false
SSDEEP:	48:32e4MxZKDtivGOFkoajWKOwD2s4UYX034Hk4zHdwt4zeoAF5oM4JTp3uVj4gBFyj:32e4ZtyiqsdWAXWwXPF5oMcdUjVsmuS
MD5:	C5CD7F5300576AB4C88202B42F6DED62
SHA1:	7A1AA43614396382BB15E5FDE574D9CDCD21698F
SHA-256:	E7B44C86B050FCA766A96DDAC2D0932AF0126DA6F2305280342D909168DCCE6B
SHA-512:	F0D7ADA22A3EB3B2758198A71472FB240C74CE4CA09028076E23690C70B2339C6B2A40F9158DD71C52D953EF27BBCC0105B061BDC74FBB0AD0B304C7C6A04A38
Malicious:	false
Reputation:	low
Preview:	GIF89a . .........................~~~................................>>>VVV```\|\|\|......JJJlll...............,,,^^^...LLL.................................................................................!..Created with ajaxload.info.!.......!..NETSCAPE2.0.....,.... . ....@.pH$.8.Gq.$N..A.3(..L....V....K\|P(...:.(..r.B.._@X!/...BxBnb}E.g....o.r..E.g..^..oWD.c.....JC.g......oqm.o..........E.....{p~....r...D....}.M....d......K......r.........o....\|........].q...` 9C.f).$'.=..}.C.^.u..-.H..!.............O.K"1......5.&{j.T. .BBo..e...6..<...@.B?..1..)..G.b.K... .!.......,.... . ....@.pH$&4.Bq.$..D..b(.......V....[4.._..:.t:"r.qh@..a..)..g.Bk_.o..E.g~.....#r.JD.g.xl.oWF.C....~mg......o.D.....B.....w...K.!.......C........wE... ..d....X.............r................s'...xM.&T$$..\|M...C.... .A...Bl..d....K.d.V..?oFl-X. .L[.J*....6..!."...5\@....p..oI..m...N!Q.Xm..@..%2u:uH2.\.R.#.a..!.......,.... . ....@.pH$...Bq.$&.D...(..L....V....[$.....:4P(.r.s..._...I..g.BxB.o..E g.w^

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (841)
Category:	downloaded
Size (bytes):	10335
Entropy (8bit):	4.626026554809134
Encrypted:	false
SSDEEP:	96:u3Acfo1AfdxdLPAeNgUl4Vv+cJhrrfQdDlVklpnHarZkD8RAkqSXdL:u3A0o1AfjhYKSxrfsvklVQZkD8RgSXdL
MD5:	BC89928FCFEE755F2632FACD272EF6FF
SHA1:	84BDFC771C5AE8B6D932F379C73DF8D1F60C074B
SHA-256:	0FE33C88C9C54A96B8CCD78178E81E14D15232B8950A594C6F16B253894B58FB
SHA-512:	15C752E2EF178A707100631718D12F2B06602550F78962C5E6D57C054BCB3F47C358752BC0D8F3BF19525B99CFAF273BECFEC5512D6D3B8B25DAF99C64F54F48
Malicious:	false
Reputation:	low
URL:	https://af.uppromote.com/
Preview:	<!DOCTYPE html>.<html>..<head>.. <meta charset="utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <meta name="google-site-verification" content="pOYpx-eOMPaJiCevCZG6arNYQKhiIQjOLmFdreGMIV8" />.. <title>AFFILIATE \| Login</title>.. <link href="https://af.uppromote.com/css/bootstrap.min.css" rel="stylesheet">. <link href="https://fonts.googleapis.com/css2?family=Poppins:ital,wght@0,400;0,700;1,400&display=swap" rel="stylesheet">. <link rel="stylesheet" href="https://pro.fontawesome.com/releases/v5.15.1/css/all.css" integrity="sha384-9ZfPnbegQSumzaE7mks2IYgHoayLtuto3AS6ieArECeaR8nCfliJVuLh/GaQ1gyM" crossorigin="anonymous">. <link href="https://af.uppromote.com/css/animate.css" rel="stylesheet">. <link href="https://af.uppromote.com/css/style.css" rel="stylesheet">.. Custom theme 2021 -->. <link rel="stylesheet" type="text/css" href="https://cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.css"/>. <link rel="styles

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	742
Entropy (8bit):	5.069500943813992
Encrypted:	false
SSDEEP:	12:YoG2kbSTFcz22Wfcx+Ac13MvDCfZ8vKd0AHDzhqszQ8m9YAGjZ+tHNwUUDEyZ:Y+pF8Nx+Ac17qvK6iDUszKtGjZktwWyZ
MD5:	0D9AAE0D08F45F7F2B7673FCE2AE831A
SHA1:	05DB4F2F8DEF0FD83F657D0AF8DD9CAF6F3F3CA0
SHA-256:	F7BD410822025F7A263E9A01D11C71E2C925144BD36AB81A43EBFAE0FB7C8E8A
SHA-512:	3BF0985B86B528A58C1D5A3BC1436FA6616DBF82122A0B718A354FBF5DC8A7A81DD0AA508771943C62F7D9CE7EC1E73AB3B48862D50E5D328E06E1A995BFB773
Malicious:	false
Reputation:	low
Preview:	{"products":[{"name":"web_widget","id":"secomapp.zendesk.com","bootstrap":{"config":{"features":{"fastLoad":true},"color":"#78a300","brand":"secomapp","embeds":{"ticketSubmissionForm":{"embed":"submitTicket","props":{"attachmentsEnabled":true,"maxFileSize":52428800.0,"color":"#78a300","nameFieldEnabled":true,"customFields":{"ids":["21987449","21960575"]}}},"launcher":{"embed":"launcher","props":{"color":"#78a300","labelKey":"support"}}},"brandCount":1.0}},"features":["ticket_submission"],"url":"https://ekr.zendesk.com/compose_product/web_widget/7bc1c0f290501106fa41dc515076261e2325fb83?features%5B%5D=ticket_submission","assets":{"scripts":[{"src":"https://static.zdassets.com/web_widget/classic/latest/web-widget-main-7bc1c0f.js"}]}}]}

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	8732
Entropy (8bit):	5.39222396905983
Encrypted:	false
SSDEEP:	192:pNa5N4NXNO3qNWNIXNENFQNDN8NW3XNtNGqN+rNU7N8NHNs3sNWNiNNDNn1NhN6z:vafWdMQcMCFe5KkdjjmUBKtaacM5n734
MD5:	9901D8E86EB3CC0B0EA24D6939D67A3A
SHA1:	235A544A3F9024C6A123CC71D679097D2D7E1C80
SHA-256:	D3F4104957E76483ACBA4180738253208FD8D4D81C64931244860514AF502B82
SHA-512:	2B3FC8BFC31BE5DB14AC1CDA62B0E08DD36CB4B2B9632BB21A65ECA77F7EDAFA9CBFF8519B2AE0CBBB53BA98AD8B8A14AE12296DDC8F9C57C07562BAA48FD05D
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Roboto:400,300,500,700"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2) format('woff2');. unicode-ra

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with very long lines (47558)
Category:	downloaded
Size (bytes):	214443
Entropy (8bit):	5.353839963002092
Encrypted:	false
SSDEEP:	6144:7KOLSCdTrsoerlSCdTG34wOZJhMOBNaO4G3uRmy:7KOYrU4wOZJhMOBNaOVeRmy
MD5:	0BF371FB4F24B65BB242CFF279B3A2D4
SHA1:	2716C1594AF5050E81E4B5C019944B542B0FD2CE
SHA-256:	C75A7E2F976F3A6F98768E31F973C2F4FE382E1A8C8B012C20449BEB2489A938
SHA-512:	C3517A8D8A31D040E78D3B71F964E640FE1F1C5C81A6131A75FB154E2BD22CCFE5ACDC54E7D7AF96F87879F6E013D949DE156E489DB0D05A0B01BC0B7DC70B7B
Malicious:	false
Reputation:	low
URL:	https://d1639lhkj5l89m.cloudfront.net/affbootstrap/css/aff-style.css
Preview:	/!. Affiliate Marketing v1.12.20. * Copyright 2020. /./! http://af.secomapp.com/../..********************************..FONT - Typography. /..:root {. /* color /. --text-success: #2DC8A8;. --text-navy: #2DC8A8;. --text-info: #2DC8A8;. --text-info-new: #EDF6FD;. --text-warning: #FDD400;. --text-danger: #FF4141;. --text-gray: #7D92A5;. --text-white: #fff;. --text-money: #2DC8A8;. --text-muted: #888888;. --text-primary: #1D85E8;. --text-body: #092C4C;.. / border radius /. --box-border-radius: 10px;. --box-border-radius-md: 7px;.. --button-border-radius: 7px;. --button-border-radius-md: 5px;.. / Font size */. --size-heading-h1: 22px;. --size-heading-h1-md: 18px;. --size-heading-h2: 18px;. --size-heading-h2-md: 16px;. --size-heading-h3: 16px;. --size-heading-h3-md: 14px;. --size-heading-h4: 14px;. --size-heading-h4-md: 12px;. --size-heading-h5: 12px;. --size-heading-h5-md: 10px;. --size-he

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	742
Entropy (8bit):	5.069500943813992
Encrypted:	false
SSDEEP:	12:YoG2kbSTFcz22Wfcx+Ac13MvDCfZ8vKd0AHDzhqszQ8m9YAGjZ+tHNwUUDEyZ:Y+pF8Nx+Ac17qvK6iDUszKtGjZktwWyZ
MD5:	0D9AAE0D08F45F7F2B7673FCE2AE831A
SHA1:	05DB4F2F8DEF0FD83F657D0AF8DD9CAF6F3F3CA0
SHA-256:	F7BD410822025F7A263E9A01D11C71E2C925144BD36AB81A43EBFAE0FB7C8E8A
SHA-512:	3BF0985B86B528A58C1D5A3BC1436FA6616DBF82122A0B718A354FBF5DC8A7A81DD0AA508771943C62F7D9CE7EC1E73AB3B48862D50E5D328E06E1A995BFB773
Malicious:	false
Reputation:	low
URL:	https://ekr.zdassets.com/compose/web_widget/secomapp.zendesk.com
Preview:	{"products":[{"name":"web_widget","id":"secomapp.zendesk.com","bootstrap":{"config":{"features":{"fastLoad":true},"color":"#78a300","brand":"secomapp","embeds":{"ticketSubmissionForm":{"embed":"submitTicket","props":{"attachmentsEnabled":true,"maxFileSize":52428800.0,"color":"#78a300","nameFieldEnabled":true,"customFields":{"ids":["21987449","21960575"]}}},"launcher":{"embed":"launcher","props":{"color":"#78a300","labelKey":"support"}}},"brandCount":1.0}},"features":["ticket_submission"],"url":"https://ekr.zendesk.com/compose_product/web_widget/7bc1c0f290501106fa41dc515076261e2325fb83?features%5B%5D=ticket_submission","assets":{"scripts":[{"src":"https://static.zdassets.com/web_widget/classic/latest/web-widget-main-7bc1c0f.js"}]}}]}

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 140996, version 331.-31392
Category:	downloaded
Size (bytes):	140996
Entropy (8bit):	7.9983861427917855
Encrypted:	true
SSDEEP:	3072:X8Y40kER3HLOKqHj4HYwoR9G8iSjt1FrLl+JeMU:/4GZHLOtEH3wVdjtyLU
MD5:	25D740D42658B6E2C293CE7B3322AAC7
SHA1:	41CC9AE4B5DD70FD3988059DFB864F20F99AE371
SHA-256:	8B5A3FF47C2413E0BF3DD3BB7899A25AEEF9B390A055847A1185A39AD48A2DA2
SHA-512:	EB92DD22D53765B44D918ECEC0105CBAAE08FD5E0C7FAC1EC8494A32BB553DED03E8B3826A230161AB791D6169EBA1D3B384451E002FF0369760206B7775C768
Malicious:	false
Reputation:	low
URL:	https://pro.fontawesome.com/releases/v5.15.1/webfonts/fa-solid-900.woff2
Preview:	wOF2......&........`..&i.K.`....................?FFTM....`........x..N.6.$..\|..... ......=[..B..oX.AP....ke.....D.L..p..zE...M..a.y.zg.....oK.a..{..=.,..Z.b..k.Pr.K..(W.\...T....:.t;..n.[<.%...:4..#....v.!!L....{G.W.\&....t....}Y0...,g..;.-._...g..vz......^...A..=......f..tIG....@..).i2'.-.M.DZQ..A.2....n.i..\|.j..5'...\...p.....y..f....W.......(.1'.H.O.~w..<....I.&M...~.9.........;9...+mu..q..P...'...k]v..H.........#.........q.?@.&.M..,7G/o ".O..o...w.T.V-`....A.a.XG.mr<...N.+.OF.......'~nL\...D..1..";?...f?.-N.=!...s..2.hd).....Ja>.@..in.7b#o.l......I.F.bl.(."....s.....d&...ht...?L.....X.-.B_.?.7k.....c.....q.......!8A.W.\`Z9....[Z6....]6.u.u]u..Q...i.]W.....O...[..B..m.N.1.7QgN.q.p....`..,.. .`..P.b..!\|...`k^.....m.H(e...!g.qV.V.....w..%....mgz.6..4.I.#...J.w.K...fj.U...C...p.37.O0.,....d.z...E4+.....nc...b.F..R&..PDl..(._....z31.C.\|.%...7]...].l...X..0..pA.P..z...z.G=.i^..a@7....J.....3..i.d.)<......y...........z.~..d....(....u.h1.....N../.M

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	370
Entropy (8bit):	4.813324231905857
Encrypted:	false
SSDEEP:	6:Y0NO2v/aWgWfcx3OAwzHdNGYzHQ5wFwpNBBPxZXete/4HdSHYYiNb:Yj2virWfcx+AcdAfYMvfvKd0wb
MD5:	F1F4D7C9D026A8CFB6E3C8974B3C7931
SHA1:	F2C5D2B39E47479B0C093A32934A2F9025CBFA34
SHA-256:	DAA6CFDB36C7890DC4001517991D263A88A38F935747B804897D25D9CED340A6
SHA-512:	3F30F50DEE979D085C031AC8DDF447C95CF95BF38459CD03F35BEC2C609FEF5EF81D1B5263BC7E614028BF08EA07C0B216882EA6BD3416C9A99B0AF22A15F48E
Malicious:	false
Reputation:	low
Preview:	{"brand":"secomapp","brandCount":1,"color":"#78a300","embeds":{"ticketSubmissionForm":{"embed":"submitTicket","props":{"color":"#78a300","customFields":{"ids":["21987449","21960575"]},"attachmentsEnabled":true,"maxFileSize":52428800,"nameFieldEnabled":true}},"launcher":{"embed":"launcher","props":{"color":"#78a300","labelKey":"support"}}},"features":{"fastLoad":true}}

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 275 x 74, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6351
Entropy (8bit):	7.9026302381583635
Encrypted:	false
SSDEEP:	96:+2J+hVYeYNZF8fe1WTysbpJtR4h2bz6ta01Z27MTmDx80ZE9qwS:2rFYJ8f28Fni20a0t0O0i9q5
MD5:	348CCB1A47A98A15FC0F0A62DF30C6F7
SHA1:	CB45527B54D5933A699370BF04AF8D945198740F
SHA-256:	5F6EE6ED726E9F1785A957467DFCBCBF20C6AFAF424B3B7CE2782CA04232B450
SHA-512:	83E2FA23AA46E0B2C89EA3DF51D1FA1AD70E5BC9CA71A885A133E38855D12B497B478797D75AD2B12320246A1B202E3D384554F3AF6FF3A05FBA6D9869E14F90
Malicious:	false
Reputation:	low
URL:	https://d1639lhkj5l89m.cloudfront.net/img/merchant/auth/logo_with_text.png
Preview:	.PNG........IHDR.......J......_.3....tEXtSoftware.Adobe ImageReadyq.e<...$iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.dabacbb, 2021/04/14-00:39:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 23.0 (Windows)" xmpMM:InstanceID="xmp.iid:88F8320FB7EC11ED861AF6555F9582F0" xmpMM:DocumentID="xmp.did:88F83210B7EC11ED861AF6555F9582F0"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:88F8320DB7EC11ED861AF6555F9582F0" stRef:documentID="xmp.did:88F8320EB7EC11ED861AF6555F9582F0"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.q.]...AIDATx..].p\.u>.....q.8....uH.cK..-.!.....$.I;.I.2C...,.q...K.I.i.KC.....Ii.L./...I..!).'^!.......dI+.w{..

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 8668, version 1.0
Category:	downloaded
Size (bytes):	8668
Entropy (8bit):	7.974378065601371
Encrypted:	false
SSDEEP:	192:mnQ9l6zvmoW1McErCT/IHf11y41NSUVZVdH9aTbMlcE:mQ9l6CoW4+rIH7y41QUVZXcT9E
MD5:	A242BA0DF3A128A2CAB929A8C45D5056
SHA1:	D70E2C70B21CBB66CD883AE56E2DEDACEFD81C7C
SHA-256:	50D0C1742D80AC71F4CDE20E8C04D41A24806AF342831F479938B527FBFF0972
SHA-512:	FC85567DD0270A60D684F9E7FE8788006B2A4985A683334294C5B2B8E1DD9D268A787C232C91087FA25D8FBF81C73894C3846E3D4DEB97A1722575CC9C93B541
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiGyp8kv8JHgFVrJJLucHtA.woff2
Preview:	wOF2......!.......DD..!..............................`..T..x.M..6..6.$..h. ..T.....6.".8. .m$.RE...j!S......2.IDVmk.2.I..6w..V"w.W...u.!...GH2........Z.~... 6"4%"$D.T..........d...$j.......d)....y..w....um.W.w.gN.?...]..'f_....._..@.{....5P..w+.l.Y.(..D.[.}.3T.D..@..Lm.....(./ZN(Bw.j..%.....i...^....Q.....j.....o.....+`...r.."................T..P.`....T.fK-K..a.....}..N.Q..e..C.............:Gc.I..f E......[......?..)....Z<...g...x.D.x......._%....}.r...m:.s8./......d...{G....9O.M{<..]...jc..N..~zx:!..O ...l..p..HL%f...m..kL3...<.oT3..yo.L.V.K/~{......x.....n}..a..o}>.....@..3..../`..}~.`..._:#=.S.x1` ...[....3.'p>.....m.C19..`...'...b......U&.#....A.Q......=a.(...F..}a.$a%..N.0&.....@>...m.O^..v..h=m...X.N..x.)-9q.2j.9J..I..w.C......Y........k.=.>...\|\|.{...B.....\....zUJ..`.+.mg.Q$.pK..'B... .&.<..-...G...g.Vx..R....0.Q`.m..`U>.".l..{.....=:D......I$...Hc.....*t^..Q[..`.......8>...RI9s..).....\|N..JJ..E.>F.....4.=...<..U.7.....S{....\ZM?...uk...X

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 960 x 1080, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	107082
Entropy (8bit):	7.947710925760712
Encrypted:	false
SSDEEP:	1536:SXjsMD4bzW8ZNt0PJWDqGRoWXrQQ5NgN+sdb3VoOWppibHPgjKClaH4DHiXwJs:SKW8ZYFGR7x5NgN3db3xWubHoHaHCfs
MD5:	CED9E91EFFA5C50AFC930B2AC4BC2A23
SHA1:	377DEADACDBBAAD71E5AA601187B7871B0D1D28C
SHA-256:	3655DBC7F1EFEFBB634D821623799CB477C29975F134685F1F2F205CCF786F52
SHA-512:	C2D54C0CC71C5584AEC4741004AB536CB48FCA2B92E238F2BD50FD4777EF3C04B0966F92D5C1BF50ABB250209D45CEDFCDA6D3FC5D290777B5F3B6F1B6CF79FE
Malicious:	false
Reputation:	low
URL:	https://d1639lhkj5l89m.cloudfront.net/img/merchant/auth/right_side_bg.png
Preview:	.PNG........IHDR.......8.......a....pHYs.................sRGB.........gAMA......a.....IDATx....m.....N..9c{<.x&u...l4.. H......U.o%. ~..z.../.O..~.?.^...G....k..._..^.{.+0N........_...4.\.z...ih?.\O..b.\|..k......q.%z.q..f.?;]v.b-.X...m....Y.Y..............Y..cc3..<W6,.j...?../..O..`......q.R.g..%.0k.q..2AH.,.#..;...8X.lQqL..t].s.m]u.O....sbQ...t.RZ.....J,.Z.p.dV...'G.r.....8j..Lp.g...j...3..].l{.-z.v~.{..x.c.....w.%{..+...s..#.....V.p.'..1.......G...QE...K.rehuF>.'.)`...1..s..D.w.-F.P..u.....c\|.K.p....Q,G..h.^.w.9..r..>.Q.U...).f.~e.kk].oF.+.\|T.F.=.....q.q..g'...)..~..7-.....'0.yg..,...p..U.q.p...s."4...d.N...m...>..-..G.+.k...A....s.h..#Z_.Y..j...el...\%.g...<....6J..'..m...^\|...._a...J...<......o....q.....V)B....+.k#5.-*....s.O..8.tl..O.a3.,.Z.o.Y}.g...l....DT.Z.\..'..F..'......rb8c\J~......{N;~.....w.}.u+3./.Q..s.%..J....y.3.......?..... .p..W.."e...;.!....m...."...X.M.........O.'$..P......k..y....t[..k.8..'0-.I....zL:...I`s...".d...b

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7711)
Category:	downloaded
Size (bytes):	297412
Entropy (8bit):	5.570050727467177
Encrypted:	false
SSDEEP:	3072:Vf4lgYq+71vbzwHn239a/8tvp2LUF1eFS+MCY55CgY8pv1HnsnLP/w22bIoa/4L:943q8wH2trnVL55Cv8pNHnSLn2bD
MD5:	AE56B0239D4FC112CAD494C4A5542115
SHA1:	79A107E6EA4C4B4EC134CCD2346EAB74FC18D754
SHA-256:	1533F461F0CCF5A35969837677A5600C0D763808CA95A1CCA0D41C9B06D20988
SHA-512:	D288ACD693FDCB928A8728FE316FEEFF5DF7752AC221DDA39D773AC1AB3E6CAAB7369086E9BB681D0C44CEC2B713D9F944717AFE00236A0E07C84E83A8EBFA5D
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-VWZPYDCSKQ&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":14,"vtp_value":true,"tag_id":14},{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":16},{"function":"__ccd_ga_first","priority":13,"vtp_instanceDestinationId":"G-VWZPYDCSKQ","tag_id":30},{"function":"__set_product_settings","priority":12,"vtp_instanceDestinationId":"G-VWZPYDCSKQ","vtp_foreignTldMacroResult":["macro",5]

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (460)
Category:	downloaded
Size (bytes):	66203
Entropy (8bit):	4.580674830261551
Encrypted:	false
SSDEEP:	192:xIQHnfgf+rvqgfrRUiFG+2UWVbHUUAmLsUuN1zTKWRjfUZ/LSdzmqZr8rH2kz+zm:xIW1OqS
MD5:	D6F644FFBB7B72F4CC9318119A71506E
SHA1:	05169B5679045498CA8BA9A74AD354F12C473661
SHA-256:	49C388D627D292A4A1A12F8A8210033B119609962EAF3AAB0F0C0FD232A04EB8
SHA-512:	20D076C7C2CAD1BA3809524C168B926E81317F3AD2C78D8FD22A5D86E5EFCD373DE1534A601734ED94996CF2E0A8E07DEFDD923A887465611F7BCFDCD40F60C2
Malicious:	false
Reputation:	low
URL:	https://af.uppromote.com/css/animate.css
Preview:	@charset "UTF-8";../*!.Animate.css - http://daneden.me/animate.Licensed under the MIT license..Copyright (c) 2013 Daniel Eden..Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:..The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software...THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETH

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	22388
Entropy (8bit):	5.340794659982224
Encrypted:	false
SSDEEP:	192:N/dB0q4e6uyfrbqGIwYMH17o/A85q1H6uy2rbqGIwYRe1qW/uaDqPN6uyIrbqGIO:ZFuq9PUhq9IW/q935Cq9C
MD5:	CB6AFEA6EE75D2FC22E4A22512425465
SHA1:	F91258C83A54D1D44DF8637909885B300B5D305B
SHA-256:	31FE46164CE2459191CA1F7727FD742CE01833EE4F705459E88D43F53FCC9F80
SHA-512:	91FDA973E0A4490AC58E5F3881A5600E41721DB09714047CE3666C680961710DC060D454FA1A668D8D43A21D9D8358CEF90BE89D199AA9BD4124D32F9F8FBF0B
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Open+Sans:300,400,600,700"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Open Sans';. font-style: normal;

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 32 x 32
Category:	downloaded
Size (bytes):	4178
Entropy (8bit):	7.490050296203736
Encrypted:	false
SSDEEP:	48:32e4MxZKDtivGOFkoajWKOwD2s4UYX034Hk4zHdwt4zeoAF5oM4JTp3uVj4gBFyj:32e4ZtyiqsdWAXWwXPF5oMcdUjVsmuS
MD5:	C5CD7F5300576AB4C88202B42F6DED62
SHA1:	7A1AA43614396382BB15E5FDE574D9CDCD21698F
SHA-256:	E7B44C86B050FCA766A96DDAC2D0932AF0126DA6F2305280342D909168DCCE6B
SHA-512:	F0D7ADA22A3EB3B2758198A71472FB240C74CE4CA09028076E23690C70B2339C6B2A40F9158DD71C52D953EF27BBCC0105B061BDC74FBB0AD0B304C7C6A04A38
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/ajax-loader.gif
Preview:	GIF89a . .........................~~~................................>>>VVV```\|\|\|......JJJlll...............,,,^^^...LLL.................................................................................!..Created with ajaxload.info.!.......!..NETSCAPE2.0.....,.... . ....@.pH$.8.Gq.$N..A.3(..L....V....K\|P(...:.(..r.B.._@X!/...BxBnb}E.g....o.r..E.g..^..oWD.c.....JC.g......oqm.o..........E.....{p~....r...D....}.M....d......K......r.........o....\|........].q...` 9C.f).$'.=..}.C.^.u..-.H..!.............O.K"1......5.&{j.T. .BBo..e...6..<...@.B?..1..)..G.b.K... .!.......,.... . ....@.pH$&4.Bq.$..D..b(.......V....[4.._..:.t:"r.qh@..a..)..g.Bk_.o..E.g~.....#r.JD.g.xl.oWF.C....~mg......o.D.....B.....w...K.!.......C........wE... ..d....X.............r................s'...xM.&T$$..\|M...C.... .A...Bl..d....K.d.V..?oFl-X. .L[.J*....6..!."...5\@....p..oI..m...N!Q.Xm..@..%2u:uH2.\.R.#.a..!.......,.... . ....@.pH$...Bq.$&.D...(..L....V....[$.....:4P(.r.s..._...I..g.BxB.o..E g.w^

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42862), with no line terminators
Category:	downloaded
Size (bytes):	42862
Entropy (8bit):	5.0853422958250265
Encrypted:	false
SSDEEP:	768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYf:EPrYdlNixEePiYf
MD5:	EFE2DC57BF7B73137E9642E586EE272B
SHA1:	EF584ADD252EF75060DA8DF06EB5E859CAAEDB37
SHA-256:	27BEBE78E3B6A4B1664DD4FA83A8CD0187F051631A06248FEFA3EF3991A5A92A
SHA-512:	5BED459F087E94F50BF65F4AAC3B77314D2128C6F47480CCB3F405FD8A81E5352A68076D341A8D24572168AFC5EDCB447D590E7BBDCD834B3F87CBEA13126F25
Malicious:	false
Reputation:	low
URL:	https://d1639lhkj5l89m.cloudfront.net/js/plugins/slick/1.8.1/slick.min.js
Preview:	!function(i){"use strict";"function"==typeof define&&define.amd?define(["jquery"],i):"undefined"!=typeof exports?module.exports=i(require("jquery")):i(jQuery)}(function(i){"use strict";var e=window.Slick\|\|{};(e=function(){var e=0;return function(t,o){var s,n=this;n.defaults={accessibility:!0,adaptiveHeight:!1,appendArrows:i(t),appendDots:i(t),arrows:!0,asNavFor:null,prevArrow:'<button class="slick-prev" aria-label="Previous" type="button">Previous</button>',nextArrow:'<button class="slick-next" aria-label="Next" type="button">Next</button>',autoplay:!1,autoplaySpeed:3e3,centerMode:!1,centerPadding:"50px",cssEase:"ease",customPaging:function(e,t){return i('<button type="button" />').text(t+1)},dots:!1,dotsClass:"slick-dots",draggable:!0,easing:"linear",edgeFriction:.35,fade:!1,focusOnSelect:!1,focusOnChange:!1,infinite:!0,initialSlide:0,lazyLoad:"ondemand",mobileFirst:!1,pauseOnHover:!0,pauseOnFocus:!0,pauseOnDotsHover:!1,respondTo:"window",responsive:null,rows:1,rtl:!1,slide:"",slidesP

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (25709), with no line terminators
Category:	downloaded
Size (bytes):	25711
Entropy (8bit):	4.76122248133975
Encrypted:	false
SSDEEP:	384:3dq+te24z8VEB4yCSVYC+tQ52PX2NT91z:Fe24z8V24R+3z52PXyz
MD5:	6EB45E96A7CBB4B8CA10897F3CF09981
SHA1:	2A12B20D1CA65377448DCE30519C629AA4273346
SHA-256:	A48FD35C61908D912B5AC9E1FACE12E0962A0D9ECC8679E87DB4031697CEC54E
SHA-512:	71C0B51DA71EAD8652A3858B0A42AEE0A6E4CD1B1FE2752458716951110D57FE1DCFE9C9C5EE535400E3D01487E8D3E194BDDE9CC9A998C9649AC3B2253ADA19
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/web_widget/classic/latest/web-widget-locales/classic/en-us-json-7bc1c0f.js
Preview:	"use strict";(globalThis.webpackChunk_zendesk_web_widget_classic=globalThis.webpackChunk_zendesk_web_widget_classic\|\|[]).push([[6950],{43255:e=>{e.exports=JSON.parse('{"locale":{"locale":"en-us","rtl":false,"translations":{"embeddable_framework.answerBot.article.feedback.no.need_help":"No, I need help","embeddable_framework.answerBot.article.feedback.no.reason.related":"It\'s related, but it didn\'t answer my question","embeddable_framework.answerBot.article.feedback.no.reason.title":"Please tell us why.","embeddable_framework.answerBot.article.feedback.no.reason.unrelated":"It\'s not related to my question","embeddable_framework.answerBot.article.feedback.title":"Does this article answer your question?","embeddable_framework.answerBot.article.feedback.yes":"Yes","embeddable_framework.answerBot.bot.name":"Answer Bot","embeddable_framework.answerBot.button.get_in_touch":"Get in touch","embeddable_framework.answerBot.contextualResults.intro.many_articles":"Here are some top suggestions f

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 275 x 74, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6351
Entropy (8bit):	7.9026302381583635
Encrypted:	false
SSDEEP:	96:+2J+hVYeYNZF8fe1WTysbpJtR4h2bz6ta01Z27MTmDx80ZE9qwS:2rFYJ8f28Fni20a0t0O0i9q5
MD5:	348CCB1A47A98A15FC0F0A62DF30C6F7
SHA1:	CB45527B54D5933A699370BF04AF8D945198740F
SHA-256:	5F6EE6ED726E9F1785A957467DFCBCBF20C6AFAF424B3B7CE2782CA04232B450
SHA-512:	83E2FA23AA46E0B2C89EA3DF51D1FA1AD70E5BC9CA71A885A133E38855D12B497B478797D75AD2B12320246A1B202E3D384554F3AF6FF3A05FBA6D9869E14F90
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......J......_.3....tEXtSoftware.Adobe ImageReadyq.e<...$iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.dabacbb, 2021/04/14-00:39:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 23.0 (Windows)" xmpMM:InstanceID="xmp.iid:88F8320FB7EC11ED861AF6555F9582F0" xmpMM:DocumentID="xmp.did:88F83210B7EC11ED861AF6555F9582F0"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:88F8320DB7EC11ED861AF6555F9582F0" stRef:documentID="xmp.did:88F8320EB7EC11ED861AF6555F9582F0"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.q.]...AIDATx..].p\.u>.....q.8....uH.cK..-.!.....$.I;.I.2C...,.q...K.I.i.KC.....Ii.L./...I..!).'^!.......dI+.w{..

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32033)
Category:	downloaded
Size (bytes):	37045
Entropy (8bit):	5.174934618594778
Encrypted:	false
SSDEEP:	768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ
MD5:	5869C96CC8F19086AEE625D670D741F9
SHA1:	430A443D74830FE9BE26EFCA431F448C1B3740F9
SHA-256:	53964478A7C634E8DAD34ECC303DD8048D00DCE4993906DE1BACF67F663486EF
SHA-512:	8B3B64A1BB2F9E329F02D4CD7479065630184EBAED942EE61A9FF9E1CE34C28C0EECB854458977815CF3704A8697FA8A5D096D2761F032B74B70D51DA3E37F45
Malicious:	false
Reputation:	low
URL:	https://d1639lhkj5l89m.cloudfront.net/js/bootstrap.min.js
Preview:	/!. Bootstrap v3.3.7 (http://getbootstrap.com). * Copyright 2011-2016 Twitter, Inc.. * Licensed under the MIT license. */.if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){"use strict";var b=a.fn.jquery.split(" ")[0].split(".");if(b[0]<2&&b[1]<9\|\|1==b[0]&&9==b[1]&&b[2]<1\|\|b[0]>3)throw new Error("Bootstrap's JavaScript requires jQuery version 1.9.1 or higher, but lower than version 4")}(jQuery),+function(a){"use strict";function b(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var c in b)if(void 0!==a.style[c])return{end:b[c]};return!1}a.fn.emulateTransitionEnd=function(b){var c=!1,d=this;a(this).one("bsTransitionEnd",function(){c=!0});var e=function(){c\|\|a(d).trigger(a.support.transition.end)};return setTimeout(e,b),this},a(function(){a.support.transition=b(),a.support.transition&&(a.event.

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	121276
Entropy (8bit):	5.096694659110313
Encrypted:	false
SSDEEP:	768:+/Gxw/gIHrmlpXveuI64/1e1qse4LR7NZ3bZbh9UN+cavhrijkcwPqSkf4d2mCQD:Bw/XuzI64/1e1qIRJB9D2kcwPqSkfNy
MD5:	47F86AC9DF33B55BB62DDEB36E7EC0B2
SHA1:	B890107272180013DF5497C70122ED3A84DDF811
SHA-256:	3443B1CDDE7010A735F0A89F859ED127E98B922E7B1EB396DD2083525D12F9F3
SHA-512:	3DD997E45A05C2624584173CD3D5B5FF5EF2064AF794A7F3140FA3B37F44C8657D613AB9A272AEF58B246BDE8142F7C9742F4E385A9C412F821038781F967A0D
Malicious:	false
Reputation:	low
URL:	https://af.uppromote.com/css/bootstrap.min.css
Preview:	html{font-family:sans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}h1{margin:.67em 0;font-size:2em}mark{color:#000;background:#ff0}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{height:0;-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box}pre{overflow:auto}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}button,input,optgroup,select,textarea{margin:0;font:inherit;color:in

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (309), with no line terminators
Category:	downloaded
Size (bytes):	309
Entropy (8bit):	4.976658190404751
Encrypted:	false
SSDEEP:	6:qmQwQBwmEpsA2/EINCOxnEWEHvlQOCgaeYbT9x/WvWY6EirYtXY4wmE4Gen:tZQizpsuIoOIyO3Y3j/WvWY6vrYtYhz+
MD5:	0E5AC07DCAA9FB6187C5BC216A296461
SHA1:	11485BECBA8C4B2D175C3263B25027C24079BF82
SHA-256:	F72F3A1C551F39E965346E98BA850E56DCFC3833296554AD8CA6D1D008527E9A
SHA-512:	1B4AE3CADD34AD510CEAF733D392B6FF77FA02F900C3CFDF59AF376170E2D9750B112B5D2705BE6A9A67E1448237BA54D12958406B0F6F60E578F3E40DC50350
Malicious:	false
Reputation:	low
URL:	https://d1639lhkj5l89m.cloudfront.net/js/merchant/auth/login_register.min.js
Preview:	var login_register_utils={},login_register_handle={init:()=>{$("#quote-content").slick({infinite:!0,autoplay:!0,autoplaySpeed:1e4,dots:!0,speed:500,fade:!0,cssEase:"linear",arrows:!1,adaptiveHeight:!0,dotsClass:"slick-dots",appendDots:$("#quote-dot-container")})}};$(function(){login_register_handle.init()});

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 960 x 1080, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	333959
Entropy (8bit):	7.985072608304575
Encrypted:	false
SSDEEP:	6144:KJW2BRnA/e9DO6W80vxO4HnptFr7/B82dxxMrYDlBblqb7MHENU0:kDAGpO610v0ItFrH7LbGwki0
MD5:	4E823D7ACFC54046DA6807D6F9CBA28D
SHA1:	65CD7A07642518D86CAA1807DF8476D3A329A127
SHA-256:	826FBC1D556E0CF1CC2DCBAA3D49CA152CFF58F8B19A26C892CC3CC3F3116FC9
SHA-512:	422080E95B38C6F8AB57781FB72CF34B63610D606D78FC03D81F0F5CFFB4EDA775E63C214DB4C609B7B8D696BF083132B5426B3E705111AFF0128E3D5DBC2575
Malicious:	false
Reputation:	low
URL:	https://d1639lhkj5l89m.cloudfront.net/img/merchant/auth/login_left_side.png
Preview:	.PNG........IHDR.......8......nES....tEXtSoftware.Adobe ImageReadyq.e<...$iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.dabacbb, 2021/04/14-00:39:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 23.0 (Windows)" xmpMM:InstanceID="xmp.iid:3FEB2706DC0411ECA6A89027F7F5D342" xmpMM:DocumentID="xmp.did:3FEB2707DC0411ECA6A89027F7F5D342"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3FEB2704DC0411ECA6A89027F7F5D342" stRef:documentID="xmp.did:3FEB2705DC0411ECA6A89027F7F5D342"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>. ....PLTE....l+-,ool...m..4CM...."4F..t......gNjWI...qPsfV..t...K6'.Y4...knI2.$5.vfJB73#.......Tel.X......

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6844)
Category:	downloaded
Size (bytes):	6845
Entropy (8bit):	4.8931151628752305
Encrypted:	false
SSDEEP:	192:k+bxQh7AvA9d8qlFl8Z/CS//NMzX/Drwi/uh5a:k+bxMegd8qlF7tMi/uW
MD5:	EEFF2190D5F1AABA1F8981FF8558D8F9
SHA1:	C62D55E92F71587FBCA2E05657AE7BF0B93DFE63
SHA-256:	C928AD073FEDB172AD105F8830AF70F4F9258F5385C2F2654A5DF83FA0F58B87
SHA-512:	0D4E117B531BC04494C0B32AD2BD67FE0E107455B1AE5F2B9F9443FE578E25692176C398BCD93D2E5463BD5FF8E8520F274346E2DCE22FDA84202AA7F78741F5
Malicious:	false
Reputation:	low
URL:	https://d1639lhkj5l89m.cloudfront.net/css/merchant/auth/auth.min.css
Preview:	form.m-t .btn{padding:15px 20px;font-weight:bold}.input-group-addon{padding:11px 15px;color:#092c4c}a#login_by_password,a#login_by_shopname{margin-bottom:20px;margin-left:10px}a#login_by_password{margin-top:20px}a#login_by_shopname{margin-top:0}a#login_by_shopname,.remember-me{display:inline-block}.remember-me{float:right;margin-right:10px;margin-top:0}.remember-me label{font-size:85%}a#forgot-password-btn{margin-left:10px}div.login_form_container{display:flex;align-items:center;justify-content:center;height:100vh;flex-direction:column}div.login_form_container div.logo-container{text-align:center}div.login_form_container div.logo-container{padding-bottom:30px}body{background-size:cover}div.merchant-auth section.box-forms{background:unset}@media(max-width: 992px){div.merchant-auth .hidden-mobile{display:none !important}div.merchant-auth .visible-block-mobile{display:block !important}}@media(min-width: 992px){div.merchant-auth .hidden-desktop{display:none !important}div.merchant-auth .vi

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65393)
Category:	downloaded
Size (bytes):	174333
Entropy (8bit):	4.706179597349059
Encrypted:	false
SSDEEP:	1536:Kwv1E8SIZlJ/Zg9ADlnIZ+mqX565dWGFIibJbiC8IYiy6BFAXq6Y18GMF63kAmhT:N1E1IZ3/g2ln++1glbqMAXHR
MD5:	95FE9653F2C45892B7E58090566F510F
SHA1:	BE3795CAEAADA195D12C96BB689A7F0B6F8D63B1
SHA-256:	257418DE09101FF7791D410F420F9320141CE0436C264B076D46539B0EA0F830
SHA-512:	ACE73C0AFFB5EE5C14308E4EAC07C952F76C9D04EF44C19B5C73F3152F6D7543D24AFE8573F6DB1D4C757298B9EE215BC13BB883315D5C9BEF4E79F27C3E206E
Malicious:	false
Reputation:	low
URL:	https://pro.fontawesome.com/releases/v5.15.1/css/all.css
Preview:	/!. Font Awesome Pro 5.15.1 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license (Commercial License). */..fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pull-left{float:left}.fa-pull-right{float:rig

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10187), with no line terminators
Category:	downloaded
Size (bytes):	10187
Entropy (8bit):	5.17908949611252
Encrypted:	false
SSDEEP:	192:KFSkRRORr6kI8b1c4QK8xtBpkFbNO5uBbnMamqi7M6/hD2DjklCx37YoLlHn:KFSk/OROk5u4QK0kTOkcISh2DjkoxrpN
MD5:	C0053B411B753138AF468DB1BD3B19F3
SHA1:	7C3A187AA58F2B9E5446EDB761B3D4D2BA506FE7
SHA-256:	CE337EC7DDA4B3A741363A2673C7EDCE5C736F1660E2AA908131ECFD9DD1343F
SHA-512:	E0EAF480CC88817BCE216614F9813C10D7FC3930A8899F4C7C68B442E90846AABE0B5A536D9B273570671B7E8DDE614B347891839BD6699EDA355EC8B5FB1852
Malicious:	false
Reputation:	low
URL:	https://static.zdassets.com/ekr/asset_composer.js
Preview:	(()=>{var e,t,r={271:e=>{function t(e){const t=document.createElement("a");return t.href=e,t.search.split("?")[1]\|\|""}e.exports={getQueryParamsString:t,parseUrlParams:function(e){const r=t(e);return""===r?{}:r.split("&").reduce((function(e,t){const r=t.split("=");return e[r[0]]=decodeURIComponent(r[1]),e}),{})},loadScript:function(e,t=(()=>{})){const r=document.createElement("script");r.type="text/javascript",r.onerror=function(){t(new Error("Script failed to load"))},r.readyState?r.onreadystatechange=function(){"loaded"!==r.readyState&&"complete"!==r.readyState\|\|(r.onreadystatechange=null,t())}:r.onload=function(){t()},r.src=e,document.getElementsByTagName("head")[0].appendChild(r)}}}},n={};function s(e){var t=n[e];if(void 0!==t)return t.exports;var o=n[e]={id:e,loaded:!1,exports:{}};return r[e](o,o.exports,s),o.loaded=!0,o.exports}s.m=r,s.d=(e,t)=>{for(var r in t)s.o(t,r)&&!s.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:t[r]})},s.f={},s.e=e=>Promise.all(Object.keys(s.f).reduc

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 960 x 1080, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	333959
Entropy (8bit):	7.985072608304575
Encrypted:	false
SSDEEP:	6144:KJW2BRnA/e9DO6W80vxO4HnptFr7/B82dxxMrYDlBblqb7MHENU0:kDAGpO610v0ItFrH7LbGwki0
MD5:	4E823D7ACFC54046DA6807D6F9CBA28D
SHA1:	65CD7A07642518D86CAA1807DF8476D3A329A127
SHA-256:	826FBC1D556E0CF1CC2DCBAA3D49CA152CFF58F8B19A26C892CC3CC3F3116FC9
SHA-512:	422080E95B38C6F8AB57781FB72CF34B63610D606D78FC03D81F0F5CFFB4EDA775E63C214DB4C609B7B8D696BF083132B5426B3E705111AFF0128E3D5DBC2575
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......8......nES....tEXtSoftware.Adobe ImageReadyq.e<...$iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.dabacbb, 2021/04/14-00:39:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 23.0 (Windows)" xmpMM:InstanceID="xmp.iid:3FEB2706DC0411ECA6A89027F7F5D342" xmpMM:DocumentID="xmp.did:3FEB2707DC0411ECA6A89027F7F5D342"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3FEB2704DC0411ECA6A89027F7F5D342" stRef:documentID="xmp.did:3FEB2705DC0411ECA6A89027F7F5D342"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>. ....PLTE....l+-,ool...m..4CM...."4F..t......gNjWI...qPsfV..t...K6'.Y4...knI2.$5.vfJB73#.......Tel.X......

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15406
Entropy (8bit):	2.9406015946204427
Encrypted:	false
SSDEEP:	96:7TI4TBsnckS6sQlQBGvZOZANrQqGLennOABl0ZD:7TI4T2dS6sQlQBGeOrQXAOA4
MD5:	41BBB5A57E551BD81C8F9AD73C95B058
SHA1:	53EF4385E62044966871D37209949B5AB8B17ED3
SHA-256:	881F74D0EFE1D85B3FBA4F200A4096612D8284F6644B10AA22EC73D64EF4AA5E
SHA-512:	F1D00A372749E4B6884490638715A0060172A033044C20661EB9DCE21E1DE96B4DA0BDEF9B521B3A95A2D7431FB5F332F7450A37C0C2DD0404128F84EEF297CE
Malicious:	false
Reputation:	low
URL:	https://af.uppromote.com/favicon.ico
Preview:	............ .h...6... .... .(.......00.... .h&......(....... ..... .........................@M..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..@M..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..LX..al..DQ..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..{.......Q]..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..IV..Q]..oy..........pz..O[..AN..AN..AN..AN..AN..AN..AN..AN..al..............................ER..AN..AN..AN..AN..AN..AN..AN..........hs..........MY..~.......JW..AN..AN..AN..AN..AN..AN..AN..........EQ..........`j..........JV..AN..AN..AN..AN..AN..AN..AN..........EQ......................CP..AN..AN..AN..AN..AN..AN..AN..\|.......EQ..........R^..Q]..CP..AN..AN..AN..AN..AN..AN..AN..AN..Wb..cn..BO..Xc..fq..FS..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..........cm..........IV..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..Ze..................AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..IU..}...Ze..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN..AN

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 18, 2024 21:18:42.112457991 CEST	49702	80	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:42.113312006 CEST	49704	80	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:42.232789040 CEST	80	49702	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:42.233025074 CEST	49702	80	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:42.233417988 CEST	80	49704	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:42.233458996 CEST	49702	80	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:42.233491898 CEST	49704	80	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:42.353605986 CEST	80	49702	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:42.353634119 CEST	80	49702	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:42.406403065 CEST	49702	80	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:42.484828949 CEST	49707	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:42.484860897 CEST	443	49707	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:42.484941959 CEST	49707	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:42.485136986 CEST	49707	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:42.485145092 CEST	443	49707	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:42.735117912 CEST	443	49707	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:42.735347033 CEST	49707	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:42.735361099 CEST	443	49707	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:42.736457109 CEST	443	49707	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:42.736516953 CEST	49707	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:42.737443924 CEST	49707	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:42.737512112 CEST	443	49707	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:42.737605095 CEST	49707	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:42.737612009 CEST	443	49707	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:42.789417028 CEST	49707	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:42.995208025 CEST	443	49707	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:42.995254040 CEST	443	49707	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:42.995260954 CEST	443	49707	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:42.995281935 CEST	443	49707	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:42.995290041 CEST	443	49707	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:42.995325089 CEST	49707	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:42.995361090 CEST	443	49707	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:42.995392084 CEST	49707	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:42.995394945 CEST	443	49707	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:42.995451927 CEST	49707	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:42.996745110 CEST	49707	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:42.996771097 CEST	443	49707	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.022502899 CEST	49708	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.022538900 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.022638083 CEST	49708	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.023818970 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.023845911 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.023897886 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.024204016 CEST	49710	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.024235010 CEST	443	49710	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.024286032 CEST	49710	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.025264978 CEST	49708	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.025278091 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.027291059 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.027302027 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.027589083 CEST	49710	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.027612925 CEST	443	49710	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.129452944 CEST	49713	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:43.129534960 CEST	443	49713	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:43.129590988 CEST	49714	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:43.129605055 CEST	443	49714	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:43.129614115 CEST	49713	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:43.129646063 CEST	49714	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:43.129837990 CEST	49713	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:43.129875898 CEST	443	49713	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:43.130093098 CEST	49714	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:43.130101919 CEST	443	49714	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:43.134740114 CEST	49716	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.134758949 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.134813070 CEST	49716	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.134900093 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.134912014 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.134957075 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.135035992 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.135059118 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.135106087 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.135221958 CEST	49719	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.135255098 CEST	443	49719	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.135319948 CEST	49719	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.135477066 CEST	49720	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.135519028 CEST	443	49720	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.135587931 CEST	49720	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.135627985 CEST	49721	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.135678053 CEST	443	49721	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.135741949 CEST	49721	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.135828972 CEST	49716	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.135850906 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.135967970 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.135977030 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.136096001 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.136128902 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.136231899 CEST	49719	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.136259079 CEST	443	49719	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.136352062 CEST	49720	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.136368036 CEST	443	49720	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.136559010 CEST	49721	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.136598110 CEST	443	49721	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.276457071 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.277000904 CEST	49708	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.277019024 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.278198957 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.278532982 CEST	49708	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.278755903 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.278950930 CEST	49708	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.283759117 CEST	443	49710	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.283977985 CEST	49710	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.283993959 CEST	443	49710	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.284368038 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.284552097 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.284569979 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.285051107 CEST	443	49710	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.285119057 CEST	49710	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.285406113 CEST	49710	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.285468102 CEST	443	49710	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.285552025 CEST	49710	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.285561085 CEST	443	49710	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.285662889 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.285926104 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.285998106 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.286005020 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.286092997 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.324122906 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.327416897 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.327430964 CEST	49710	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.328269958 CEST	49708	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.346941948 CEST	443	49713	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:43.347198963 CEST	49713	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:43.347224951 CEST	443	49713	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:43.348654032 CEST	443	49713	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:43.348774910 CEST	49713	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:43.349688053 CEST	49713	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:43.349821091 CEST	443	49713	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:43.350023031 CEST	49713	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:43.350035906 CEST	443	49713	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:43.354070902 CEST	443	49714	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:43.354434013 CEST	49714	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:43.354446888 CEST	443	49714	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:43.355772972 CEST	443	49714	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:43.355880022 CEST	49714	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:43.356714010 CEST	49714	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:43.356816053 CEST	443	49714	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:43.356895924 CEST	49714	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:43.358346939 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.358789921 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.358803034 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.359920979 CEST	443	49719	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.360112906 CEST	49719	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.360126972 CEST	443	49721	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.360136032 CEST	443	49719	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.360179901 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.360245943 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.360306978 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.360415936 CEST	49721	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.360445976 CEST	443	49721	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.360771894 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.360783100 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.361205101 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.361208916 CEST	443	49719	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.361219883 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.361288071 CEST	49719	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.361298084 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.361506939 CEST	49719	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.361578941 CEST	443	49719	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.361579895 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.361588001 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.361731052 CEST	443	49721	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.361789942 CEST	49716	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.361799002 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.361799955 CEST	49719	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.361809015 CEST	443	49719	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.361809015 CEST	49721	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.361902952 CEST	443	49720	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.362004995 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.362031937 CEST	49721	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.362071991 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.362107038 CEST	443	49721	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.362154007 CEST	49720	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.362174988 CEST	443	49720	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.362437010 CEST	49721	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.362454891 CEST	443	49721	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.362932920 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.363008022 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.363078117 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.363085032 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.363219976 CEST	443	49720	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.363274097 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.363293886 CEST	49720	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.363426924 CEST	49716	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.363892078 CEST	49716	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.363960981 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.364007950 CEST	49716	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.364051104 CEST	49720	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.364125967 CEST	443	49720	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.364197969 CEST	49720	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.364204884 CEST	443	49720	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.390419006 CEST	49713	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:43.404120922 CEST	443	49714	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:43.404136896 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.406428099 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.406433105 CEST	49714	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:43.406433105 CEST	49716	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.406435966 CEST	49720	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.406444073 CEST	443	49714	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:43.406440973 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.406476974 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.406613111 CEST	49721	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.406614065 CEST	49719	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.454401970 CEST	49714	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:43.454401970 CEST	49716	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.548768044 CEST	443	49713	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:43.548964977 CEST	443	49713	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:43.549109936 CEST	49713	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:43.549124002 CEST	443	49713	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:43.549148083 CEST	443	49713	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:43.549211025 CEST	49713	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:43.549623966 CEST	49713	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:43.549638987 CEST	443	49713	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:43.554270983 CEST	443	49714	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:43.554338932 CEST	443	49714	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:43.554368019 CEST	443	49714	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:43.554390907 CEST	49714	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:43.554403067 CEST	443	49714	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:43.554440975 CEST	443	49714	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:43.554481983 CEST	49714	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:43.554481983 CEST	49714	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:43.555053949 CEST	49714	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:43.555068970 CEST	443	49714	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:43.587968111 CEST	443	49721	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.600367069 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.602436066 CEST	443	49721	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.602463007 CEST	443	49721	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.602507114 CEST	443	49721	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.602516890 CEST	49721	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.602547884 CEST	443	49721	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.602591991 CEST	49721	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.602591991 CEST	49721	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.602631092 CEST	49721	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.615634918 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.615645885 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.615655899 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.615726948 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.615748882 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.615808964 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.619754076 CEST	443	49721	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.619807005 CEST	443	49721	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.619843006 CEST	49721	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.619858980 CEST	443	49721	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.619889975 CEST	49721	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.631776094 CEST	443	49719	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.631844044 CEST	443	49719	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.631880045 CEST	443	49719	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.631906033 CEST	49719	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.631917953 CEST	443	49719	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.631963015 CEST	49719	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.632421017 CEST	49719	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.632489920 CEST	443	49719	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.632549047 CEST	49719	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.633053064 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.633070946 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.633117914 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.633133888 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.633148909 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.634466887 CEST	49722	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.634505033 CEST	443	49722	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.634574890 CEST	49722	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.634849072 CEST	49722	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.634862900 CEST	443	49722	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.635535955 CEST	443	49720	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.635610104 CEST	443	49720	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.635689974 CEST	49720	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.635751963 CEST	443	49720	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.635834932 CEST	443	49720	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.635895967 CEST	49720	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.636367083 CEST	49720	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.636459112 CEST	443	49720	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.636528015 CEST	49720	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.637813091 CEST	49723	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.637880087 CEST	443	49723	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.638020992 CEST	49723	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.638128042 CEST	49723	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.638160944 CEST	443	49723	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.638501883 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.638561964 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.638583899 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.638627052 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.638650894 CEST	49708	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.638650894 CEST	49708	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.638664961 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.638674021 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.638686895 CEST	49708	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.638716936 CEST	49708	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.638768911 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.638813019 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.638859987 CEST	49708	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.638860941 CEST	49708	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.638866901 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.638899088 CEST	49708	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.638911963 CEST	49708	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.656502008 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.656522036 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.656528950 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.656539917 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.656567097 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.656589031 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.656599998 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.656611919 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.656764030 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.656997919 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.657013893 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.657048941 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.657061100 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.657079935 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.657109976 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.658272982 CEST	443	49710	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.658304930 CEST	443	49710	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.658313036 CEST	443	49710	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.658327103 CEST	443	49710	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.658356905 CEST	443	49710	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.658384085 CEST	49710	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.658397913 CEST	443	49710	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.658411980 CEST	49710	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.658446074 CEST	49710	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.658684969 CEST	443	49710	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.658701897 CEST	443	49710	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.658759117 CEST	49710	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.658767939 CEST	443	49710	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.658807039 CEST	49710	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.659946918 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.659976006 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.659982920 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.659996033 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.660022020 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.660032034 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.660041094 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.660058975 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.660084009 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.662168026 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.662184954 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.662193060 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.662205935 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.662211895 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.662218094 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.662277937 CEST	49716	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.662277937 CEST	49716	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.662296057 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.662374020 CEST	49716	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.662411928 CEST	49721	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.677335978 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.677381039 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.677419901 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.677428007 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.677459002 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.677479029 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.677481890 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.679224968 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.679502010 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.679511070 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.679599047 CEST	49716	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.679605961 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.679617882 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.679687977 CEST	49716	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.679697037 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.692691088 CEST	443	49721	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.692714930 CEST	443	49721	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.692794085 CEST	49721	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.692815065 CEST	443	49721	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.711464882 CEST	443	49721	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.711513996 CEST	443	49721	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.711683989 CEST	49721	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.711683989 CEST	49721	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.711697102 CEST	443	49721	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.712645054 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.712655067 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.712685108 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.712726116 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.712735891 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.712748051 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.712783098 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.725389957 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.725584984 CEST	49716	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.728910923 CEST	443	49721	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.728955984 CEST	443	49721	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.729007006 CEST	49721	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.729027033 CEST	443	49721	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.729157925 CEST	49721	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.732965946 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.732981920 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.733057976 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.733069897 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.733118057 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.744807959 CEST	443	49721	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.744867086 CEST	443	49721	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.744900942 CEST	49721	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.744936943 CEST	443	49721	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.744971991 CEST	49721	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.744997978 CEST	49721	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.745028973 CEST	443	49721	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.745096922 CEST	49721	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.745244980 CEST	49721	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.745264053 CEST	443	49721	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.747220039 CEST	49725	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:43.747256994 CEST	443	49725	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:43.747338057 CEST	49725	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:43.747538090 CEST	49725	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:43.747550011 CEST	443	49725	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:43.748053074 CEST	49726	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.748080969 CEST	443	49726	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.748138905 CEST	49726	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.748338938 CEST	49726	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.748366117 CEST	443	49726	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.748991966 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.749067068 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.749094963 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.749103069 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.749131918 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.753345013 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.753354073 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.753416061 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.753432035 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.753447056 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.753487110 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.753494024 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.758563042 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.758595943 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.758656979 CEST	49716	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.758697033 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.758717060 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.758765936 CEST	49716	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.759011030 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.759064913 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.759093046 CEST	49708	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.759100914 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.759119034 CEST	49708	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.759175062 CEST	49708	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.759258032 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.759300947 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.759327888 CEST	49708	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.759342909 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.759382010 CEST	49708	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.759407043 CEST	49708	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.759548903 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.759592056 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.759618044 CEST	49708	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.759630919 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.759669065 CEST	49708	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.759669065 CEST	49708	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.766432047 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.766494036 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.766526937 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.766536951 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.766571045 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.770750999 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.770766973 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.770829916 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.770838022 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.770884991 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.776580095 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.776653051 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.778724909 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.778745890 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.778789043 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.778800011 CEST	49716	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.778815985 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.778862000 CEST	49716	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.778906107 CEST	49716	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.781495094 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.781570911 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.781585932 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.781596899 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.781636953 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.781718969 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.781764984 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.781788111 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.781795979 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.781822920 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.781841993 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.782013893 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.782071114 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.782097101 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.782104015 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.782128096 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.782146931 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.782804012 CEST	443	49710	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.782824039 CEST	443	49710	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.782886982 CEST	49710	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.782896996 CEST	443	49710	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.782948971 CEST	49710	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.783444881 CEST	443	49710	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.783471107 CEST	443	49710	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.783502102 CEST	443	49710	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.783515930 CEST	49710	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.783528090 CEST	443	49710	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.783543110 CEST	49710	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.783555031 CEST	49710	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.783567905 CEST	443	49710	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.783615112 CEST	49710	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.783698082 CEST	49710	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.783715963 CEST	443	49710	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.788311005 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.788400888 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.788435936 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.788492918 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.797563076 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.797616959 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.797652960 CEST	49716	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.797660112 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.797702074 CEST	49716	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.797702074 CEST	49716	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.804224014 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.804266930 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.804292917 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.804296970 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.804321051 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.804342985 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.809920073 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.809993982 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.812773943 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.812834978 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.814580917 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.814642906 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.814661026 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.814673901 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.814713955 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.814933062 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.814980030 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.815007925 CEST	49716	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.815025091 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.815043926 CEST	49716	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.815069914 CEST	49716	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.829920053 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.829942942 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.829967976 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.829998970 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.830005884 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.830014944 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.830028057 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.830053091 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.844245911 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.844269037 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.844439030 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.844439030 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.844451904 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.844501019 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.854712963 CEST	443	49722	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.854994059 CEST	49722	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.855006933 CEST	443	49722	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.855503082 CEST	443	49722	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.856194019 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.856322050 CEST	49716	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.856334925 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.856349945 CEST	49722	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.856399059 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.856441975 CEST	443	49722	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.856482983 CEST	49716	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.856645107 CEST	49722	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.856759071 CEST	49716	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.856775999 CEST	443	49716	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.858359098 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.858407974 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.858437061 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.858443022 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.858472109 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.858486891 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.859639883 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.859661102 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.859733105 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.859740973 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.859781027 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.859803915 CEST	443	49723	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.859814882 CEST	49727	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:43.859838009 CEST	443	49727	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:43.859899998 CEST	49727	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:43.860209942 CEST	49723	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.860270977 CEST	443	49723	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.860413074 CEST	49727	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:43.860423088 CEST	443	49727	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:43.863820076 CEST	443	49723	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.863894939 CEST	49723	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.864233971 CEST	49723	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.864324093 CEST	443	49723	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.864348888 CEST	49723	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.867031097 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.867065907 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.867103100 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.867108107 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.867142916 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.873383045 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.873403072 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.873450041 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.873459101 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.873472929 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.873507023 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.876091957 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.876176119 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.876200914 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.876256943 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.879056931 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.879108906 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.879143953 CEST	49708	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.879163027 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.879189968 CEST	49708	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.879326105 CEST	49708	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.880340099 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.880384922 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.880422115 CEST	49708	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.880439043 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.880475998 CEST	49708	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.880497932 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.880568981 CEST	49708	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.880568981 CEST	49708	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.880578041 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.880664110 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.880706072 CEST	49708	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.880846977 CEST	49708	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.880861044 CEST	443	49708	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.884869099 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.884903908 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.884943008 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.884952068 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.884984016 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.885015011 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.888279915 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.888324022 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.888360977 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.888369083 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.888400078 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.890419006 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.890475988 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.890484095 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.890532970 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.895214081 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.895294905 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.895299911 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.895308971 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.895370007 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.897057056 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.897141933 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.900115967 CEST	443	49722	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.901597023 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.901691914 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.901724100 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.901782990 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.906016111 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.906069040 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.906106949 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.906116962 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.906150103 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.906166077 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.906362057 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.906405926 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.906434059 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.906440973 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.906471014 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.906490088 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.906620979 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.906661987 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.906687021 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.906693935 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.906723976 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.906739950 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.907030106 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.907079935 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.907099009 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.907104969 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.907140017 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.907165051 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.907363892 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.907407045 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.907430887 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.907438040 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.907468081 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.907483101 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.907708883 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.907752991 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.907780886 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.907788992 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.907816887 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.907835960 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.907838106 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.907867908 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.907928944 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.907938004 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.908016920 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.908071995 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.908132076 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.908152103 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.908154011 CEST	49709	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:43.908159971 CEST	443	49709	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:43.908178091 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.908226967 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.908232927 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.912108898 CEST	443	49723	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.912334919 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.912379980 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.912409067 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.912412882 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.912456036 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.915512085 CEST	49723	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.915538073 CEST	443	49723	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.918512106 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.918534994 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.918584108 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.918591976 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.918627977 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.923074007 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.923118114 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.923162937 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.923167944 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.923194885 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.923213959 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.928350925 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.928395033 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.928436995 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.928452015 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.928478003 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.932353973 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.932396889 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.932423115 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.932427883 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.932473898 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.935520887 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.935564041 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.935600042 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.935606956 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.935623884 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.935647011 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.936079025 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.936152935 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.942580938 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.942749977 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.942760944 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.942809105 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.942893028 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.942939043 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.942939043 CEST	49717	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.942945957 CEST	443	49717	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.944570065 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.944607973 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.944670916 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.944688082 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.944703102 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.944730043 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.951467037 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.951500893 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.951550961 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.951558113 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.951590061 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.951610088 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.959971905 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.959991932 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.960082054 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.960119963 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.960159063 CEST	443	49726	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.960181952 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.960488081 CEST	49726	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.960500002 CEST	443	49726	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.961522102 CEST	443	49726	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.961591005 CEST	49726	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.961997032 CEST	49726	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.961997032 CEST	49726	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.962059021 CEST	443	49726	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.962909937 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.962979078 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.962984085 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.963021040 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.963062048 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.963422060 CEST	49723	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.963536978 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.963557005 CEST	443	49718	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:43.963568926 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.963606119 CEST	49718	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:43.966212034 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:43.966279984 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:43.966389894 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:43.966559887 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:43.966589928 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:43.985428095 CEST	443	49725	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:43.985630035 CEST	49725	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:43.985667944 CEST	443	49725	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:43.986768961 CEST	443	49725	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:43.986840010 CEST	49725	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:43.987121105 CEST	49725	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:43.987194061 CEST	443	49725	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:43.987267971 CEST	49725	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:43.987283945 CEST	443	49725	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.011389971 CEST	49726	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:44.011400938 CEST	443	49726	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:44.027439117 CEST	49725	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.058456898 CEST	49726	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:44.062875986 CEST	443	49722	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:44.077373028 CEST	443	49722	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:44.077425957 CEST	443	49722	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:44.077476978 CEST	49722	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:44.077491999 CEST	443	49722	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:44.077528954 CEST	49722	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:44.077550888 CEST	49722	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:44.094770908 CEST	443	49722	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:44.094826937 CEST	443	49722	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:44.094863892 CEST	49722	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:44.094871044 CEST	443	49722	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:44.094882011 CEST	49722	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:44.103729010 CEST	443	49722	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:44.103807926 CEST	49722	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:44.103816032 CEST	443	49722	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:44.103863955 CEST	49722	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:44.103893042 CEST	443	49722	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:44.103944063 CEST	49722	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:44.104005098 CEST	49722	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:44.104017973 CEST	443	49722	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:44.104047060 CEST	443	49727	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.104525089 CEST	49727	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.104532003 CEST	443	49727	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.105612040 CEST	443	49727	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.105678082 CEST	49727	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.106177092 CEST	49727	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.106245995 CEST	443	49727	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.106359959 CEST	49727	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.106365919 CEST	443	49727	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.135452032 CEST	443	49723	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:44.135478020 CEST	443	49723	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:44.135481119 CEST	443	49723	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:44.135533094 CEST	443	49723	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:44.135549068 CEST	443	49723	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:44.135560989 CEST	49723	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:44.135570049 CEST	443	49723	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:44.135581017 CEST	443	49723	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:44.135598898 CEST	49723	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:44.135622025 CEST	49723	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:44.152820110 CEST	443	49723	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:44.152829885 CEST	443	49723	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:44.152879000 CEST	443	49723	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:44.152910948 CEST	49723	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:44.152926922 CEST	443	49723	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:44.152935982 CEST	443	49723	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:44.152940035 CEST	49723	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:44.152997017 CEST	49723	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:44.153405905 CEST	49727	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.201808929 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 18, 2024 21:18:44.212218046 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.212857008 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.212933064 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.214140892 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.214234114 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.214910984 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.214994907 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.215054035 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.226177931 CEST	443	49723	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:44.226264954 CEST	443	49723	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:44.226303101 CEST	49723	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:44.226320028 CEST	443	49723	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:44.226388931 CEST	49723	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:44.226438999 CEST	443	49723	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:44.226504087 CEST	49723	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:44.226598024 CEST	49723	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:44.226629019 CEST	443	49723	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:44.226825953 CEST	443	49726	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:44.227010965 CEST	443	49726	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:44.227080107 CEST	49726	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:44.229993105 CEST	49726	443	192.168.2.16	108.139.16.113
Apr 18, 2024 21:18:44.230015993 CEST	443	49726	108.139.16.113	192.168.2.16
Apr 18, 2024 21:18:44.244452000 CEST	443	49725	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.244517088 CEST	443	49725	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.244560957 CEST	443	49725	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.244585991 CEST	49725	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.244638920 CEST	443	49725	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.244703054 CEST	49725	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.245608091 CEST	49725	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.245698929 CEST	443	49725	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.245773077 CEST	49725	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.260126114 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.264538050 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.264602900 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.312427998 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.364147902 CEST	443	49727	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.364170074 CEST	443	49727	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.364178896 CEST	443	49727	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.364195108 CEST	443	49727	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.364223003 CEST	49727	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.364231110 CEST	443	49727	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.364242077 CEST	443	49727	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.364255905 CEST	49727	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.364289999 CEST	49727	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.364306927 CEST	49727	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.377435923 CEST	443	49727	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.377521038 CEST	443	49727	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.377531052 CEST	49727	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.377536058 CEST	443	49727	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.377587080 CEST	49727	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.466222048 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.466252089 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.466259003 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.466274023 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.466279984 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.466285944 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.466324091 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.466399908 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.466439009 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.466465950 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.468421936 CEST	443	49727	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.468449116 CEST	443	49727	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.468501091 CEST	49727	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.468512058 CEST	443	49727	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.468538046 CEST	49727	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.468556881 CEST	49727	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.485940933 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.485956907 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.486004114 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.486054897 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.486103058 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.486135960 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.486164093 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.491812944 CEST	443	49727	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.491848946 CEST	443	49727	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.491889954 CEST	49727	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.491914988 CEST	443	49727	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.491930962 CEST	49727	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.491959095 CEST	49727	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.502418041 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 18, 2024 21:18:44.511856079 CEST	443	49727	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.511879921 CEST	443	49727	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.511969090 CEST	49727	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.511977911 CEST	443	49727	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.512026072 CEST	49727	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.513550043 CEST	443	49727	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.513609886 CEST	49727	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.559815884 CEST	443	49727	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.559843063 CEST	443	49727	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.559925079 CEST	49727	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.559937954 CEST	443	49727	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.559986115 CEST	49727	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.576096058 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.576191902 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.576239109 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.576260090 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.576275110 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.576306105 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.595053911 CEST	49736	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:44.595084906 CEST	443	49736	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:44.595154047 CEST	49736	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:44.595361948 CEST	49736	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:44.595369101 CEST	443	49736	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:44.595457077 CEST	443	49727	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.595505953 CEST	443	49727	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.595530033 CEST	49727	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.595536947 CEST	443	49727	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.595551968 CEST	443	49727	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.595556021 CEST	49727	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.595580101 CEST	49727	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.595597029 CEST	49727	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.596095085 CEST	49727	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.596117020 CEST	443	49727	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.599106073 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.599155903 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.599198103 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.599215031 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.599247932 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.599268913 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.614068985 CEST	49737	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:44.614111900 CEST	443	49737	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:44.614175081 CEST	49737	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:44.614389896 CEST	49737	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:44.614407063 CEST	443	49737	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:44.620569944 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.620644093 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.620687008 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.620703936 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.620758057 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.620779037 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.654174089 CEST	49738	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:44.654272079 CEST	443	49738	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:44.654380083 CEST	49738	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:44.654653072 CEST	49738	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:44.654690981 CEST	443	49738	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:44.685811043 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.685862064 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.685918093 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.685964108 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.685996056 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.686126947 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.701237917 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.701304913 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.701349020 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.701365948 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.701417923 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.701436996 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.703540087 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.703612089 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.718823910 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.718878031 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.718921900 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.718940020 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.718972921 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.718997955 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.735296965 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.735346079 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.735404968 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.735423088 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.735451937 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.735471964 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.750164986 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.750216007 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.750252962 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.750267982 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.750302076 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.750339985 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.752480984 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.752557993 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.765202045 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.765248060 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.765346050 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.765373945 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.765405893 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.765433073 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.776299000 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.776345968 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.776463985 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.776482105 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.776540041 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.786360025 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.786405087 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.786444902 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.786467075 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.786495924 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.786516905 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.806456089 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.806500912 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.806693077 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.806694031 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.806762934 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.806849003 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.812802076 CEST	443	49736	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:44.813046932 CEST	49736	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:44.813055992 CEST	443	49736	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:44.814310074 CEST	443	49736	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:44.814636946 CEST	49736	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:44.814781904 CEST	49736	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:44.814786911 CEST	443	49736	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:44.814841986 CEST	443	49736	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:44.815382004 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.815426111 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.815474987 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.815491915 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.815521955 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.815551043 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.824902058 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.824945927 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.824999094 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.825014114 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.825041056 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.825068951 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.825871944 CEST	443	49737	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:44.826097012 CEST	49737	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:44.826108932 CEST	443	49737	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:44.827186108 CEST	443	49737	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:44.827263117 CEST	49737	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:44.827621937 CEST	49737	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:44.827683926 CEST	443	49737	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:44.827804089 CEST	49737	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:44.827811956 CEST	443	49737	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:44.833255053 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.833297968 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.833338022 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.833353043 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.833393097 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.833415031 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.840485096 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.840531111 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.840606928 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.840620995 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.840660095 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.840679884 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.848395109 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.848445892 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.848512888 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.848527908 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.848553896 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.848592997 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.856024981 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.856139898 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.856185913 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.856200933 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.856229067 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.856264114 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.864212036 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.864255905 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.864343882 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.864360094 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.864393950 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.864412069 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.866457939 CEST	49736	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:44.871515989 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.871560097 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.871619940 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.871634960 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.871659994 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.871700048 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.877840996 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.877938032 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.878088951 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.878108978 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.878168106 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.879179001 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.879344940 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.879386902 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.879411936 CEST	443	49730	108.138.82.25	192.168.2.16
Apr 18, 2024 21:18:44.879436016 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.879436016 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.879486084 CEST	49730	443	192.168.2.16	108.138.82.25
Apr 18, 2024 21:18:44.881681919 CEST	49737	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:44.886225939 CEST	443	49738	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:44.887175083 CEST	49738	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:44.887195110 CEST	443	49738	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:44.888478041 CEST	443	49738	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:44.888561010 CEST	49738	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:44.889375925 CEST	49738	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:44.889458895 CEST	443	49738	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:44.889538050 CEST	49738	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:44.889552116 CEST	443	49738	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:44.929431915 CEST	49738	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:45.019928932 CEST	443	49736	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:45.020205021 CEST	443	49736	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:45.020240068 CEST	443	49736	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:45.020256042 CEST	49736	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:45.020268917 CEST	443	49736	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:45.020313025 CEST	49736	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:45.020319939 CEST	443	49736	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:45.020330906 CEST	443	49736	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:45.020390034 CEST	49736	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:45.020570993 CEST	49736	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:45.020585060 CEST	443	49736	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:45.033195972 CEST	443	49737	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:45.033329964 CEST	443	49737	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:45.033392906 CEST	49737	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:45.034032106 CEST	49737	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:45.034074068 CEST	443	49737	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:45.105427980 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 18, 2024 21:18:45.128113985 CEST	49741	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:45.128153086 CEST	443	49741	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:45.128237963 CEST	49741	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:45.128431082 CEST	49741	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:45.128448963 CEST	443	49741	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:45.128571987 CEST	443	49738	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:45.128763914 CEST	443	49738	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:45.128833055 CEST	49738	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:45.129209042 CEST	49738	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:45.129260063 CEST	443	49738	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:45.129292011 CEST	49738	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:45.129323006 CEST	49738	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:45.257200003 CEST	49742	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:45.257236958 CEST	443	49742	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:45.257320881 CEST	49742	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:45.257504940 CEST	49742	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:45.257519960 CEST	443	49742	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:45.340694904 CEST	443	49741	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:45.340922117 CEST	49741	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:45.340929985 CEST	443	49741	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:45.342073917 CEST	443	49741	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:45.342128038 CEST	49741	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:45.342577934 CEST	49741	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:45.342641115 CEST	443	49741	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:45.342736959 CEST	49741	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:45.342742920 CEST	443	49741	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:45.390413046 CEST	49741	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:45.477564096 CEST	443	49742	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:45.478887081 CEST	49742	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:45.478897095 CEST	443	49742	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:45.480062008 CEST	443	49742	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:45.480132103 CEST	49742	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:45.481252909 CEST	49742	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:45.481316090 CEST	443	49742	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:45.481415987 CEST	49742	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:45.481421947 CEST	443	49742	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:45.534559011 CEST	49742	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:45.550894022 CEST	443	49741	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:45.550997972 CEST	443	49741	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:45.551029921 CEST	443	49741	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:45.551048040 CEST	49741	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:45.551062107 CEST	443	49741	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:45.551107883 CEST	49741	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:45.551115990 CEST	443	49741	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:45.551147938 CEST	443	49741	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:45.551187038 CEST	49741	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:45.561122894 CEST	49741	443	192.168.2.16	151.101.193.229
Apr 18, 2024 21:18:45.561155081 CEST	443	49741	151.101.193.229	192.168.2.16
Apr 18, 2024 21:18:45.681895971 CEST	49744	443	192.168.2.16	216.239.36.181
Apr 18, 2024 21:18:45.681984901 CEST	443	49744	216.239.36.181	192.168.2.16
Apr 18, 2024 21:18:45.682087898 CEST	49744	443	192.168.2.16	216.239.36.181
Apr 18, 2024 21:18:45.682285070 CEST	49744	443	192.168.2.16	216.239.36.181
Apr 18, 2024 21:18:45.682317972 CEST	443	49744	216.239.36.181	192.168.2.16
Apr 18, 2024 21:18:45.683001995 CEST	49745	443	192.168.2.16	172.253.124.154
Apr 18, 2024 21:18:45.683037996 CEST	443	49745	172.253.124.154	192.168.2.16
Apr 18, 2024 21:18:45.683095932 CEST	49745	443	192.168.2.16	172.253.124.154
Apr 18, 2024 21:18:45.683248997 CEST	49745	443	192.168.2.16	172.253.124.154
Apr 18, 2024 21:18:45.683263063 CEST	443	49745	172.253.124.154	192.168.2.16
Apr 18, 2024 21:18:45.690524101 CEST	49746	443	192.168.2.16	142.250.105.157
Apr 18, 2024 21:18:45.690608978 CEST	443	49746	142.250.105.157	192.168.2.16
Apr 18, 2024 21:18:45.690686941 CEST	49746	443	192.168.2.16	142.250.105.157
Apr 18, 2024 21:18:45.690836906 CEST	49746	443	192.168.2.16	142.250.105.157
Apr 18, 2024 21:18:45.690871954 CEST	443	49746	142.250.105.157	192.168.2.16
Apr 18, 2024 21:18:45.745352983 CEST	443	49742	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:45.745404005 CEST	443	49742	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:45.745431900 CEST	443	49742	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:45.745457888 CEST	49742	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:45.745462894 CEST	443	49742	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:45.745485067 CEST	443	49742	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:45.745507956 CEST	49742	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:45.745570898 CEST	443	49742	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:45.745600939 CEST	443	49742	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:45.745613098 CEST	49742	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:45.745618105 CEST	443	49742	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:45.745663881 CEST	49742	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:45.745668888 CEST	443	49742	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:45.746160030 CEST	443	49742	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:45.746227026 CEST	49742	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:45.746381998 CEST	49742	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:45.746402979 CEST	443	49742	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:45.840882063 CEST	49747	443	192.168.2.16	172.253.124.154
Apr 18, 2024 21:18:45.840908051 CEST	443	49747	172.253.124.154	192.168.2.16
Apr 18, 2024 21:18:45.841008902 CEST	49747	443	192.168.2.16	172.253.124.154
Apr 18, 2024 21:18:45.841286898 CEST	49747	443	192.168.2.16	172.253.124.154
Apr 18, 2024 21:18:45.841300964 CEST	443	49747	172.253.124.154	192.168.2.16
Apr 18, 2024 21:18:45.856523991 CEST	49748	443	192.168.2.16	104.18.72.113
Apr 18, 2024 21:18:45.856587887 CEST	443	49748	104.18.72.113	192.168.2.16
Apr 18, 2024 21:18:45.856667995 CEST	49748	443	192.168.2.16	104.18.72.113
Apr 18, 2024 21:18:45.856834888 CEST	49748	443	192.168.2.16	104.18.72.113
Apr 18, 2024 21:18:45.856867075 CEST	443	49748	104.18.72.113	192.168.2.16
Apr 18, 2024 21:18:45.896820068 CEST	443	49744	216.239.36.181	192.168.2.16
Apr 18, 2024 21:18:45.897109032 CEST	49744	443	192.168.2.16	216.239.36.181
Apr 18, 2024 21:18:45.897136927 CEST	443	49744	216.239.36.181	192.168.2.16
Apr 18, 2024 21:18:45.897510052 CEST	443	49744	216.239.36.181	192.168.2.16
Apr 18, 2024 21:18:45.897579908 CEST	49744	443	192.168.2.16	216.239.36.181
Apr 18, 2024 21:18:45.898226976 CEST	443	49744	216.239.36.181	192.168.2.16
Apr 18, 2024 21:18:45.898287058 CEST	49744	443	192.168.2.16	216.239.36.181
Apr 18, 2024 21:18:45.899516106 CEST	49744	443	192.168.2.16	216.239.36.181
Apr 18, 2024 21:18:45.899585009 CEST	443	49744	216.239.36.181	192.168.2.16
Apr 18, 2024 21:18:45.899821997 CEST	49744	443	192.168.2.16	216.239.36.181
Apr 18, 2024 21:18:45.899830103 CEST	443	49744	216.239.36.181	192.168.2.16
Apr 18, 2024 21:18:45.907069921 CEST	443	49745	172.253.124.154	192.168.2.16
Apr 18, 2024 21:18:45.907291889 CEST	49745	443	192.168.2.16	172.253.124.154
Apr 18, 2024 21:18:45.907306910 CEST	443	49745	172.253.124.154	192.168.2.16
Apr 18, 2024 21:18:45.907573938 CEST	443	49746	142.250.105.157	192.168.2.16
Apr 18, 2024 21:18:45.907764912 CEST	49746	443	192.168.2.16	142.250.105.157
Apr 18, 2024 21:18:45.907799006 CEST	443	49746	142.250.105.157	192.168.2.16
Apr 18, 2024 21:18:45.908539057 CEST	443	49745	172.253.124.154	192.168.2.16
Apr 18, 2024 21:18:45.908612967 CEST	49745	443	192.168.2.16	172.253.124.154
Apr 18, 2024 21:18:45.908845901 CEST	443	49746	142.250.105.157	192.168.2.16
Apr 18, 2024 21:18:45.908916950 CEST	49746	443	192.168.2.16	142.250.105.157
Apr 18, 2024 21:18:45.909420013 CEST	49745	443	192.168.2.16	172.253.124.154
Apr 18, 2024 21:18:45.909485102 CEST	443	49745	172.253.124.154	192.168.2.16
Apr 18, 2024 21:18:45.909604073 CEST	49745	443	192.168.2.16	172.253.124.154
Apr 18, 2024 21:18:45.909610987 CEST	443	49745	172.253.124.154	192.168.2.16
Apr 18, 2024 21:18:45.909713030 CEST	49746	443	192.168.2.16	142.250.105.157
Apr 18, 2024 21:18:45.909791946 CEST	443	49746	142.250.105.157	192.168.2.16
Apr 18, 2024 21:18:45.910044909 CEST	49746	443	192.168.2.16	142.250.105.157
Apr 18, 2024 21:18:45.910060883 CEST	443	49746	142.250.105.157	192.168.2.16
Apr 18, 2024 21:18:45.948412895 CEST	49744	443	192.168.2.16	216.239.36.181
Apr 18, 2024 21:18:45.964409113 CEST	49746	443	192.168.2.16	142.250.105.157
Apr 18, 2024 21:18:45.964409113 CEST	49745	443	192.168.2.16	172.253.124.154
Apr 18, 2024 21:18:46.053433895 CEST	443	49747	172.253.124.154	192.168.2.16
Apr 18, 2024 21:18:46.053868055 CEST	49747	443	192.168.2.16	172.253.124.154
Apr 18, 2024 21:18:46.053880930 CEST	443	49747	172.253.124.154	192.168.2.16
Apr 18, 2024 21:18:46.054914951 CEST	443	49747	172.253.124.154	192.168.2.16
Apr 18, 2024 21:18:46.055315971 CEST	49747	443	192.168.2.16	172.253.124.154
Apr 18, 2024 21:18:46.056122065 CEST	49747	443	192.168.2.16	172.253.124.154
Apr 18, 2024 21:18:46.056122065 CEST	49747	443	192.168.2.16	172.253.124.154
Apr 18, 2024 21:18:46.056133986 CEST	443	49747	172.253.124.154	192.168.2.16
Apr 18, 2024 21:18:46.056190968 CEST	443	49747	172.253.124.154	192.168.2.16
Apr 18, 2024 21:18:46.074213982 CEST	443	49748	104.18.72.113	192.168.2.16
Apr 18, 2024 21:18:46.074460983 CEST	49748	443	192.168.2.16	104.18.72.113
Apr 18, 2024 21:18:46.074490070 CEST	443	49748	104.18.72.113	192.168.2.16
Apr 18, 2024 21:18:46.075503111 CEST	443	49748	104.18.72.113	192.168.2.16
Apr 18, 2024 21:18:46.075604916 CEST	49748	443	192.168.2.16	104.18.72.113
Apr 18, 2024 21:18:46.076548100 CEST	49748	443	192.168.2.16	104.18.72.113
Apr 18, 2024 21:18:46.076615095 CEST	443	49748	104.18.72.113	192.168.2.16
Apr 18, 2024 21:18:46.076699018 CEST	49748	443	192.168.2.16	104.18.72.113
Apr 18, 2024 21:18:46.076714039 CEST	443	49748	104.18.72.113	192.168.2.16
Apr 18, 2024 21:18:46.106667995 CEST	49747	443	192.168.2.16	172.253.124.154
Apr 18, 2024 21:18:46.106688023 CEST	443	49747	172.253.124.154	192.168.2.16
Apr 18, 2024 21:18:46.110682964 CEST	443	49744	216.239.36.181	192.168.2.16
Apr 18, 2024 21:18:46.110759020 CEST	443	49744	216.239.36.181	192.168.2.16
Apr 18, 2024 21:18:46.110816002 CEST	49744	443	192.168.2.16	216.239.36.181
Apr 18, 2024 21:18:46.111049891 CEST	49744	443	192.168.2.16	216.239.36.181
Apr 18, 2024 21:18:46.111088991 CEST	443	49744	216.239.36.181	192.168.2.16
Apr 18, 2024 21:18:46.111118078 CEST	49744	443	192.168.2.16	216.239.36.181
Apr 18, 2024 21:18:46.111146927 CEST	49744	443	192.168.2.16	216.239.36.181
Apr 18, 2024 21:18:46.114428043 CEST	443	49745	172.253.124.154	192.168.2.16
Apr 18, 2024 21:18:46.114624977 CEST	443	49745	172.253.124.154	192.168.2.16
Apr 18, 2024 21:18:46.114686966 CEST	49745	443	192.168.2.16	172.253.124.154
Apr 18, 2024 21:18:46.115039110 CEST	49745	443	192.168.2.16	172.253.124.154
Apr 18, 2024 21:18:46.115058899 CEST	443	49745	172.253.124.154	192.168.2.16
Apr 18, 2024 21:18:46.121414900 CEST	49748	443	192.168.2.16	104.18.72.113
Apr 18, 2024 21:18:46.126210928 CEST	443	49746	142.250.105.157	192.168.2.16
Apr 18, 2024 21:18:46.126549959 CEST	443	49746	142.250.105.157	192.168.2.16
Apr 18, 2024 21:18:46.126615047 CEST	49746	443	192.168.2.16	142.250.105.157
Apr 18, 2024 21:18:46.126959085 CEST	49746	443	192.168.2.16	142.250.105.157
Apr 18, 2024 21:18:46.126986027 CEST	443	49746	142.250.105.157	192.168.2.16
Apr 18, 2024 21:18:46.151412010 CEST	49747	443	192.168.2.16	172.253.124.154
Apr 18, 2024 21:18:46.222085953 CEST	49750	443	192.168.2.16	64.233.176.103
Apr 18, 2024 21:18:46.222127914 CEST	443	49750	64.233.176.103	192.168.2.16
Apr 18, 2024 21:18:46.222234964 CEST	49750	443	192.168.2.16	64.233.176.103
Apr 18, 2024 21:18:46.222547054 CEST	49750	443	192.168.2.16	64.233.176.103
Apr 18, 2024 21:18:46.222558975 CEST	443	49750	64.233.176.103	192.168.2.16
Apr 18, 2024 21:18:46.223529100 CEST	49751	443	192.168.2.16	142.251.15.156
Apr 18, 2024 21:18:46.223553896 CEST	443	49751	142.251.15.156	192.168.2.16
Apr 18, 2024 21:18:46.223622084 CEST	49751	443	192.168.2.16	142.251.15.156
Apr 18, 2024 21:18:46.223764896 CEST	49751	443	192.168.2.16	142.251.15.156
Apr 18, 2024 21:18:46.223779917 CEST	443	49751	142.251.15.156	192.168.2.16
Apr 18, 2024 21:18:46.267285109 CEST	443	49747	172.253.124.154	192.168.2.16
Apr 18, 2024 21:18:46.267379999 CEST	443	49747	172.253.124.154	192.168.2.16
Apr 18, 2024 21:18:46.267532110 CEST	49747	443	192.168.2.16	172.253.124.154
Apr 18, 2024 21:18:46.268121958 CEST	49747	443	192.168.2.16	172.253.124.154
Apr 18, 2024 21:18:46.268143892 CEST	443	49747	172.253.124.154	192.168.2.16
Apr 18, 2024 21:18:46.311466932 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 18, 2024 21:18:46.435893059 CEST	443	49751	142.251.15.156	192.168.2.16
Apr 18, 2024 21:18:46.436194897 CEST	49751	443	192.168.2.16	142.251.15.156
Apr 18, 2024 21:18:46.436212063 CEST	443	49751	142.251.15.156	192.168.2.16
Apr 18, 2024 21:18:46.437251091 CEST	443	49751	142.251.15.156	192.168.2.16
Apr 18, 2024 21:18:46.437330008 CEST	49751	443	192.168.2.16	142.251.15.156
Apr 18, 2024 21:18:46.437612057 CEST	49751	443	192.168.2.16	142.251.15.156
Apr 18, 2024 21:18:46.437673092 CEST	443	49751	142.251.15.156	192.168.2.16
Apr 18, 2024 21:18:46.437752008 CEST	49751	443	192.168.2.16	142.251.15.156
Apr 18, 2024 21:18:46.437757969 CEST	443	49751	142.251.15.156	192.168.2.16
Apr 18, 2024 21:18:46.439992905 CEST	443	49750	64.233.176.103	192.168.2.16
Apr 18, 2024 21:18:46.440175056 CEST	49750	443	192.168.2.16	64.233.176.103
Apr 18, 2024 21:18:46.440190077 CEST	443	49750	64.233.176.103	192.168.2.16
Apr 18, 2024 21:18:46.441605091 CEST	443	49750	64.233.176.103	192.168.2.16
Apr 18, 2024 21:18:46.441675901 CEST	49750	443	192.168.2.16	64.233.176.103
Apr 18, 2024 21:18:46.442718029 CEST	49750	443	192.168.2.16	64.233.176.103
Apr 18, 2024 21:18:46.442783117 CEST	443	49750	64.233.176.103	192.168.2.16
Apr 18, 2024 21:18:46.442933083 CEST	49750	443	192.168.2.16	64.233.176.103
Apr 18, 2024 21:18:46.442943096 CEST	443	49750	64.233.176.103	192.168.2.16
Apr 18, 2024 21:18:46.446537018 CEST	443	49748	104.18.72.113	192.168.2.16
Apr 18, 2024 21:18:46.446873903 CEST	443	49748	104.18.72.113	192.168.2.16
Apr 18, 2024 21:18:46.446940899 CEST	49748	443	192.168.2.16	104.18.72.113
Apr 18, 2024 21:18:46.447375059 CEST	49748	443	192.168.2.16	104.18.72.113
Apr 18, 2024 21:18:46.447393894 CEST	443	49748	104.18.72.113	192.168.2.16
Apr 18, 2024 21:18:46.459673882 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:46.459714890 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.459856987 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:46.460038900 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:46.460061073 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.487423897 CEST	49751	443	192.168.2.16	142.251.15.156
Apr 18, 2024 21:18:46.492212057 CEST	49750	443	192.168.2.16	64.233.176.103
Apr 18, 2024 21:18:46.555843115 CEST	49755	443	192.168.2.16	104.18.72.113
Apr 18, 2024 21:18:46.555876970 CEST	443	49755	104.18.72.113	192.168.2.16
Apr 18, 2024 21:18:46.556085110 CEST	49755	443	192.168.2.16	104.18.72.113
Apr 18, 2024 21:18:46.556186914 CEST	49755	443	192.168.2.16	104.18.72.113
Apr 18, 2024 21:18:46.556197882 CEST	443	49755	104.18.72.113	192.168.2.16
Apr 18, 2024 21:18:46.655071974 CEST	443	49750	64.233.176.103	192.168.2.16
Apr 18, 2024 21:18:46.655160904 CEST	443	49750	64.233.176.103	192.168.2.16
Apr 18, 2024 21:18:46.655220032 CEST	49750	443	192.168.2.16	64.233.176.103
Apr 18, 2024 21:18:46.655390978 CEST	443	49751	142.251.15.156	192.168.2.16
Apr 18, 2024 21:18:46.655616999 CEST	443	49751	142.251.15.156	192.168.2.16
Apr 18, 2024 21:18:46.655669928 CEST	49751	443	192.168.2.16	142.251.15.156
Apr 18, 2024 21:18:46.655802965 CEST	49750	443	192.168.2.16	64.233.176.103
Apr 18, 2024 21:18:46.655822992 CEST	443	49750	64.233.176.103	192.168.2.16
Apr 18, 2024 21:18:46.656125069 CEST	49751	443	192.168.2.16	142.251.15.156
Apr 18, 2024 21:18:46.656138897 CEST	443	49751	142.251.15.156	192.168.2.16
Apr 18, 2024 21:18:46.661720037 CEST	49756	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:46.661755085 CEST	443	49756	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:46.661822081 CEST	49756	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:46.662220955 CEST	49756	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:46.662234068 CEST	443	49756	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:46.674173117 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.674405098 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:46.674420118 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.674787998 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.675098896 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:46.675173998 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.675250053 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:46.720128059 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.726416111 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:46.764470100 CEST	49757	443	192.168.2.16	74.125.138.105
Apr 18, 2024 21:18:46.764511108 CEST	443	49757	74.125.138.105	192.168.2.16
Apr 18, 2024 21:18:46.764583111 CEST	49757	443	192.168.2.16	74.125.138.105
Apr 18, 2024 21:18:46.764796972 CEST	49757	443	192.168.2.16	74.125.138.105
Apr 18, 2024 21:18:46.764812946 CEST	443	49757	74.125.138.105	192.168.2.16
Apr 18, 2024 21:18:46.781862974 CEST	443	49755	104.18.72.113	192.168.2.16
Apr 18, 2024 21:18:46.782180071 CEST	49755	443	192.168.2.16	104.18.72.113
Apr 18, 2024 21:18:46.782202005 CEST	443	49755	104.18.72.113	192.168.2.16
Apr 18, 2024 21:18:46.783525944 CEST	443	49755	104.18.72.113	192.168.2.16
Apr 18, 2024 21:18:46.783618927 CEST	49755	443	192.168.2.16	104.18.72.113
Apr 18, 2024 21:18:46.783977032 CEST	49755	443	192.168.2.16	104.18.72.113
Apr 18, 2024 21:18:46.784039974 CEST	49755	443	192.168.2.16	104.18.72.113
Apr 18, 2024 21:18:46.784043074 CEST	443	49755	104.18.72.113	192.168.2.16
Apr 18, 2024 21:18:46.824134111 CEST	443	49755	104.18.72.113	192.168.2.16
Apr 18, 2024 21:18:46.836558104 CEST	49755	443	192.168.2.16	104.18.72.113
Apr 18, 2024 21:18:46.836569071 CEST	443	49755	104.18.72.113	192.168.2.16
Apr 18, 2024 21:18:46.884396076 CEST	49755	443	192.168.2.16	104.18.72.113
Apr 18, 2024 21:18:46.907150984 CEST	443	49756	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:46.907428980 CEST	49756	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:46.907453060 CEST	443	49756	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:46.907802105 CEST	443	49756	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:46.908096075 CEST	49756	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:46.908162117 CEST	443	49756	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:46.908241034 CEST	49756	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:46.919250965 CEST	49758	443	192.168.2.16	108.177.122.106
Apr 18, 2024 21:18:46.919280052 CEST	443	49758	108.177.122.106	192.168.2.16
Apr 18, 2024 21:18:46.919363022 CEST	49758	443	192.168.2.16	108.177.122.106
Apr 18, 2024 21:18:46.919569016 CEST	49758	443	192.168.2.16	108.177.122.106
Apr 18, 2024 21:18:46.919580936 CEST	443	49758	108.177.122.106	192.168.2.16
Apr 18, 2024 21:18:46.944624901 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.944693089 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.944736004 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:46.944753885 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.944766045 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.944817066 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.944863081 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.944899082 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.944924116 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.944936991 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:46.944936991 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:46.944951057 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.944984913 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:46.945497036 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.945537090 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.945559025 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:46.945569038 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.945578098 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.945611000 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:46.946382046 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.946436882 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.946472883 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.946510077 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.946541071 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.946574926 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:46.946574926 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:46.946582079 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.946625948 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:46.947411060 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.947448015 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.947468996 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:46.947474957 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.947487116 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.947544098 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.947567940 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:46.947978020 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:46.947983980 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.948438883 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.948472977 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.948493004 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:46.948498964 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.948554993 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.948590994 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.948637962 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:46.948643923 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.948657036 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:46.949338913 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.949371099 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.949407101 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.949428082 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:46.949431896 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.949455976 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:46.950234890 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.950284004 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.950297117 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:46.950303078 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.950354099 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.950387955 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.950404882 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:46.950411081 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.950448036 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:46.951319933 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.951472044 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:46.951478958 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:46.956125975 CEST	443	49756	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:46.981745958 CEST	443	49757	74.125.138.105	192.168.2.16
Apr 18, 2024 21:18:46.981985092 CEST	49757	443	192.168.2.16	74.125.138.105
Apr 18, 2024 21:18:46.982006073 CEST	443	49757	74.125.138.105	192.168.2.16
Apr 18, 2024 21:18:46.984698057 CEST	443	49757	74.125.138.105	192.168.2.16
Apr 18, 2024 21:18:46.984770060 CEST	49757	443	192.168.2.16	74.125.138.105
Apr 18, 2024 21:18:46.985222101 CEST	49757	443	192.168.2.16	74.125.138.105
Apr 18, 2024 21:18:46.985222101 CEST	49757	443	192.168.2.16	74.125.138.105
Apr 18, 2024 21:18:46.985234022 CEST	443	49757	74.125.138.105	192.168.2.16
Apr 18, 2024 21:18:46.985286951 CEST	443	49757	74.125.138.105	192.168.2.16
Apr 18, 2024 21:18:46.995412111 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.027412891 CEST	49757	443	192.168.2.16	74.125.138.105
Apr 18, 2024 21:18:47.027421951 CEST	443	49757	74.125.138.105	192.168.2.16
Apr 18, 2024 21:18:47.048439026 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.048661947 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.049241066 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.049277067 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.049299955 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.049309969 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.049334049 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.050085068 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.050178051 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.050192118 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.050215960 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.050246000 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.050251007 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.050482035 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.051218033 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.051253080 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.051270962 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.051279068 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.051352024 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.052247047 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.052278042 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.052299023 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.052315950 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.052335024 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.053049088 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.053078890 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.053101063 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.053107977 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.053164959 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.054040909 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.054126024 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.054131985 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.054188967 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.054212093 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.054219007 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.054229021 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.055206060 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.055253029 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.055305958 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.055305958 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.055325031 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.055794954 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.055846930 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.055865049 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.055922985 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.056720972 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.056833029 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.056890011 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.056946993 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.075381994 CEST	49757	443	192.168.2.16	74.125.138.105
Apr 18, 2024 21:18:47.132424116 CEST	443	49758	108.177.122.106	192.168.2.16
Apr 18, 2024 21:18:47.132744074 CEST	49758	443	192.168.2.16	108.177.122.106
Apr 18, 2024 21:18:47.132774115 CEST	443	49758	108.177.122.106	192.168.2.16
Apr 18, 2024 21:18:47.134202003 CEST	443	49758	108.177.122.106	192.168.2.16
Apr 18, 2024 21:18:47.134293079 CEST	49758	443	192.168.2.16	108.177.122.106
Apr 18, 2024 21:18:47.134654999 CEST	49758	443	192.168.2.16	108.177.122.106
Apr 18, 2024 21:18:47.134732962 CEST	443	49758	108.177.122.106	192.168.2.16
Apr 18, 2024 21:18:47.152059078 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.152139902 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.152157068 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.152215958 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.153009892 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.153074980 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.153094053 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.153105021 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.153120995 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.153279066 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.153678894 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.153712988 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.153904915 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.153904915 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.153922081 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.154375076 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.154884100 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.154915094 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.154974937 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.154974937 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.154985905 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.155282974 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.155879021 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.155929089 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.155961037 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.155982018 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.156008959 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.156028032 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.156887054 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.156922102 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.156944036 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.156971931 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.156985998 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.157116890 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.157906055 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.157938957 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.157960892 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.157972097 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.157989979 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.158118963 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.158925056 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.159018040 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.159032106 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.159538031 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.159928083 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.160002947 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.160020113 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.160034895 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.160119057 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.160119057 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.160955906 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.160990953 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.161190033 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.161190033 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.161206961 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.161926031 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.161977053 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.161992073 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.162187099 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.163211107 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.163254976 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.163312912 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.163312912 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.163327932 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.165100098 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.165150881 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.165163994 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.165194035 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.165218115 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.167032003 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.167073011 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.167129040 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.167141914 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.167828083 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.169842958 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.169889927 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.169946909 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.169946909 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.169964075 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.171391010 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.171431065 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.171469927 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.171492100 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.171513081 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.173358917 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.173419952 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.173468113 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.173491955 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.173532009 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.176279068 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.176318884 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.176378965 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.176403046 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.176433086 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.178142071 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.178201914 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.178248882 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.178248882 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.178262949 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.178301096 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.180085897 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.180138111 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.180172920 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.180191040 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.180205107 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.187397003 CEST	49758	443	192.168.2.16	108.177.122.106
Apr 18, 2024 21:18:47.187427044 CEST	443	49758	108.177.122.106	192.168.2.16
Apr 18, 2024 21:18:47.199057102 CEST	443	49757	74.125.138.105	192.168.2.16
Apr 18, 2024 21:18:47.199147940 CEST	443	49757	74.125.138.105	192.168.2.16
Apr 18, 2024 21:18:47.199198961 CEST	49757	443	192.168.2.16	74.125.138.105
Apr 18, 2024 21:18:47.199552059 CEST	49757	443	192.168.2.16	74.125.138.105
Apr 18, 2024 21:18:47.199568987 CEST	443	49757	74.125.138.105	192.168.2.16
Apr 18, 2024 21:18:47.235410929 CEST	49758	443	192.168.2.16	108.177.122.106
Apr 18, 2024 21:18:47.235524893 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.256192923 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.256217957 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.256279945 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.256297112 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.256303072 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.256321907 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.256360054 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.256421089 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.257472038 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.257492065 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.257530928 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.257543087 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.257563114 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.257666111 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.257666111 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.259390116 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.259433031 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.259561062 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.259561062 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.259568930 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.259666920 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.261343956 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.261387110 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.261429071 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.261446953 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.261564970 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.261564970 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.263755083 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.263793945 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.263879061 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.263879061 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.263889074 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.263923883 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.265702963 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.265747070 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.265811920 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.265819073 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.265919924 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.265919924 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.267637014 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.267677069 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.267716885 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.267724037 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.267842054 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.267842054 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.269627094 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.269668102 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.269783020 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.269783020 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.269790888 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.269875050 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.270268917 CEST	443	49756	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:47.270301104 CEST	443	49756	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:47.270315886 CEST	443	49756	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:47.270394087 CEST	49756	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:47.270451069 CEST	443	49756	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:47.270522118 CEST	49756	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:47.271182060 CEST	49756	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:47.271212101 CEST	443	49756	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:47.272440910 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.272527933 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.272582054 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.272582054 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.272589922 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.272772074 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.274070978 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.274111986 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.274187088 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.274188042 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.274197102 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.274260998 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.275857925 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.275913000 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.275952101 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.275959969 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.276021004 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.276021004 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.277832985 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.277875900 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.277936935 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.277945042 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.277986050 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.277986050 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.280673027 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.280711889 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.280760050 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.280782938 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.280793905 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.280960083 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.282670975 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.282711983 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.282741070 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.282764912 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.282795906 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.282812119 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.284085989 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.284147978 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.284204006 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.284204006 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.284215927 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.284286022 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.286921024 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.286961079 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.286978960 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.286998034 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.287036896 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.287036896 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.288897038 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.288937092 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.288979053 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.288990974 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.289045095 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.289045095 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.291023016 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.291064978 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.291110992 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.291135073 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.291177988 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.291187048 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.292325974 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.292367935 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.292433977 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.292433977 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.292460918 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.292511940 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.295161963 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.295202017 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.295305014 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.295305014 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.295320034 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.295739889 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.297207117 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.297247887 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.297293901 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.297307014 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.297404051 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.297404051 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.299088001 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.299129009 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.299170017 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.299180031 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.299207926 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.299482107 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.301027060 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.301076889 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.301127911 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.301129103 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.301145077 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.301378965 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.303452015 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.303493977 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.303519011 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.303551912 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.303582907 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.303618908 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.305375099 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.305418968 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.305486917 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.305486917 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.305500031 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.305727005 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.307411909 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.307463884 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.307518005 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.307545900 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.307730913 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.307730913 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.309303999 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.309346914 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.309427977 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.309427977 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.309454918 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.309503078 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.311243057 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.311281919 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.311352968 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.311352968 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.311372995 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.311533928 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.360363007 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.360419989 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.360464096 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.360501051 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.360517979 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.360549927 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.362093925 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.362143993 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.362189054 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.362195969 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.362245083 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.362245083 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.365006924 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.365025043 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.365137100 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.365145922 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.365365028 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.366878033 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.366895914 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.366969109 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.366988897 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.367006063 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.367064953 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.368833065 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.368849993 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.368896961 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.368902922 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.368946075 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.368946075 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.370740891 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.370759964 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.370836973 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.370842934 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.370867968 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.370882034 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.372729063 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.372746944 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.372790098 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.372816086 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.372833967 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.372848988 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.374634981 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.374653101 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.374703884 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.374711990 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.374903917 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.377031088 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.377049923 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.377121925 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.377121925 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.377130985 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.377175093 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.378979921 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.378998041 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.379065037 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.379065037 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.379084110 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.379863024 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.380000114 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.380050898 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.380086899 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.380125046 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.380139112 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.380422115 CEST	49754	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.380450964 CEST	443	49754	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.398602962 CEST	49759	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:47.398694038 CEST	443	49759	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:47.398794889 CEST	49759	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:47.398993015 CEST	49759	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:47.399029970 CEST	443	49759	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:47.414997101 CEST	443	49755	104.18.72.113	192.168.2.16
Apr 18, 2024 21:18:47.415298939 CEST	443	49755	104.18.72.113	192.168.2.16
Apr 18, 2024 21:18:47.415462971 CEST	49755	443	192.168.2.16	104.18.72.113
Apr 18, 2024 21:18:47.416070938 CEST	49755	443	192.168.2.16	104.18.72.113
Apr 18, 2024 21:18:47.416093111 CEST	443	49755	104.18.72.113	192.168.2.16
Apr 18, 2024 21:18:47.474864006 CEST	49760	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.474915981 CEST	443	49760	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.475016117 CEST	49760	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.475328922 CEST	49760	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.475343943 CEST	443	49760	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.584466934 CEST	49761	443	192.168.2.16	104.16.51.111
Apr 18, 2024 21:18:47.584511042 CEST	443	49761	104.16.51.111	192.168.2.16
Apr 18, 2024 21:18:47.584598064 CEST	49761	443	192.168.2.16	104.16.51.111
Apr 18, 2024 21:18:47.584799051 CEST	49761	443	192.168.2.16	104.16.51.111
Apr 18, 2024 21:18:47.584810019 CEST	443	49761	104.16.51.111	192.168.2.16
Apr 18, 2024 21:18:47.651192904 CEST	443	49759	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:47.651612043 CEST	49759	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:47.651679993 CEST	443	49759	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:47.652767897 CEST	443	49759	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:47.652862072 CEST	49759	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:47.653229952 CEST	49759	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:47.653301954 CEST	443	49759	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:47.653434992 CEST	49759	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:47.653455019 CEST	443	49759	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:47.688460112 CEST	443	49760	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.688952923 CEST	49760	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.688972950 CEST	443	49760	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.689482927 CEST	443	49760	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.690502882 CEST	49760	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.690572977 CEST	443	49760	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.691256046 CEST	49760	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.700000048 CEST	49759	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:47.736114979 CEST	443	49760	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.806864977 CEST	443	49761	104.16.51.111	192.168.2.16
Apr 18, 2024 21:18:47.807256937 CEST	49761	443	192.168.2.16	104.16.51.111
Apr 18, 2024 21:18:47.807281971 CEST	443	49761	104.16.51.111	192.168.2.16
Apr 18, 2024 21:18:47.808372021 CEST	443	49761	104.16.51.111	192.168.2.16
Apr 18, 2024 21:18:47.808453083 CEST	49761	443	192.168.2.16	104.16.51.111
Apr 18, 2024 21:18:47.809536934 CEST	49761	443	192.168.2.16	104.16.51.111
Apr 18, 2024 21:18:47.809623957 CEST	443	49761	104.16.51.111	192.168.2.16
Apr 18, 2024 21:18:47.809710979 CEST	49761	443	192.168.2.16	104.16.51.111
Apr 18, 2024 21:18:47.809716940 CEST	443	49761	104.16.51.111	192.168.2.16
Apr 18, 2024 21:18:47.854454994 CEST	49761	443	192.168.2.16	104.16.51.111
Apr 18, 2024 21:18:47.952591896 CEST	443	49760	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.952629089 CEST	443	49760	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.952657938 CEST	443	49760	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.952687025 CEST	443	49760	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.952744961 CEST	443	49760	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.952749014 CEST	49760	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.952770948 CEST	443	49760	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.952857971 CEST	49760	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.952864885 CEST	443	49760	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.952951908 CEST	443	49760	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.952981949 CEST	443	49760	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.953003883 CEST	443	49760	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.953022003 CEST	49760	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.953027010 CEST	443	49760	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.953118086 CEST	49760	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.953583002 CEST	443	49760	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.953627110 CEST	443	49760	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.953655958 CEST	443	49760	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.953670979 CEST	49760	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.953675032 CEST	443	49760	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.953691959 CEST	49760	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.954339981 CEST	443	49760	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.954369068 CEST	443	49760	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.954394102 CEST	49760	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.954397917 CEST	443	49760	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.954418898 CEST	443	49760	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.954437017 CEST	49760	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.954441071 CEST	443	49760	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.954472065 CEST	49760	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.954476118 CEST	443	49760	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.954498053 CEST	443	49760	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.954741955 CEST	49760	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:47.954749107 CEST	443	49760	104.18.70.113	192.168.2.16
Apr 18, 2024 21:18:47.954760075 CEST	49760	443	192.168.2.16	104.18.70.113
Apr 18, 2024 21:18:48.025394917 CEST	443	49759	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:48.025465965 CEST	443	49759	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:48.025487900 CEST	443	49759	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:48.025528908 CEST	443	49759	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:48.025569916 CEST	443	49759	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:48.025711060 CEST	49759	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:48.025711060 CEST	49759	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:48.025788069 CEST	443	49759	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:48.025857925 CEST	49759	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:48.026261091 CEST	49759	443	192.168.2.16	206.189.254.86
Apr 18, 2024 21:18:48.026293039 CEST	443	49759	206.189.254.86	192.168.2.16
Apr 18, 2024 21:18:48.271578074 CEST	443	49761	104.16.51.111	192.168.2.16
Apr 18, 2024 21:18:48.271688938 CEST	443	49761	104.16.51.111	192.168.2.16
Apr 18, 2024 21:18:48.271830082 CEST	49761	443	192.168.2.16	104.16.51.111
Apr 18, 2024 21:18:48.272644043 CEST	49761	443	192.168.2.16	104.16.51.111
Apr 18, 2024 21:18:48.272667885 CEST	443	49761	104.16.51.111	192.168.2.16
Apr 18, 2024 21:18:48.386548996 CEST	49763	443	192.168.2.16	104.16.53.111
Apr 18, 2024 21:18:48.386600971 CEST	443	49763	104.16.53.111	192.168.2.16
Apr 18, 2024 21:18:48.386692047 CEST	49763	443	192.168.2.16	104.16.53.111
Apr 18, 2024 21:18:48.386903048 CEST	49763	443	192.168.2.16	104.16.53.111
Apr 18, 2024 21:18:48.386924028 CEST	443	49763	104.16.53.111	192.168.2.16
Apr 18, 2024 21:18:48.615565062 CEST	443	49763	104.16.53.111	192.168.2.16
Apr 18, 2024 21:18:48.615854979 CEST	49763	443	192.168.2.16	104.16.53.111
Apr 18, 2024 21:18:48.615880013 CEST	443	49763	104.16.53.111	192.168.2.16
Apr 18, 2024 21:18:48.619594097 CEST	443	49763	104.16.53.111	192.168.2.16
Apr 18, 2024 21:18:48.619676113 CEST	49763	443	192.168.2.16	104.16.53.111
Apr 18, 2024 21:18:48.620064974 CEST	49763	443	192.168.2.16	104.16.53.111
Apr 18, 2024 21:18:48.620213032 CEST	49763	443	192.168.2.16	104.16.53.111
Apr 18, 2024 21:18:48.620256901 CEST	443	49763	104.16.53.111	192.168.2.16
Apr 18, 2024 21:18:48.668425083 CEST	49763	443	192.168.2.16	104.16.53.111
Apr 18, 2024 21:18:48.668438911 CEST	443	49763	104.16.53.111	192.168.2.16
Apr 18, 2024 21:18:48.716433048 CEST	49763	443	192.168.2.16	104.16.53.111
Apr 18, 2024 21:18:48.718786001 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 18, 2024 21:18:48.901489019 CEST	443	49763	104.16.53.111	192.168.2.16
Apr 18, 2024 21:18:48.901794910 CEST	443	49763	104.16.53.111	192.168.2.16
Apr 18, 2024 21:18:48.901882887 CEST	49763	443	192.168.2.16	104.16.53.111
Apr 18, 2024 21:18:48.902704000 CEST	49763	443	192.168.2.16	104.16.53.111
Apr 18, 2024 21:18:48.902724981 CEST	443	49763	104.16.53.111	192.168.2.16
Apr 18, 2024 21:18:50.600096941 CEST	49765	443	192.168.2.16	216.239.36.181
Apr 18, 2024 21:18:50.600142002 CEST	443	49765	216.239.36.181	192.168.2.16
Apr 18, 2024 21:18:50.600234985 CEST	49765	443	192.168.2.16	216.239.36.181
Apr 18, 2024 21:18:50.600464106 CEST	49765	443	192.168.2.16	216.239.36.181
Apr 18, 2024 21:18:50.600478888 CEST	443	49765	216.239.36.181	192.168.2.16
Apr 18, 2024 21:18:50.689089060 CEST	49766	443	192.168.2.16	23.220.189.216
Apr 18, 2024 21:18:50.689131021 CEST	443	49766	23.220.189.216	192.168.2.16
Apr 18, 2024 21:18:50.689234018 CEST	49766	443	192.168.2.16	23.220.189.216
Apr 18, 2024 21:18:50.699773073 CEST	49766	443	192.168.2.16	23.220.189.216
Apr 18, 2024 21:18:50.699784994 CEST	443	49766	23.220.189.216	192.168.2.16
Apr 18, 2024 21:18:50.818595886 CEST	443	49765	216.239.36.181	192.168.2.16
Apr 18, 2024 21:18:50.818896055 CEST	49765	443	192.168.2.16	216.239.36.181
Apr 18, 2024 21:18:50.818944931 CEST	443	49765	216.239.36.181	192.168.2.16
Apr 18, 2024 21:18:50.820255995 CEST	443	49765	216.239.36.181	192.168.2.16
Apr 18, 2024 21:18:50.820571899 CEST	49765	443	192.168.2.16	216.239.36.181
Apr 18, 2024 21:18:50.820743084 CEST	49765	443	192.168.2.16	216.239.36.181
Apr 18, 2024 21:18:50.820751905 CEST	443	49765	216.239.36.181	192.168.2.16
Apr 18, 2024 21:18:50.868124008 CEST	443	49765	216.239.36.181	192.168.2.16
Apr 18, 2024 21:18:50.870465994 CEST	49765	443	192.168.2.16	216.239.36.181
Apr 18, 2024 21:18:50.919598103 CEST	443	49766	23.220.189.216	192.168.2.16
Apr 18, 2024 21:18:50.919683933 CEST	49766	443	192.168.2.16	23.220.189.216
Apr 18, 2024 21:18:50.926702023 CEST	49766	443	192.168.2.16	23.220.189.216
Apr 18, 2024 21:18:50.926709890 CEST	443	49766	23.220.189.216	192.168.2.16
Apr 18, 2024 21:18:50.927148104 CEST	443	49766	23.220.189.216	192.168.2.16
Apr 18, 2024 21:18:50.982429981 CEST	49766	443	192.168.2.16	23.220.189.216
Apr 18, 2024 21:18:50.984535933 CEST	49766	443	192.168.2.16	23.220.189.216
Apr 18, 2024 21:18:51.031235933 CEST	443	49765	216.239.36.181	192.168.2.16
Apr 18, 2024 21:18:51.031408072 CEST	443	49765	216.239.36.181	192.168.2.16
Apr 18, 2024 21:18:51.031487942 CEST	49765	443	192.168.2.16	216.239.36.181
Apr 18, 2024 21:18:51.031660080 CEST	49765	443	192.168.2.16	216.239.36.181
Apr 18, 2024 21:18:51.031682968 CEST	443	49765	216.239.36.181	192.168.2.16
Apr 18, 2024 21:18:51.031696081 CEST	49765	443	192.168.2.16	216.239.36.181
Apr 18, 2024 21:18:51.031737089 CEST	49765	443	192.168.2.16	216.239.36.181
Apr 18, 2024 21:18:51.032114983 CEST	443	49766	23.220.189.216	192.168.2.16
Apr 18, 2024 21:18:51.119745970 CEST	443	49766	23.220.189.216	192.168.2.16
Apr 18, 2024 21:18:51.119827032 CEST	443	49766	23.220.189.216	192.168.2.16
Apr 18, 2024 21:18:51.119882107 CEST	49766	443	192.168.2.16	23.220.189.216
Apr 18, 2024 21:18:51.119965076 CEST	49766	443	192.168.2.16	23.220.189.216
Apr 18, 2024 21:18:51.119977951 CEST	443	49766	23.220.189.216	192.168.2.16
Apr 18, 2024 21:18:51.120037079 CEST	49766	443	192.168.2.16	23.220.189.216
Apr 18, 2024 21:18:51.120042086 CEST	443	49766	23.220.189.216	192.168.2.16
Apr 18, 2024 21:18:51.169590950 CEST	49767	443	192.168.2.16	23.220.189.216
Apr 18, 2024 21:18:51.169678926 CEST	443	49767	23.220.189.216	192.168.2.16
Apr 18, 2024 21:18:51.169787884 CEST	49767	443	192.168.2.16	23.220.189.216
Apr 18, 2024 21:18:51.170078039 CEST	49767	443	192.168.2.16	23.220.189.216
Apr 18, 2024 21:18:51.170113087 CEST	443	49767	23.220.189.216	192.168.2.16
Apr 18, 2024 21:18:51.390486956 CEST	443	49767	23.220.189.216	192.168.2.16
Apr 18, 2024 21:18:51.390640020 CEST	49767	443	192.168.2.16	23.220.189.216
Apr 18, 2024 21:18:51.391726017 CEST	49767	443	192.168.2.16	23.220.189.216
Apr 18, 2024 21:18:51.391746044 CEST	443	49767	23.220.189.216	192.168.2.16
Apr 18, 2024 21:18:51.392599106 CEST	443	49767	23.220.189.216	192.168.2.16
Apr 18, 2024 21:18:51.393984079 CEST	49767	443	192.168.2.16	23.220.189.216
Apr 18, 2024 21:18:51.436121941 CEST	443	49767	23.220.189.216	192.168.2.16
Apr 18, 2024 21:18:51.598479986 CEST	443	49767	23.220.189.216	192.168.2.16
Apr 18, 2024 21:18:51.598645926 CEST	443	49767	23.220.189.216	192.168.2.16
Apr 18, 2024 21:18:51.598856926 CEST	49767	443	192.168.2.16	23.220.189.216
Apr 18, 2024 21:18:51.599368095 CEST	49767	443	192.168.2.16	23.220.189.216
Apr 18, 2024 21:18:51.599369049 CEST	49767	443	192.168.2.16	23.220.189.216
Apr 18, 2024 21:18:51.599414110 CEST	443	49767	23.220.189.216	192.168.2.16
Apr 18, 2024 21:18:51.599443913 CEST	443	49767	23.220.189.216	192.168.2.16
Apr 18, 2024 21:18:52.365691900 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 21:18:52.669569969 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 21:18:53.274445057 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 21:18:53.279660940 CEST	49768	443	192.168.2.16	13.85.23.86
Apr 18, 2024 21:18:53.279699087 CEST	443	49768	13.85.23.86	192.168.2.16
Apr 18, 2024 21:18:53.279783964 CEST	49768	443	192.168.2.16	13.85.23.86
Apr 18, 2024 21:18:53.281075954 CEST	49768	443	192.168.2.16	13.85.23.86
Apr 18, 2024 21:18:53.281092882 CEST	443	49768	13.85.23.86	192.168.2.16
Apr 18, 2024 21:18:53.525516987 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 18, 2024 21:18:53.674206018 CEST	443	49768	13.85.23.86	192.168.2.16
Apr 18, 2024 21:18:53.674321890 CEST	49768	443	192.168.2.16	13.85.23.86
Apr 18, 2024 21:18:53.676949024 CEST	49768	443	192.168.2.16	13.85.23.86
Apr 18, 2024 21:18:53.676969051 CEST	443	49768	13.85.23.86	192.168.2.16
Apr 18, 2024 21:18:53.677298069 CEST	443	49768	13.85.23.86	192.168.2.16
Apr 18, 2024 21:18:53.729406118 CEST	49768	443	192.168.2.16	13.85.23.86
Apr 18, 2024 21:18:53.739666939 CEST	49768	443	192.168.2.16	13.85.23.86
Apr 18, 2024 21:18:53.784122944 CEST	443	49768	13.85.23.86	192.168.2.16
Apr 18, 2024 21:18:54.044635057 CEST	443	49768	13.85.23.86	192.168.2.16
Apr 18, 2024 21:18:54.044738054 CEST	443	49768	13.85.23.86	192.168.2.16
Apr 18, 2024 21:18:54.044800043 CEST	443	49768	13.85.23.86	192.168.2.16
Apr 18, 2024 21:18:54.044814110 CEST	49768	443	192.168.2.16	13.85.23.86
Apr 18, 2024 21:18:54.044840097 CEST	443	49768	13.85.23.86	192.168.2.16
Apr 18, 2024 21:18:54.044879913 CEST	49768	443	192.168.2.16	13.85.23.86
Apr 18, 2024 21:18:54.044882059 CEST	443	49768	13.85.23.86	192.168.2.16
Apr 18, 2024 21:18:54.044895887 CEST	49768	443	192.168.2.16	13.85.23.86
Apr 18, 2024 21:18:54.044945955 CEST	443	49768	13.85.23.86	192.168.2.16
Apr 18, 2024 21:18:54.044986010 CEST	443	49768	13.85.23.86	192.168.2.16
Apr 18, 2024 21:18:54.045013905 CEST	49768	443	192.168.2.16	13.85.23.86
Apr 18, 2024 21:18:54.045032024 CEST	443	49768	13.85.23.86	192.168.2.16
Apr 18, 2024 21:18:54.045051098 CEST	49768	443	192.168.2.16	13.85.23.86
Apr 18, 2024 21:18:54.045222044 CEST	443	49768	13.85.23.86	192.168.2.16
Apr 18, 2024 21:18:54.045290947 CEST	49768	443	192.168.2.16	13.85.23.86
Apr 18, 2024 21:18:54.045308113 CEST	443	49768	13.85.23.86	192.168.2.16
Apr 18, 2024 21:18:54.045531034 CEST	443	49768	13.85.23.86	192.168.2.16
Apr 18, 2024 21:18:54.045588970 CEST	49768	443	192.168.2.16	13.85.23.86
Apr 18, 2024 21:18:54.057290077 CEST	49768	443	192.168.2.16	13.85.23.86
Apr 18, 2024 21:18:54.057312965 CEST	443	49768	13.85.23.86	192.168.2.16
Apr 18, 2024 21:18:54.057324886 CEST	49768	443	192.168.2.16	13.85.23.86
Apr 18, 2024 21:18:54.057332993 CEST	443	49768	13.85.23.86	192.168.2.16
Apr 18, 2024 21:18:54.478521109 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 21:18:56.843569040 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 21:18:56.891422033 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 21:18:57.135581017 CEST	443	49758	108.177.122.106	192.168.2.16
Apr 18, 2024 21:18:57.135649920 CEST	443	49758	108.177.122.106	192.168.2.16
Apr 18, 2024 21:18:57.135710955 CEST	49758	443	192.168.2.16	108.177.122.106
Apr 18, 2024 21:18:57.147439957 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 21:18:57.755461931 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 21:18:58.202131987 CEST	49758	443	192.168.2.16	108.177.122.106
Apr 18, 2024 21:18:58.202212095 CEST	443	49758	108.177.122.106	192.168.2.16
Apr 18, 2024 21:18:58.964571953 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 21:18:59.365462065 CEST	49769	443	192.168.2.16	108.177.122.106
Apr 18, 2024 21:18:59.365510941 CEST	443	49769	108.177.122.106	192.168.2.16
Apr 18, 2024 21:18:59.365613937 CEST	49769	443	192.168.2.16	108.177.122.106
Apr 18, 2024 21:18:59.365825891 CEST	49769	443	192.168.2.16	108.177.122.106
Apr 18, 2024 21:18:59.365837097 CEST	443	49769	108.177.122.106	192.168.2.16
Apr 18, 2024 21:18:59.579286098 CEST	443	49769	108.177.122.106	192.168.2.16
Apr 18, 2024 21:18:59.579612970 CEST	49769	443	192.168.2.16	108.177.122.106
Apr 18, 2024 21:18:59.579642057 CEST	443	49769	108.177.122.106	192.168.2.16
Apr 18, 2024 21:18:59.580096006 CEST	443	49769	108.177.122.106	192.168.2.16
Apr 18, 2024 21:18:59.580420971 CEST	49769	443	192.168.2.16	108.177.122.106
Apr 18, 2024 21:18:59.580490112 CEST	443	49769	108.177.122.106	192.168.2.16
Apr 18, 2024 21:18:59.580545902 CEST	49769	443	192.168.2.16	108.177.122.106
Apr 18, 2024 21:18:59.624119997 CEST	443	49769	108.177.122.106	192.168.2.16
Apr 18, 2024 21:19:00.233221054 CEST	443	49769	108.177.122.106	192.168.2.16
Apr 18, 2024 21:19:00.233304024 CEST	443	49769	108.177.122.106	192.168.2.16
Apr 18, 2024 21:19:00.233383894 CEST	49769	443	192.168.2.16	108.177.122.106
Apr 18, 2024 21:19:00.233401060 CEST	443	49769	108.177.122.106	192.168.2.16
Apr 18, 2024 21:19:00.233463049 CEST	49769	443	192.168.2.16	108.177.122.106
Apr 18, 2024 21:19:00.234040976 CEST	49769	443	192.168.2.16	108.177.122.106
Apr 18, 2024 21:19:00.234085083 CEST	443	49769	108.177.122.106	192.168.2.16
Apr 18, 2024 21:19:00.235230923 CEST	49770	443	192.168.2.16	108.177.122.106
Apr 18, 2024 21:19:00.235270023 CEST	443	49770	108.177.122.106	192.168.2.16
Apr 18, 2024 21:19:00.235344887 CEST	49770	443	192.168.2.16	108.177.122.106
Apr 18, 2024 21:19:00.235594988 CEST	49770	443	192.168.2.16	108.177.122.106
Apr 18, 2024 21:19:00.235605955 CEST	443	49770	108.177.122.106	192.168.2.16
Apr 18, 2024 21:19:00.450952053 CEST	443	49770	108.177.122.106	192.168.2.16
Apr 18, 2024 21:19:00.451303959 CEST	49770	443	192.168.2.16	108.177.122.106
Apr 18, 2024 21:19:00.451332092 CEST	443	49770	108.177.122.106	192.168.2.16
Apr 18, 2024 21:19:00.451782942 CEST	443	49770	108.177.122.106	192.168.2.16
Apr 18, 2024 21:19:00.452080965 CEST	49770	443	192.168.2.16	108.177.122.106
Apr 18, 2024 21:19:00.452189922 CEST	443	49770	108.177.122.106	192.168.2.16
Apr 18, 2024 21:19:00.452220917 CEST	49770	443	192.168.2.16	108.177.122.106
Apr 18, 2024 21:19:00.495476007 CEST	49770	443	192.168.2.16	108.177.122.106
Apr 18, 2024 21:19:00.495506048 CEST	443	49770	108.177.122.106	192.168.2.16
Apr 18, 2024 21:19:00.668097973 CEST	443	49770	108.177.122.106	192.168.2.16
Apr 18, 2024 21:19:00.668169022 CEST	443	49770	108.177.122.106	192.168.2.16
Apr 18, 2024 21:19:00.668206930 CEST	443	49770	108.177.122.106	192.168.2.16
Apr 18, 2024 21:19:00.668253899 CEST	49770	443	192.168.2.16	108.177.122.106
Apr 18, 2024 21:19:00.668282986 CEST	443	49770	108.177.122.106	192.168.2.16
Apr 18, 2024 21:19:00.668325901 CEST	49770	443	192.168.2.16	108.177.122.106
Apr 18, 2024 21:19:00.668332100 CEST	443	49770	108.177.122.106	192.168.2.16
Apr 18, 2024 21:19:00.668354034 CEST	443	49770	108.177.122.106	192.168.2.16
Apr 18, 2024 21:19:00.668411970 CEST	49770	443	192.168.2.16	108.177.122.106
Apr 18, 2024 21:19:00.669447899 CEST	49770	443	192.168.2.16	108.177.122.106
Apr 18, 2024 21:19:00.669464111 CEST	443	49770	108.177.122.106	192.168.2.16
Apr 18, 2024 21:19:00.669471979 CEST	49770	443	192.168.2.16	108.177.122.106
Apr 18, 2024 21:19:00.669513941 CEST	49770	443	192.168.2.16	108.177.122.106
Apr 18, 2024 21:19:01.375516891 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 21:19:01.694510937 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 21:19:03.127530098 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 18, 2024 21:19:06.190552950 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 21:19:11.303535938 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 21:19:15.799464941 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 21:19:27.238519907 CEST	49704	80	192.168.2.16	206.189.254.86
Apr 18, 2024 21:19:27.358865023 CEST	80	49704	206.189.254.86	192.168.2.16
Apr 18, 2024 21:19:27.366697073 CEST	49702	80	192.168.2.16	206.189.254.86
Apr 18, 2024 21:19:27.487020016 CEST	80	49702	206.189.254.86	192.168.2.16
Apr 18, 2024 21:19:29.684700012 CEST	49696	80	192.168.2.16	199.232.214.172
Apr 18, 2024 21:19:29.684788942 CEST	49697	80	192.168.2.16	199.232.214.172
Apr 18, 2024 21:19:29.788408995 CEST	80	49696	199.232.214.172	192.168.2.16
Apr 18, 2024 21:19:29.788435936 CEST	80	49697	199.232.214.172	192.168.2.16
Apr 18, 2024 21:19:29.788453102 CEST	80	49697	199.232.214.172	192.168.2.16
Apr 18, 2024 21:19:29.788511992 CEST	49697	80	192.168.2.16	199.232.214.172
Apr 18, 2024 21:19:29.788868904 CEST	80	49696	199.232.214.172	192.168.2.16
Apr 18, 2024 21:19:29.788916111 CEST	49696	80	192.168.2.16	199.232.214.172
Apr 18, 2024 21:19:30.739361048 CEST	49771	443	192.168.2.16	40.127.169.103
Apr 18, 2024 21:19:30.739398956 CEST	443	49771	40.127.169.103	192.168.2.16
Apr 18, 2024 21:19:30.739561081 CEST	49771	443	192.168.2.16	40.127.169.103
Apr 18, 2024 21:19:30.740009069 CEST	49771	443	192.168.2.16	40.127.169.103
Apr 18, 2024 21:19:30.740019083 CEST	443	49771	40.127.169.103	192.168.2.16
Apr 18, 2024 21:19:31.331284046 CEST	443	49771	40.127.169.103	192.168.2.16
Apr 18, 2024 21:19:31.331388950 CEST	49771	443	192.168.2.16	40.127.169.103
Apr 18, 2024 21:19:31.332700968 CEST	49771	443	192.168.2.16	40.127.169.103
Apr 18, 2024 21:19:31.332712889 CEST	443	49771	40.127.169.103	192.168.2.16
Apr 18, 2024 21:19:31.332978010 CEST	443	49771	40.127.169.103	192.168.2.16
Apr 18, 2024 21:19:31.334400892 CEST	49771	443	192.168.2.16	40.127.169.103
Apr 18, 2024 21:19:31.376111984 CEST	443	49771	40.127.169.103	192.168.2.16
Apr 18, 2024 21:19:31.912570953 CEST	443	49771	40.127.169.103	192.168.2.16
Apr 18, 2024 21:19:31.912616968 CEST	443	49771	40.127.169.103	192.168.2.16
Apr 18, 2024 21:19:31.912650108 CEST	443	49771	40.127.169.103	192.168.2.16
Apr 18, 2024 21:19:31.912789106 CEST	49771	443	192.168.2.16	40.127.169.103
Apr 18, 2024 21:19:31.912813902 CEST	443	49771	40.127.169.103	192.168.2.16
Apr 18, 2024 21:19:31.912827015 CEST	443	49771	40.127.169.103	192.168.2.16
Apr 18, 2024 21:19:31.912832022 CEST	49771	443	192.168.2.16	40.127.169.103
Apr 18, 2024 21:19:31.912894011 CEST	49771	443	192.168.2.16	40.127.169.103
Apr 18, 2024 21:19:31.915755033 CEST	49771	443	192.168.2.16	40.127.169.103
Apr 18, 2024 21:19:31.915771961 CEST	443	49771	40.127.169.103	192.168.2.16
Apr 18, 2024 21:19:31.915832043 CEST	49771	443	192.168.2.16	40.127.169.103
Apr 18, 2024 21:19:31.915838003 CEST	443	49771	40.127.169.103	192.168.2.16
Apr 18, 2024 21:19:42.353157043 CEST	80	49704	206.189.254.86	192.168.2.16
Apr 18, 2024 21:19:42.353291035 CEST	49704	80	192.168.2.16	206.189.254.86
Apr 18, 2024 21:19:44.195177078 CEST	49704	80	192.168.2.16	206.189.254.86
Apr 18, 2024 21:19:44.195782900 CEST	49773	443	192.168.2.16	216.239.36.181
Apr 18, 2024 21:19:44.195888996 CEST	443	49773	216.239.36.181	192.168.2.16
Apr 18, 2024 21:19:44.195981026 CEST	49773	443	192.168.2.16	216.239.36.181
Apr 18, 2024 21:19:44.196293116 CEST	49773	443	192.168.2.16	216.239.36.181
Apr 18, 2024 21:19:44.196330070 CEST	443	49773	216.239.36.181	192.168.2.16
Apr 18, 2024 21:19:44.247123003 CEST	49773	443	192.168.2.16	216.239.36.181
Apr 18, 2024 21:19:44.247199059 CEST	49702	80	192.168.2.16	206.189.254.86
Apr 18, 2024 21:19:44.292117119 CEST	443	49773	216.239.36.181	192.168.2.16
Apr 18, 2024 21:19:44.315469980 CEST	80	49704	206.189.254.86	192.168.2.16
Apr 18, 2024 21:19:44.367655993 CEST	80	49702	206.189.254.86	192.168.2.16
Apr 18, 2024 21:19:44.367717028 CEST	49702	80	192.168.2.16	206.189.254.86
Apr 18, 2024 21:19:44.409293890 CEST	443	49773	216.239.36.181	192.168.2.16
Apr 18, 2024 21:19:44.409408092 CEST	49773	443	192.168.2.16	216.239.36.181
Apr 18, 2024 21:19:44.409441948 CEST	443	49773	216.239.36.181	192.168.2.16
Apr 18, 2024 21:19:44.409502983 CEST	49773	443	192.168.2.16	216.239.36.181
Apr 18, 2024 21:19:47.108659983 CEST	49688	443	192.168.2.16	131.253.33.200
Apr 18, 2024 21:20:21.158019066 CEST	49699	80	192.168.2.16	192.229.211.108
Apr 18, 2024 21:20:21.261913061 CEST	80	49699	192.229.211.108	192.168.2.16
Apr 18, 2024 21:20:21.262032032 CEST	49699	80	192.168.2.16	192.229.211.108

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 18, 2024 21:18:41.982045889 CEST	58467	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:41.982203960 CEST	57574	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:42.074224949 CEST	53	53063	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:42.087069035 CEST	53	58467	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:42.106671095 CEST	53	57574	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:42.114675999 CEST	53	65318	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:42.355654955 CEST	54859	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:42.355798960 CEST	52708	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:42.460865021 CEST	53	54859	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:42.484343052 CEST	53	52708	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:42.707700968 CEST	53	50052	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:43.023217916 CEST	53786	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:43.023346901 CEST	63259	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:43.024570942 CEST	57744	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:43.024763107 CEST	59722	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:43.025592089 CEST	57277	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:43.025748968 CEST	64966	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:43.127413034 CEST	53	63259	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:43.127876997 CEST	53	52830	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:43.128954887 CEST	53	59722	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:43.129125118 CEST	53	57744	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:43.131695986 CEST	53	58432	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:43.131735086 CEST	53	64966	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:43.134340048 CEST	53	57277	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:43.638897896 CEST	64932	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:43.639043093 CEST	50652	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:43.669095039 CEST	53	62191	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:43.745215893 CEST	53	50652	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:43.746700048 CEST	53	64932	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:44.547261953 CEST	62813	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:44.547394037 CEST	59515	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:44.653238058 CEST	53	62813	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:44.653480053 CEST	53	59515	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:44.662465096 CEST	53	52025	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:44.669289112 CEST	53	50757	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:45.022974968 CEST	54285	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:45.023188114 CEST	56814	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:45.127335072 CEST	53	54285	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:45.127682924 CEST	53	56814	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:45.130872965 CEST	60034	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:45.131086111 CEST	62058	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:45.235564947 CEST	53	60034	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:45.267338991 CEST	53	62058	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:45.576792002 CEST	60758	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:45.576934099 CEST	63784	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:45.577434063 CEST	65445	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:45.577575922 CEST	61577	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:45.585252047 CEST	59914	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:45.585407019 CEST	60443	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:45.681216002 CEST	53	60758	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:45.681267977 CEST	53	63784	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:45.682518959 CEST	53	65445	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:45.682732105 CEST	53	61577	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:45.689842939 CEST	53	60443	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:45.690217972 CEST	53	59914	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:45.750463963 CEST	60196	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:45.750610113 CEST	65380	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:45.854855061 CEST	53	65380	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:45.856143951 CEST	53	60196	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:45.945831060 CEST	53	63711	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:46.117033005 CEST	49735	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:46.117176056 CEST	55588	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:46.117985010 CEST	49861	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:46.118114948 CEST	63058	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:46.221416950 CEST	53	49735	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:46.221460104 CEST	53	55588	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:46.222075939 CEST	53	49861	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:46.223134041 CEST	53	63058	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:46.450421095 CEST	53170	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:46.450567007 CEST	54770	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:46.554905891 CEST	53	53170	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:46.555031061 CEST	53	54770	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:46.659066916 CEST	52310	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:46.659420013 CEST	55955	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:46.763861895 CEST	53	52310	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:46.763920069 CEST	53	55955	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:46.813329935 CEST	62184	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:46.813493013 CEST	60612	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:46.918248892 CEST	53	62184	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:46.918566942 CEST	53	60612	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:47.274194002 CEST	62654	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:47.274327993 CEST	57432	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:47.381164074 CEST	53	62654	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:47.398119926 CEST	53	57432	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:47.475743055 CEST	52374	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:47.475886106 CEST	59363	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:47.582792044 CEST	53	59363	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:47.583758116 CEST	53	52374	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:48.275316000 CEST	59779	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:48.275584936 CEST	59879	53	192.168.2.16	1.1.1.1
Apr 18, 2024 21:18:48.385818005 CEST	53	59779	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:48.385869980 CEST	53	59879	1.1.1.1	192.168.2.16
Apr 18, 2024 21:18:59.756321907 CEST	53	65468	1.1.1.1	192.168.2.16
Apr 18, 2024 21:19:18.763089895 CEST	53	54451	1.1.1.1	192.168.2.16
Apr 18, 2024 21:19:41.800921917 CEST	53	59024	1.1.1.1	192.168.2.16
Apr 18, 2024 21:19:42.058312893 CEST	53	52966	1.1.1.1	192.168.2.16
Apr 18, 2024 21:19:48.535691023 CEST	138	138	192.168.2.16	192.168.2.255

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 18, 2024 21:18:45.267409086 CEST	192.168.2.16	1.1.1.1	c243	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 18, 2024 21:18:41.982045889 CEST	192.168.2.16	1.1.1.1	0x3e4	Standard query (0)	af.uppromote.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:41.982203960 CEST	192.168.2.16	1.1.1.1	0xe024	Standard query (0)	af.uppromote.com	65	IN (0x0001)	false
Apr 18, 2024 21:18:42.355654955 CEST	192.168.2.16	1.1.1.1	0x79cc	Standard query (0)	af.uppromote.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:42.355798960 CEST	192.168.2.16	1.1.1.1	0x4b29	Standard query (0)	af.uppromote.com	65	IN (0x0001)	false
Apr 18, 2024 21:18:43.023217916 CEST	192.168.2.16	1.1.1.1	0xb650	Standard query (0)	pro.fontawesome.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:43.023346901 CEST	192.168.2.16	1.1.1.1	0xc283	Standard query (0)	pro.fontawesome.com	65	IN (0x0001)	false
Apr 18, 2024 21:18:43.024570942 CEST	192.168.2.16	1.1.1.1	0x97bf	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:43.024763107 CEST	192.168.2.16	1.1.1.1	0x22fc	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Apr 18, 2024 21:18:43.025592089 CEST	192.168.2.16	1.1.1.1	0xda77	Standard query (0)	d1639lhkj5l89m.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:43.025748968 CEST	192.168.2.16	1.1.1.1	0xfdee	Standard query (0)	d1639lhkj5l89m.cloudfront.net	65	IN (0x0001)	false
Apr 18, 2024 21:18:43.638897896 CEST	192.168.2.16	1.1.1.1	0x9d82	Standard query (0)	d1639lhkj5l89m.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:43.639043093 CEST	192.168.2.16	1.1.1.1	0x561	Standard query (0)	d1639lhkj5l89m.cloudfront.net	65	IN (0x0001)	false
Apr 18, 2024 21:18:44.547261953 CEST	192.168.2.16	1.1.1.1	0x49e2	Standard query (0)	assets.zendesk.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:44.547394037 CEST	192.168.2.16	1.1.1.1	0x20eb	Standard query (0)	assets.zendesk.com	65	IN (0x0001)	false
Apr 18, 2024 21:18:45.022974968 CEST	192.168.2.16	1.1.1.1	0xa4f2	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:45.023188114 CEST	192.168.2.16	1.1.1.1	0xd36a	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Apr 18, 2024 21:18:45.130872965 CEST	192.168.2.16	1.1.1.1	0xcf35	Standard query (0)	static.zdassets.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:45.131086111 CEST	192.168.2.16	1.1.1.1	0x9e88	Standard query (0)	static.zdassets.com	65	IN (0x0001)	false
Apr 18, 2024 21:18:45.576792002 CEST	192.168.2.16	1.1.1.1	0xdf45	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:45.576934099 CEST	192.168.2.16	1.1.1.1	0x9e13	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Apr 18, 2024 21:18:45.577434063 CEST	192.168.2.16	1.1.1.1	0x806b	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:45.577575922 CEST	192.168.2.16	1.1.1.1	0x46	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 18, 2024 21:18:45.585252047 CEST	192.168.2.16	1.1.1.1	0xb14e	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:45.585407019 CEST	192.168.2.16	1.1.1.1	0x826f	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Apr 18, 2024 21:18:45.750463963 CEST	192.168.2.16	1.1.1.1	0xdcb7	Standard query (0)	ekr.zdassets.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:45.750610113 CEST	192.168.2.16	1.1.1.1	0x4a7d	Standard query (0)	ekr.zdassets.com	65	IN (0x0001)	false
Apr 18, 2024 21:18:46.117033005 CEST	192.168.2.16	1.1.1.1	0x7b99	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:46.117176056 CEST	192.168.2.16	1.1.1.1	0x29bc	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 18, 2024 21:18:46.117985010 CEST	192.168.2.16	1.1.1.1	0x5c62	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:46.118114948 CEST	192.168.2.16	1.1.1.1	0xe5e7	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 18, 2024 21:18:46.450421095 CEST	192.168.2.16	1.1.1.1	0x4d0c	Standard query (0)	ekr.zdassets.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:46.450567007 CEST	192.168.2.16	1.1.1.1	0x40f6	Standard query (0)	ekr.zdassets.com	65	IN (0x0001)	false
Apr 18, 2024 21:18:46.659066916 CEST	192.168.2.16	1.1.1.1	0x3dcd	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:46.659420013 CEST	192.168.2.16	1.1.1.1	0xa08d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 18, 2024 21:18:46.813329935 CEST	192.168.2.16	1.1.1.1	0x71b9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:46.813493013 CEST	192.168.2.16	1.1.1.1	0xd2	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 18, 2024 21:18:47.274194002 CEST	192.168.2.16	1.1.1.1	0x387b	Standard query (0)	af.uppromote.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:47.274327993 CEST	192.168.2.16	1.1.1.1	0x1021	Standard query (0)	af.uppromote.com	65	IN (0x0001)	false
Apr 18, 2024 21:18:47.475743055 CEST	192.168.2.16	1.1.1.1	0x257	Standard query (0)	secomapp.zendesk.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:47.475886106 CEST	192.168.2.16	1.1.1.1	0xa45e	Standard query (0)	secomapp.zendesk.com	65	IN (0x0001)	false
Apr 18, 2024 21:18:48.275316000 CEST	192.168.2.16	1.1.1.1	0xf82	Standard query (0)	secomapp.zendesk.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:48.275584936 CEST	192.168.2.16	1.1.1.1	0xcbd4	Standard query (0)	secomapp.zendesk.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 18, 2024 21:18:42.087069035 CEST	1.1.1.1	192.168.2.16	0x3e4	No error (0)	af.uppromote.com		206.189.254.86	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:42.460865021 CEST	1.1.1.1	192.168.2.16	0x79cc	No error (0)	af.uppromote.com		206.189.254.86	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:43.127413034 CEST	1.1.1.1	192.168.2.16	0xc283	No error (0)	pro.fontawesome.com	pro.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:18:43.127680063 CEST	1.1.1.1	192.168.2.16	0xb650	No error (0)	pro.fontawesome.com	pro.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:18:43.128954887 CEST	1.1.1.1	192.168.2.16	0x22fc	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:18:43.129125118 CEST	1.1.1.1	192.168.2.16	0x97bf	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:18:43.129125118 CEST	1.1.1.1	192.168.2.16	0x97bf	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:43.129125118 CEST	1.1.1.1	192.168.2.16	0x97bf	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:43.129125118 CEST	1.1.1.1	192.168.2.16	0x97bf	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:43.129125118 CEST	1.1.1.1	192.168.2.16	0x97bf	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:43.134340048 CEST	1.1.1.1	192.168.2.16	0xda77	No error (0)	d1639lhkj5l89m.cloudfront.net		108.139.16.113	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:43.134340048 CEST	1.1.1.1	192.168.2.16	0xda77	No error (0)	d1639lhkj5l89m.cloudfront.net		108.139.16.132	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:43.134340048 CEST	1.1.1.1	192.168.2.16	0xda77	No error (0)	d1639lhkj5l89m.cloudfront.net		108.139.16.166	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:43.134340048 CEST	1.1.1.1	192.168.2.16	0xda77	No error (0)	d1639lhkj5l89m.cloudfront.net		108.139.16.83	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:43.746700048 CEST	1.1.1.1	192.168.2.16	0x9d82	No error (0)	d1639lhkj5l89m.cloudfront.net		108.138.82.25	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:43.746700048 CEST	1.1.1.1	192.168.2.16	0x9d82	No error (0)	d1639lhkj5l89m.cloudfront.net		108.138.82.52	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:43.746700048 CEST	1.1.1.1	192.168.2.16	0x9d82	No error (0)	d1639lhkj5l89m.cloudfront.net		108.138.82.184	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:43.746700048 CEST	1.1.1.1	192.168.2.16	0x9d82	No error (0)	d1639lhkj5l89m.cloudfront.net		108.138.82.102	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:44.653238058 CEST	1.1.1.1	192.168.2.16	0x49e2	No error (0)	assets.zendesk.com	cf.zdassets.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:18:44.653238058 CEST	1.1.1.1	192.168.2.16	0x49e2	No error (0)	cf.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:44.653238058 CEST	1.1.1.1	192.168.2.16	0x49e2	No error (0)	cf.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:44.653480053 CEST	1.1.1.1	192.168.2.16	0x20eb	No error (0)	assets.zendesk.com	cf.zdassets.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:18:45.127335072 CEST	1.1.1.1	192.168.2.16	0xa4f2	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:18:45.127335072 CEST	1.1.1.1	192.168.2.16	0xa4f2	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:45.127335072 CEST	1.1.1.1	192.168.2.16	0xa4f2	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:45.127335072 CEST	1.1.1.1	192.168.2.16	0xa4f2	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:45.127335072 CEST	1.1.1.1	192.168.2.16	0xa4f2	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:45.127682924 CEST	1.1.1.1	192.168.2.16	0xd36a	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:18:45.235564947 CEST	1.1.1.1	192.168.2.16	0xcf35	No error (0)	static.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:45.235564947 CEST	1.1.1.1	192.168.2.16	0xcf35	No error (0)	static.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:45.681216002 CEST	1.1.1.1	192.168.2.16	0xdf45	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:18:45.681216002 CEST	1.1.1.1	192.168.2.16	0xdf45	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:45.681216002 CEST	1.1.1.1	192.168.2.16	0xdf45	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:45.681216002 CEST	1.1.1.1	192.168.2.16	0xdf45	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:45.681216002 CEST	1.1.1.1	192.168.2.16	0xdf45	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:45.681267977 CEST	1.1.1.1	192.168.2.16	0x9e13	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 21:18:45.682518959 CEST	1.1.1.1	192.168.2.16	0x806b	No error (0)	stats.g.doubleclick.net		172.253.124.154	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:45.682518959 CEST	1.1.1.1	192.168.2.16	0x806b	No error (0)	stats.g.doubleclick.net		172.253.124.155	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:45.682518959 CEST	1.1.1.1	192.168.2.16	0x806b	No error (0)	stats.g.doubleclick.net		172.253.124.157	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:45.682518959 CEST	1.1.1.1	192.168.2.16	0x806b	No error (0)	stats.g.doubleclick.net		172.253.124.156	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:45.690217972 CEST	1.1.1.1	192.168.2.16	0xb14e	No error (0)	td.doubleclick.net		142.250.105.157	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:45.690217972 CEST	1.1.1.1	192.168.2.16	0xb14e	No error (0)	td.doubleclick.net		142.250.105.156	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:45.690217972 CEST	1.1.1.1	192.168.2.16	0xb14e	No error (0)	td.doubleclick.net		142.250.105.154	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:45.690217972 CEST	1.1.1.1	192.168.2.16	0xb14e	No error (0)	td.doubleclick.net		142.250.105.155	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:45.856143951 CEST	1.1.1.1	192.168.2.16	0xdcb7	No error (0)	ekr.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:45.856143951 CEST	1.1.1.1	192.168.2.16	0xdcb7	No error (0)	ekr.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:46.221416950 CEST	1.1.1.1	192.168.2.16	0x7b99	No error (0)	www.google.com		64.233.176.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:46.221416950 CEST	1.1.1.1	192.168.2.16	0x7b99	No error (0)	www.google.com		64.233.176.147	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:46.221416950 CEST	1.1.1.1	192.168.2.16	0x7b99	No error (0)	www.google.com		64.233.176.106	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:46.221416950 CEST	1.1.1.1	192.168.2.16	0x7b99	No error (0)	www.google.com		64.233.176.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:46.221416950 CEST	1.1.1.1	192.168.2.16	0x7b99	No error (0)	www.google.com		64.233.176.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:46.221416950 CEST	1.1.1.1	192.168.2.16	0x7b99	No error (0)	www.google.com		64.233.176.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:46.221460104 CEST	1.1.1.1	192.168.2.16	0x29bc	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 18, 2024 21:18:46.222075939 CEST	1.1.1.1	192.168.2.16	0x5c62	No error (0)	stats.g.doubleclick.net		142.251.15.156	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:46.222075939 CEST	1.1.1.1	192.168.2.16	0x5c62	No error (0)	stats.g.doubleclick.net		142.251.15.157	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:46.222075939 CEST	1.1.1.1	192.168.2.16	0x5c62	No error (0)	stats.g.doubleclick.net		142.251.15.155	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:46.222075939 CEST	1.1.1.1	192.168.2.16	0x5c62	No error (0)	stats.g.doubleclick.net		142.251.15.154	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:46.554905891 CEST	1.1.1.1	192.168.2.16	0x4d0c	No error (0)	ekr.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:46.554905891 CEST	1.1.1.1	192.168.2.16	0x4d0c	No error (0)	ekr.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:46.763861895 CEST	1.1.1.1	192.168.2.16	0x3dcd	No error (0)	www.google.com		74.125.138.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:46.763861895 CEST	1.1.1.1	192.168.2.16	0x3dcd	No error (0)	www.google.com		74.125.138.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:46.763861895 CEST	1.1.1.1	192.168.2.16	0x3dcd	No error (0)	www.google.com		74.125.138.106	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:46.763861895 CEST	1.1.1.1	192.168.2.16	0x3dcd	No error (0)	www.google.com		74.125.138.147	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:46.763861895 CEST	1.1.1.1	192.168.2.16	0x3dcd	No error (0)	www.google.com		74.125.138.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:46.763861895 CEST	1.1.1.1	192.168.2.16	0x3dcd	No error (0)	www.google.com		74.125.138.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:46.763920069 CEST	1.1.1.1	192.168.2.16	0xa08d	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 18, 2024 21:18:46.918248892 CEST	1.1.1.1	192.168.2.16	0x71b9	No error (0)	www.google.com		108.177.122.106	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:46.918248892 CEST	1.1.1.1	192.168.2.16	0x71b9	No error (0)	www.google.com		108.177.122.147	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:46.918248892 CEST	1.1.1.1	192.168.2.16	0x71b9	No error (0)	www.google.com		108.177.122.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:46.918248892 CEST	1.1.1.1	192.168.2.16	0x71b9	No error (0)	www.google.com		108.177.122.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:46.918248892 CEST	1.1.1.1	192.168.2.16	0x71b9	No error (0)	www.google.com		108.177.122.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:46.918248892 CEST	1.1.1.1	192.168.2.16	0x71b9	No error (0)	www.google.com		108.177.122.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:46.918566942 CEST	1.1.1.1	192.168.2.16	0xd2	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 18, 2024 21:18:47.381164074 CEST	1.1.1.1	192.168.2.16	0x387b	No error (0)	af.uppromote.com		206.189.254.86	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:47.583758116 CEST	1.1.1.1	192.168.2.16	0x257	No error (0)	secomapp.zendesk.com		104.16.51.111	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:47.583758116 CEST	1.1.1.1	192.168.2.16	0x257	No error (0)	secomapp.zendesk.com		104.16.53.111	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:48.385818005 CEST	1.1.1.1	192.168.2.16	0xf82	No error (0)	secomapp.zendesk.com		104.16.53.111	A (IP address)	IN (0x0001)	false
Apr 18, 2024 21:18:48.385818005 CEST	1.1.1.1	192.168.2.16	0xf82	No error (0)	secomapp.zendesk.com		104.16.51.111	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

af.uppromote.com

https:

cdn.jsdelivr.net

d1639lhkj5l89m.cloudfront.net

assets.zendesk.com

static.zdassets.com

analytics.google.com

stats.g.doubleclick.net

td.doubleclick.net

ekr.zdassets.com

www.google.com

secomapp.zendesk.com

fs.microsoft.com

slscr.update.microsoft.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49702	206.189.254.86	80	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 18, 2024 21:18:42.233458996 CEST	431	OUT	GET / HTTP/1.1 Host: af.uppromote.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 18, 2024 21:18:42.353634119 CEST	387	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.18.0 (Ubuntu) Date: Thu, 18 Apr 2024 19:18:42 GMT Content-Type: text/html Content-Length: 178 Connection: keep-alive Location: https://af.uppromote.com/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>
Apr 18, 2024 21:19:27.366697073 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49704	206.189.254.86	80	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 18, 2024 21:19:27.238519907 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49707	206.189.254.86	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:42 UTC	659	OUT	GET / HTTP/1.1 Host: af.uppromote.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:18:42 UTC	1217	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:18:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: private, must-revalidate pragma: no-cache expires: -1 Set-Cookie: XSRF-TOKEN=eyJpdiI6InppOEtYM0hPXC8yWFJzMnRvODZrRGhRPT0iLCJ2YWx1ZSI6IkRsckxwSDRBTGtGU1pNUjVWdldIZjZvbTBiSXFJWVE2TUgzK0pKcXRiTitab0JRZGNHMWZVK2o4R2JDNHo2SkEiLCJtYWMiOiI0NWY1NGFkMWI1NzBhMmZhMjQ1N2JlZjIzMTA1M2Y0YmFiYjc1Njk2Y2FlYmJhOWZiMDRkYTNkOTFmNzQwYzhjIn0%3D; expires=Fri, 19-Apr-2024 07:18:42 GMT; Max-Age=43200; path=/; secure; samesite=none Set-Cookie: laravel_session=eyJpdiI6ImhseUNxSzk2UWZQRFBLYzhkZTJwUFE9PSIsInZhbHVlIjoiam9OK2RRa2xmSUlqbWZTeEZJc2hLUVZRS2c2S3AwT1FIaU5aZHQ1UU1sYjJIZlMzQWdVWDl3OVRwZU52bWR0QmhvRVgrOW9qeVA0QmtKTVBpdjVwMWdaa3FuWkxCeU1CSEVZaXRYRzM4MTIwMlhxWlwvbVZURk5kYVJxQXZnVmk4IiwibWFjIjoiNzMxYjMyNDVlYjE2NjEwYTFiN2ZiM2ZlZWQ4N2VlNWFkYjE2MzE2ODI2MWEzNDg3YzA3MTNlYWQ1YmRlNWZiOSJ9; expires=Fri, 19-Apr-2024 07:18:42 GMT; Max-Age=43200; path=/; secure; httponly; samesite=none Front-End-Https: on Strict-Transport-Security: max-age=3600; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Forwarded-For: 81.181.57.52
2024-04-18 19:18:42 UTC	10355	IN	Data Raw: 31 63 30 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 73 69 74 65 2d 76 65 72 69 66 69 63 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 70 4f 59 70 78 2d 65 4f 4d 50 61 4a 69 43 65 76 43 5a 47 36 61 72 4e 59 51 4b 68 69 49 51 6a 4f 4c 6d 46 64 72 65 47 4d 49 56 38 22 20 2f 3e 0a 0a 20 20 20 20 3c 74 69 74 6c 65 3e 41 46 46 49 Data Ascii: 1c0d<!DOCTYPE html><html><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="google-site-verification" content="pOYpx-eOMPaJiCevCZG6arNYQKhiIQjOLmFdreGMIV8" /> <title>AFFI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49708	206.189.254.86	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:43 UTC	1165	OUT	GET /css/bootstrap.min.css HTTP/1.1 Host: af.uppromote.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://af.uppromote.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InppOEtYM0hPXC8yWFJzMnRvODZrRGhRPT0iLCJ2YWx1ZSI6IkRsckxwSDRBTGtGU1pNUjVWdldIZjZvbTBiSXFJWVE2TUgzK0pKcXRiTitab0JRZGNHMWZVK2o4R2JDNHo2SkEiLCJtYWMiOiI0NWY1NGFkMWI1NzBhMmZhMjQ1N2JlZjIzMTA1M2Y0YmFiYjc1Njk2Y2FlYmJhOWZiMDRkYTNkOTFmNzQwYzhjIn0%3D; laravel_session=eyJpdiI6ImhseUNxSzk2UWZQRFBLYzhkZTJwUFE9PSIsInZhbHVlIjoiam9OK2RRa2xmSUlqbWZTeEZJc2hLUVZRS2c2S3AwT1FIaU5aZHQ1UU1sYjJIZlMzQWdVWDl3OVRwZU52bWR0QmhvRVgrOW9qeVA0QmtKTVBpdjVwMWdaa3FuWkxCeU1CSEVZaXRYRzM4MTIwMlhxWlwvbVZURk5kYVJxQXZnVmk4IiwibWFjIjoiNzMxYjMyNDVlYjE2NjEwYTFiN2ZiM2ZlZWQ4N2VlNWFkYjE2MzE2ODI2MWEzNDg3YzA3MTNlYWQ1YmRlNWZiOSJ9
2024-04-18 19:18:43 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:18:43 GMT Content-Type: text/css Content-Length: 121276 Connection: close Last-Modified: Tue, 16 Apr 2024 03:32:48 GMT ETag: "661df160-1d9bc" Accept-Ranges: bytes Front-End-Https: on Strict-Transport-Security: max-age=3600; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Forwarded-For: 81.181.57.52
2024-04-18 19:18:43 UTC	15976	IN	Data Raw: 20 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 64 65 74 61 69 6c 73 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 6d 61 69 6e 2c 6d 65 6e 75 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 2c 73 75 6d 6d 61 72 79 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 61 75 64 69 6f 2c 63 61 6e 76 61 73 2c 70 72 6f 67 72 65 73 73 2c 76 69 64 65 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 Data Ascii: html{font-family:sans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;ve
2024-04-18 19:18:43 UTC	16384	IN	Data Raw: 69 64 20 23 64 64 64 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 2e 69 6d 67 2d 63 69 72 63 6c 65 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 7d 68 72 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 62 6f 72 64 65 72 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 65 65 7d 2e 73 72 2d 6f 6e 6c 79 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f Data Ascii: id #ddd;border-radius:4px;-webkit-transition:all .2s ease-in-out;-o-transition:all .2s ease-in-out;transition:all .2s ease-in-out}.img-circle{border-radius:50%}hr{margin-top:20px;margin-bottom:20px;border:0;border-top:1px solid #eee}.sr-only{position:abso
2024-04-18 19:18:43 UTC	16384	IN	Data Raw: 74 3e 74 72 2e 69 6e 66 6f 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 2e 69 6e 66 6f 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 2e 69 6e 66 6f 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 2e 69 6e 66 6f 3e 74 68 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 39 65 64 66 37 7d 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 3e 74 64 2e 69 6e 66 6f 3a 68 6f 76 65 72 2c 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 3e 74 68 2e 69 6e 66 6f 3a 68 6f 76 65 72 2c 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 2e 69 6e 66 6f 3a 68 6f 76 65 72 3e 74 64 2c 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 3a 68 6f 76 65 72 3e 2e 69 6e 66 6f 2c 2e 74 61 Data Ascii: t>tr.info>td,.table>thead>tr.info>th,.table>tbody>tr.info>th,.table>tfoot>tr.info>th{background-color:#d9edf7}.table-hover>tbody>tr>td.info:hover,.table-hover>tbody>tr>th.info:hover,.table-hover>tbody>tr.info:hover>td,.table-hover>tbody>tr:hover>.info,.ta
2024-04-18 19:18:43 UTC	16384	IN	Data Raw: 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 34 39 64 34 34 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 35 35 36 32 35 7d 2e 62 74 6e 2d 73 75 63 63 65 73 73 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 34 39 64 34 34 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 33 39 38 34 33 39 7d 2e 62 74 6e 2d 73 75 63 63 65 73 73 3a 61 63 74 69 76 65 2c 2e 62 74 6e 2d 73 75 63 63 65 73 73 2e 61 63 74 69 76 65 2c 2e 6f 70 65 6e 3e 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 62 74 6e 2d 73 75 63 63 65 73 73 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 34 39 64 34 34 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 33 39 38 Data Ascii: #fff;background-color:#449d44;border-color:#255625}.btn-success:hover{color:#fff;background-color:#449d44;border-color:#398439}.btn-success:active,.btn-success.active,.open>.dropdown-toggle.btn-success{color:#fff;background-color:#449d44;border-color:#398
2024-04-18 19:18:43 UTC	16384	IN	Data Raw: 72 3a 23 65 65 65 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 33 33 37 61 62 37 7d 2e 6e 61 76 20 2e 6e 61 76 2d 64 69 76 69 64 65 72 7b 68 65 69 67 68 74 3a 31 70 78 3b 6d 61 72 67 69 6e 3a 39 70 78 20 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 35 65 35 65 35 7d 2e 6e 61 76 3e 6c 69 3e 61 3e 69 6d 67 7b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 7d 2e 6e 61 76 2d 74 61 62 73 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 7d 2e 6e 61 76 2d 74 61 62 73 3e 6c 69 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 31 70 78 7d 2e 6e 61 76 2d 74 61 62 73 3e 6c 69 3e 61 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 70 78 3b 6c Data Ascii: r:#eee;border-color:#337ab7}.nav .nav-divider{height:1px;margin:9px 0;overflow:hidden;background-color:#e5e5e5}.nav>li>a>img{max-width:none}.nav-tabs{border-bottom:1px solid #ddd}.nav-tabs>li{float:left;margin-bottom:-1px}.nav-tabs>li>a{margin-right:2px;l
2024-04-18 19:18:43 UTC	16384	IN	Data Raw: 66 5d 3a 68 6f 76 65 72 2c 2e 6c 61 62 65 6c 2d 77 61 72 6e 69 6e 67 5b 68 72 65 66 5d 3a 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 63 39 37 31 66 7d 2e 6c 61 62 65 6c 2d 64 61 6e 67 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 39 35 33 34 66 7d 2e 6c 61 62 65 6c 2d 64 61 6e 67 65 72 5b 68 72 65 66 5d 3a 68 6f 76 65 72 2c 2e 6c 61 62 65 6c 2d 64 61 6e 67 65 72 5b 68 72 65 66 5d 3a 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 39 33 30 32 63 7d 2e 62 61 64 67 65 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 69 6e 2d 77 69 64 74 68 3a 31 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 70 78 20 37 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 66 6f 6e 74 Data Ascii: f]:hover,.label-warning[href]:focus{background-color:#ec971f}.label-danger{background-color:#d9534f}.label-danger[href]:hover,.label-danger[href]:focus{background-color:#c9302c}.badge{display:inline-block;min-width:10px;padding:3px 7px;font-size:12px;font
2024-04-18 19:18:43 UTC	16384	IN	Data Raw: 69 6c 64 2c 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 2e 74 61 62 6c 65 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 33 70 78 7d 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 62 6f 64 79 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 72 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 2e 74 61 62 6c 65 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 62 6f 64 79 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 72 3a 6c 61 73 74 2d 63 Data Ascii: ild,.panel>.table-responsive:last-child>.table:last-child{border-bottom-right-radius:3px;border-bottom-left-radius:3px}.panel>.table:last-child>tbody:last-child>tr:last-child,.panel>.table-responsive:last-child>.table:last-child>tbody:last-child>tr:last-c
2024-04-18 19:18:43 UTC	6996	IN	Data Raw: 2e 72 69 67 68 74 7b 72 69 67 68 74 3a 30 3b 6c 65 66 74 3a 61 75 74 6f 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 6c 65 66 74 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 30 30 31 29 20 30 25 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 35 29 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 6c 65 66 74 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 30 30 31 29 20 30 25 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 35 29 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 61 72 2c 6c 65 66 74 20 74 6f 70 2c 72 69 67 68 74 20 74 6f 70 Data Ascii: .right{right:0;left:auto;background-image:-webkit-linear-gradient(left,rgba(0,0,0,.0001) 0%,rgba(0,0,0,.5) 100%);background-image:-o-linear-gradient(left,rgba(0,0,0,.0001) 0%,rgba(0,0,0,.5) 100%);background-image:-webkit-gradient(linear,left top,right top

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49710	206.189.254.86	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:43 UTC	1159	OUT	GET /css/animate.css HTTP/1.1 Host: af.uppromote.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://af.uppromote.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InppOEtYM0hPXC8yWFJzMnRvODZrRGhRPT0iLCJ2YWx1ZSI6IkRsckxwSDRBTGtGU1pNUjVWdldIZjZvbTBiSXFJWVE2TUgzK0pKcXRiTitab0JRZGNHMWZVK2o4R2JDNHo2SkEiLCJtYWMiOiI0NWY1NGFkMWI1NzBhMmZhMjQ1N2JlZjIzMTA1M2Y0YmFiYjc1Njk2Y2FlYmJhOWZiMDRkYTNkOTFmNzQwYzhjIn0%3D; laravel_session=eyJpdiI6ImhseUNxSzk2UWZQRFBLYzhkZTJwUFE9PSIsInZhbHVlIjoiam9OK2RRa2xmSUlqbWZTeEZJc2hLUVZRS2c2S3AwT1FIaU5aZHQ1UU1sYjJIZlMzQWdVWDl3OVRwZU52bWR0QmhvRVgrOW9qeVA0QmtKTVBpdjVwMWdaa3FuWkxCeU1CSEVZaXRYRzM4MTIwMlhxWlwvbVZURk5kYVJxQXZnVmk4IiwibWFjIjoiNzMxYjMyNDVlYjE2NjEwYTFiN2ZiM2ZlZWQ4N2VlNWFkYjE2MzE2ODI2MWEzNDg3YzA3MTNlYWQ1YmRlNWZiOSJ9
2024-04-18 19:18:43 UTC	407	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:18:43 GMT Content-Type: text/css Content-Length: 66203 Connection: close Last-Modified: Tue, 16 Apr 2024 03:32:48 GMT ETag: "661df160-1029b" Accept-Ranges: bytes Front-End-Https: on Strict-Transport-Security: max-age=3600; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Forwarded-For: 81.181.57.52
2024-04-18 19:18:43 UTC	15977	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 0a 2f 2a 21 0a 41 6e 69 6d 61 74 65 2e 63 73 73 20 2d 20 68 74 74 70 3a 2f 2f 64 61 6e 65 64 65 6e 2e 6d 65 2f 61 6e 69 6d 61 74 65 0a 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 0a 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 33 20 44 61 6e 69 65 6c 20 45 64 65 6e 0a 0a 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 20 61 20 63 6f 70 79 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 61 6e 64 20 61 73 73 6f 63 69 61 74 65 64 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 69 6c 65 73 Data Ascii: @charset "UTF-8";/*!Animate.css - http://daneden.me/animateLicensed under the MIT licenseCopyright (c) 2013 Daniel EdenPermission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files
2024-04-18 19:18:43 UTC	16384	IN	Data Raw: 70 20 7b 0a 20 20 20 20 30 25 20 7b 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 32 30 30 30 70 78 29 3b 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 32 30 30 30 70 78 29 3b 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 32 30 30 30 70 78 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 36 30 25 20 7b 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 33 30 70 78 29 3b 0a 20 20 20 20 20 20 20 20 2d 6d Data Ascii: p { 0% { opacity: 0; -webkit-transform: translateY(2000px); -ms-transform: translateY(2000px); transform: translateY(2000px); } 60% { opacity: 1; -webkit-transform: translateY(-30px); -m
2024-04-18 19:18:43 UTC	16384	IN	Data Raw: 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 31 30 30 25 20 7b 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 32 30 70 78 29 3b 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 32 30 70 78 29 3b 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 Data Ascii: -webkit-transform: translateY(0); -ms-transform: translateY(0); transform: translateY(0); } 100% { opacity: 0; -webkit-transform: translateY(-20px); -ms-transform: translateY(-20px); transform:
2024-04-18 19:18:43 UTC	16384	IN	Data Raw: 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 39 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 39 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 39 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 31 30 30 25 20 7b 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 6c 65 66 74 20 62 6f 74 74 6f 6d 3b 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 6c 65 66 74 20 62 6f 74 74 6f 6d 3b 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 6c 65 66 Data Ascii: transform: rotate(90deg); -ms-transform: rotate(90deg); transform: rotate(90deg); opacity: 0; } 100% { -webkit-transform-origin: left bottom; -ms-transform-origin: left bottom; transform-origin: lef
2024-04-18 19:18:43 UTC	1074	IN	Data Raw: 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 7d 0a 7d 0a 0a 2e 72 6f 6c 6c 49 6e 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 72 6f 6c 6c 49 6e 3b 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 72 6f 6c 6c 49 6e 3b 0a 7d 0a 0a 2f 2a 20 6f 72 69 67 69 6e 61 6c 6c 79 20 61 75 74 68 6f 72 65 64 20 62 79 20 4e 69 63 6b 20 50 65 74 74 69 74 20 2d 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 69 63 6b 70 65 74 74 69 74 2f 67 6c 69 64 65 20 2a 2f 0a 0a 40 2d 77 65 62 6b Data Ascii: rm: translateX(0px) rotate(0deg); transform: translateX(0px) rotate(0deg); }}.rollIn { -webkit-animation-name: rollIn; animation-name: rollIn;}/* originally authored by Nick Pettit - https://github.com/nickpettit/glide */@-webk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49709	206.189.254.86	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:43 UTC	1157	OUT	GET /css/style.css HTTP/1.1 Host: af.uppromote.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://af.uppromote.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InppOEtYM0hPXC8yWFJzMnRvODZrRGhRPT0iLCJ2YWx1ZSI6IkRsckxwSDRBTGtGU1pNUjVWdldIZjZvbTBiSXFJWVE2TUgzK0pKcXRiTitab0JRZGNHMWZVK2o4R2JDNHo2SkEiLCJtYWMiOiI0NWY1NGFkMWI1NzBhMmZhMjQ1N2JlZjIzMTA1M2Y0YmFiYjc1Njk2Y2FlYmJhOWZiMDRkYTNkOTFmNzQwYzhjIn0%3D; laravel_session=eyJpdiI6ImhseUNxSzk2UWZQRFBLYzhkZTJwUFE9PSIsInZhbHVlIjoiam9OK2RRa2xmSUlqbWZTeEZJc2hLUVZRS2c2S3AwT1FIaU5aZHQ1UU1sYjJIZlMzQWdVWDl3OVRwZU52bWR0QmhvRVgrOW9qeVA0QmtKTVBpdjVwMWdaa3FuWkxCeU1CSEVZaXRYRzM4MTIwMlhxWlwvbVZURk5kYVJxQXZnVmk4IiwibWFjIjoiNzMxYjMyNDVlYjE2NjEwYTFiN2ZiM2ZlZWQ4N2VlNWFkYjE2MzE2ODI2MWEzNDg3YzA3MTNlYWQ1YmRlNWZiOSJ9
2024-04-18 19:18:43 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:18:43 GMT Content-Type: text/css Content-Length: 181520 Connection: close Last-Modified: Tue, 16 Apr 2024 03:32:49 GMT ETag: "661df161-2c510" Accept-Ranges: bytes Front-End-Https: on Strict-Transport-Security: max-age=3600; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Forwarded-For: 81.181.57.52
2024-04-18 19:18:43 UTC	15976	IN	Data Raw: 2f 2a 0a 20 2a 0a 20 2a 20 20 20 49 4e 53 50 49 4e 49 41 20 2d 20 52 65 73 70 6f 6e 73 69 76 65 20 41 64 6d 69 6e 20 54 68 65 6d 65 0a 20 2a 20 20 20 76 65 72 73 69 6f 6e 20 32 2e 37 0a 20 2a 0a 2a 2f 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4f 70 65 6e 2b 53 61 6e 73 3a 33 30 30 2c 34 30 30 2c 36 30 30 2c 37 30 30 22 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 52 6f 62 6f 74 6f 3a 34 30 30 2c 33 30 30 2c 35 30 30 2c 37 30 30 22 29 3b 0a 68 31 2c 0a 68 32 2c 0a 68 33 2c 0a 68 34 2c 2e 62 72 65 61 64 63 72 75 6d 62 Data Ascii: /* * * INSPINIA - Responsive Admin Theme * version 2.7 **/@import url("https://fonts.googleapis.com/css?family=Open+Sans:300,400,600,700");@import url("https://fonts.googleapis.com/css?family=Roboto:400,300,500,700");h1,h2,h3,h4,.breadcrumb
2024-04-18 19:18:43 UTC	16384	IN	Data Raw: 73 2c 0a 2e 62 74 6e 2d 73 75 63 63 65 73 73 3a 61 63 74 69 76 65 2c 0a 2e 62 74 6e 2d 73 75 63 63 65 73 73 2e 61 63 74 69 76 65 2c 0a 2e 6f 70 65 6e 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 62 74 6e 2d 73 75 63 63 65 73 73 2c 0a 2e 62 74 6e 2d 73 75 63 63 65 73 73 3a 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 0a 2e 62 74 6e 2d 73 75 63 63 65 73 73 3a 61 63 74 69 76 65 3a 68 6f 76 65 72 2c 0a 2e 62 74 6e 2d 73 75 63 63 65 73 73 2e 61 63 74 69 76 65 3a 68 6f 76 65 72 2c 0a 2e 62 74 6e 2d 73 75 63 63 65 73 73 2e 61 63 74 69 76 65 3a 66 6f 63 75 73 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 31 61 37 62 62 39 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 31 61 37 62 62 39 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 46 Data Ascii: s,.btn-success:active,.btn-success.active,.open .dropdown-toggle.btn-success,.btn-success:active:focus,.btn-success:active:hover,.btn-success.active:hover,.btn-success.active:focus { background-color: #1a7bb9; border-color: #1a7bb9; color: #F
2024-04-18 19:18:43 UTC	16384	IN	Data Raw: 68 74 3a 20 31 38 30 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 31 30 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 7d 0a 2e 63 68 61 74 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 63 68 61 74 20 6c 69 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 35 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 64 6f 74 74 65 64 20 23 42 33 41 39 41 39 3b 0a 7d 0a 2e 63 Data Ascii: ht: 180px; border-radius: 4px; overflow: hidden; margin-right: 10px; margin-bottom: 10px;}.chat { margin: 0; padding: 0; list-style: none;}.chat li { margin-bottom: 10px; padding-bottom: 5px; border-bottom: 1px dotted #B3A9A9;}.c
2024-04-18 19:18:43 UTC	16384	IN	Data Raw: 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 7d 0a 2e 64 64 2d 65 6d 70 74 79 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 64 61 73 68 65 64 20 23 62 62 62 3b 0a 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 31 30 30 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 35 65 35 65 35 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 34 35 64 65 67 2c 20 23 66 66 66 20 32 35 25 2c 20 74 72 61 6e 73 70 61 72 65 6e 74 20 32 35 25 2c 20 74 72 61 6e 73 70 61 72 65 6e 74 20 37 35 25 2c 20 23 66 66 66 20 37 35 25 2c 20 23 66 66 66 29 2c 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 34 35 64 Data Ascii: -box-sizing: border-box;}.dd-empty { border: 1px dashed #bbb; min-height: 100px; background-color: #e5e5e5; background-image: -webkit-linear-gradient(45deg, #fff 25%, transparent 25%, transparent 75%, #fff 75%, #fff), -webkit-linear-gradient(45d
2024-04-18 19:18:43 UTC	16384	IN	Data Raw: 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 30 70 78 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 0a 7d 0a 2e 6a 76 65 63 74 6f 72 6d 61 70 2d 7a 6f 6f 6d 69 6e 2c 0a 2e 6a 76 65 63 74 6f 72 6d 61 70 2d 7a 6f 6f 6d 6f 75 74 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 70 78 3b 0a 7d 0a 2e 6a 76 65 63 74 6f 72 6d 61 70 2d 7a 6f 6f 6d 69 6e 20 7b 0a 20 20 74 6f 70 3a 20 31 30 70 78 3b 0a 7d 0a 2e 6a 76 65 63 74 6f 72 6d 61 70 2d 7a 6f 6f 6d 6f 75 74 20 7b 0a 20 20 74 6f 70 3a 20 33 30 70 78 3b 0a 7d 0a 2e 6a 76 65 63 74 6f 72 6d 61 70 2d 67 6f 62 61 63 6b 20 Data Ascii: ursor: pointer; line-height: 10px; text-align: center; box-sizing: content-box;}.jvectormap-zoomin,.jvectormap-zoomout { width: 10px; height: 10px;}.jvectormap-zoomin { top: 10px;}.jvectormap-zoomout { top: 30px;}.jvectormap-goback
2024-04-18 19:18:43 UTC	16384	IN	Data Raw: 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 32 30 70 78 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 72 69 67 68 74 3a 20 30 3b 0a 7d 0a 2e 66 6f 6f 74 65 72 2e 66 69 78 65 64 5f 66 75 6c 6c 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 72 69 67 68 74 3a 20 30 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 30 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 32 30 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 65 37 65 61 65 63 3b 0a 7d 0a 2e 66 6f 6f 74 65 72 2e 66 69 78 65 64 20 7b Data Ascii: left: 0; padding: 10px 20px; position: absolute; right: 0;}.footer.fixed_full { position: fixed; bottom: 0; left: 0; right: 0; z-index: 1000; padding: 10px 20px; background: white; border-top: 1px solid #e7eaec;}.footer.fixed {
2024-04-18 19:18:43 UTC	16384	IN	Data Raw: 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 73 75 72 76 65 79 20 2e 72 6f 77 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 35 30 70 78 3b 0a 7d 0a 2e 73 75 72 76 65 79 20 6c 61 62 65 6c 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 7d 0a 2e 73 75 72 76 65 79 20 2e 6c 6f 67 69 6e 43 6f 6c 75 6d 6e 73 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 32 30 70 78 3b 0a 7d 20 0a 2e 73 75 72 76 65 79 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 7b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 7d 0a 2e 73 75 72 76 65 79 20 2e 62 74 6e 7b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 7d 0a 2e 73 75 72 76 65 79 20 2e 6c 6f 67 69 6e 43 6f 6c 75 6d 6e 73 7b Data Ascii: portant;}.survey .row{ margin-left: -50px;}.survey label{ font-size: 14px; font-weight: 400;}.survey .loginColumns{ padding: 20px;} .survey .form-control{ border-radius: 5px;}.survey .btn{ border-radius: 5px;}.survey .loginColumns{
2024-04-18 19:18:43 UTC	16384	IN	Data Raw: 3a 20 31 35 70 78 3b 2a 2f 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 65 37 65 61 65 63 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 35 70 78 3b 0a 7d 0a 2e 61 72 74 69 63 6c 65 20 2e 73 6f 63 69 61 6c 2d 66 65 65 64 2d 62 6f 78 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 61 72 74 69 63 6c 65 20 2e 73 6f 63 69 61 6c 2d 66 65 65 64 2d 62 6f 78 3a 6c 61 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 65 37 65 61 65 63 3b 0a 7d 0a 2e Data Ascii: : 15px;*/ border: 1px solid #e7eaec; background: #fff; margin-bottom: 15px;}.article .social-feed-box { margin-bottom: 0; border-bottom: none;}.article .social-feed-box:last-child { margin-bottom: 0; border-bottom: 1px solid #e7eaec;}.
2024-04-18 19:18:43 UTC	16384	IN	Data Raw: 6e 74 65 6e 74 3a 20 27 27 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 20 20 77 69 64 74 68 3a 20 32 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 32 30 25 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 31 61 62 33 39 34 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 30 25 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 6b 2d 63 69 72 63 6c 65 42 6f 75 6e 63 65 44 65 6c 61 79 20 31 2e 32 73 20 69 6e 66 69 6e 69 74 65 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 6b 2d 63 69 72 63 6c 65 42 6f 75 6e 63 65 44 65 6c 61 79 20 31 2e 32 73 20 69 6e 66 69 6e 69 74 65 20 65 61 73 65 2d 69 6e 2d 6f 75 Data Ascii: ntent: ''; display: block; margin: 0 auto; width: 20%; height: 20%; background-color: #1ab394; border-radius: 100%; -webkit-animation: sk-circleBounceDelay 1.2s infinite ease-in-out; animation: sk-circleBounceDelay 1.2s infinite ease-in-ou
2024-04-18 19:18:43 UTC	16384	IN	Data Raw: 30 25 20 30 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 7d 0a 2e 6c 61 6e 64 69 6e 67 2d 70 61 67 65 20 2e 68 65 61 64 65 72 2d 62 61 63 6b 2e 74 77 6f 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2e 2e 2f 69 6d 67 2f 6c 61 6e 64 69 6e 67 2f 68 65 61 64 65 72 5f 74 77 6f 2e 6a 70 67 27 29 20 35 30 25 20 30 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 7d 0a 2e 6c 61 6e 64 69 6e 67 2d 70 61 67 65 20 2e 63 61 72 6f 75 73 65 6c 20 7b 0a 20 20 68 65 69 67 68 74 3a 20 34 37 30 70 78 3b 0a 7d 0a 2e 6c 61 6e 64 69 6e 67 2d 70 61 67 65 20 2e 63 61 72 6f 75 73 65 6c 2d 63 61 70 74 69 6f 6e 20 7b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 3b 0a 7d 0a 2e 6c 61 6e 64 69 6e 67 2d 70 61 67 65 20 2e 63 61 72 6f 75 73 65 6c 20 2e 69 74 65 6d 20 7b 0a 20 20 68 65 69 67 Data Ascii: 0% 0 no-repeat;}.landing-page .header-back.two { background: url('../img/landing/header_two.jpg') 50% 0 no-repeat;}.landing-page .carousel { height: 470px;}.landing-page .carousel-caption { z-index: 10;}.landing-page .carousel .item { heig

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49713	151.101.193.229	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:43 UTC	570	OUT	GET /npm/slick-carousel@1.8.1/slick/slick.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://af.uppromote.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:18:43 UTC	759	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1776 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/css; charset=utf-8 X-JSD-Version: 1.8.1 X-JSD-Version-Type: version ETag: W/"6f0-qUoFmzF4tK3sCeMoGs4oGaMAlaQ" Accept-Ranges: bytes Date: Thu, 18 Apr 2024 19:18:43 GMT Age: 1167547 X-Served-By: cache-fra-etou8220022-FRA, cache-pdk-kfty2130026-PDK X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-04-18 19:18:43 UTC	1378	IN	Data Raw: 2f 2a 20 53 6c 69 64 65 72 20 2a 2f 0a 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 72 0a 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 6f 75 63 68 2d 63 61 6c 6c 6f 75 74 3a 20 Data Ascii: /* Slider */.slick-slider{ position: relative; display: block; box-sizing: border-box; -webkit-user-select: none; -moz-user-select: none; -ms-user-select: none; user-select: none; -webkit-touch-callout:
2024-04-18 19:18:43 UTC	398	IN	Data Raw: 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 2e 73 6c 69 63 6b 2d 6c 6f 61 64 69 6e 67 20 69 6d 67 0a 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 2e 64 72 61 67 67 69 6e 67 20 69 6d 67 0a 7b 0a 20 20 20 20 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 73 6c 69 63 6b 2d 69 6e 69 74 69 61 6c 69 7a 65 64 20 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 0a 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 2e 73 6c 69 63 6b 2d 6c 6f 61 64 69 6e 67 20 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 0a 7b 0a 20 20 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 2e 73 6c 69 63 6b 2d 76 65 72 74 69 63 61 Data Ascii: display: block;}.slick-slide.slick-loading img{ display: none;}.slick-slide.dragging img{ pointer-events: none;}.slick-initialized .slick-slide{ display: block;}.slick-loading .slick-slide{ visibility: hidden;}.slick-vertica

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49714	151.101.193.229	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:43 UTC	576	OUT	GET /npm/slick-carousel@1.8.1/slick/slick-theme.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://af.uppromote.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:18:43 UTC	758	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3145 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/css; charset=utf-8 X-JSD-Version: 1.8.1 X-JSD-Version-Type: version ETag: W/"c49-gaQ0+U8rESTzIyu4bylE+C+yOsA" Accept-Ranges: bytes Age: 887428 Date: Thu, 18 Apr 2024 19:18:43 GMT X-Served-By: cache-fra-eddf8230023-FRA, cache-pdk-kpdk1780078-PDK X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-04-18 19:18:43 UTC	1378	IN	Data Raw: 40 63 68 61 72 73 65 74 20 27 55 54 46 2d 38 27 3b 0a 2f 2a 20 53 6c 69 64 65 72 20 2a 2f 0a 2e 73 6c 69 63 6b 2d 6c 6f 61 64 69 6e 67 20 2e 73 6c 69 63 6b 2d 6c 69 73 74 0a 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 20 75 72 6c 28 27 2e 2f 61 6a 61 78 2d 6c 6f 61 64 65 72 2e 67 69 66 27 29 20 63 65 6e 74 65 72 20 63 65 6e 74 65 72 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 7d 0a 0a 2f 2a 20 49 63 6f 6e 73 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 0a 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 73 6c 69 63 6b 27 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2f 66 6f 6e 74 Data Ascii: @charset 'UTF-8';/* Slider /.slick-loading .slick-list{ background: #fff url('./ajax-loader.gif') center center no-repeat;}/ Icons */@font-face{ font-family: 'slick'; font-weight: normal; font-style: normal; src: url('./font
2024-04-18 19:18:43 UTC	1378	IN	Data Raw: 61 63 69 74 79 3a 20 2e 37 35 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0a 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 0a 20 20 20 20 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 67 72 61 79 73 63 61 6c 65 3b 0a 7d 0a 0a 2e 73 6c 69 63 6b 2d 70 72 65 76 0a 7b 0a 20 20 20 20 6c 65 66 74 3a 20 2d 32 35 70 78 3b 0a 7d 0a 5b 64 69 72 3d 27 72 74 6c 27 5d 20 2e 73 6c 69 63 6b 2d 70 72 65 76 0a 7b 0a 20 20 20 20 72 69 67 68 74 3a 20 2d 32 35 70 78 3b 0a 20 20 20 20 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 7d 0a 2e 73 6c 69 63 6b 2d 70 72 65 76 3a 62 65 66 6f 72 65 0a 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 27 e2 86 90 27 3b 0a 7d 0a 5b 64 Data Ascii: acity: .75; color: white; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale;}.slick-prev{ left: -25px;}[dir='rtl'] .slick-prev{ right: -25px; left: auto;}.slick-prev:before{ content: '';}[d
2024-04-18 19:18:43 UTC	389	IN	Data Raw: 79 3a 20 27 73 6c 69 63 6b 27 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 36 70 78 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0a 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 74 6f 70 3a 20 30 3b 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 0a 20 20 20 20 77 69 64 74 68 3a 20 32 30 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0a 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 27 e2 80 a2 27 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 2e 32 35 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 62 6c 61 63 6b 3b 0a 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 Data Ascii: y: 'slick'; font-size: 6px; line-height: 20px; position: absolute; top: 0; left: 0; width: 20px; height: 20px; content: ''; text-align: center; opacity: .25; color: black; -webkit-font-smoothing: ant

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49717	108.139.16.113	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:43 UTC	573	OUT	GET /affbootstrap/css/aff-style.css HTTP/1.1 Host: d1639lhkj5l89m.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://af.uppromote.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:18:43 UTC	441	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 214443 Connection: close Server: nginx Date: Thu, 18 Apr 2024 19:18:43 GMT Last-Modified: Tue, 16 Apr 2024 03:32:48 GMT ETag: "661df160-345ab" Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 1b0d3a52a9221f6e54874cb566a09ea2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P2 X-Amz-Cf-Id: S4nf63tmDV4z0sYFEQqm_vbP2STxKe-_4bmLUhWUaZ-091yf5ga8HQ== Vary: Origin
2024-04-18 19:18:43 UTC	15943	IN	Data Raw: 2f 2a 21 0a 20 2a 20 41 66 66 69 6c 69 61 74 65 20 4d 61 72 6b 65 74 69 6e 67 20 76 31 2e 31 32 2e 32 30 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 30 0a 20 2a 2f 0a 2f 2a 21 20 68 74 74 70 3a 2f 2f 61 66 2e 73 65 63 6f 6d 61 70 70 2e 63 6f 6d 2f 0a 0a 2f 2a 0a 09 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0a 09 46 4f 4e 54 20 2d 20 54 79 70 6f 67 72 61 70 68 79 0a 20 2a 2f 0a 0a 3a 72 6f 6f 74 20 7b 0a 20 20 20 20 2f 2a 20 63 6f 6c 6f 72 20 20 2a 2f 0a 20 20 20 20 2d 2d 74 65 78 74 2d 73 75 63 63 65 73 73 3a 20 23 32 44 43 38 41 38 3b 0a 20 20 20 20 2d 2d 74 65 78 74 2d 6e 61 76 79 3a 20 23 32 44 43 38 41 38 3b 0a 20 20 20 20 2d 2d 74 65 78 74 2d 69 6e 66 6f 3a 20 23 32 44 43 38 41 38 3b Data Ascii: /! Affiliate Marketing v1.12.20 * Copyright 2020 //! http://af.secomapp.com//**********************************FONT - Typography /:root { /* color */ --text-success: #2DC8A8; --text-navy: #2DC8A8; --text-info: #2DC8A8;
2024-04-18 19:18:43 UTC	16384	IN	Data Raw: 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 69 2e 66 61 2d 6c 69 6e 6b 3a 68 6f 76 65 72 2c 20 69 2e 66 61 2d 75 6e 64 6f 3a 68 6f 76 65 72 2c 20 69 2e 66 61 2d 66 69 6c 65 2d 73 65 61 72 63 68 3a 68 6f 76 65 72 2c 20 69 2e 66 61 2d 65 79 65 3a 68 6f 76 65 72 2c 20 69 2e 66 61 2d 73 69 67 6e 2d 69 6e 2d 61 6c 74 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 38 46 42 35 44 36 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 69 2e 66 61 2d 74 69 6d 65 73 2d 73 71 75 61 72 65 2c 20 69 2e 66 61 2d 74 72 61 73 68 2d 61 6c 74 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 74 65 78 74 2d 64 61 6e 67 65 72 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 69 2e 66 61 2d 74 69 6d 65 73 2d 73 71 75 61 72 65 3a 68 6f 76 65 72 2c 20 69 2e Data Ascii: important;}i.fa-link:hover, i.fa-undo:hover, i.fa-file-search:hover, i.fa-eye:hover, i.fa-sign-in-alt:hover { color: #8FB5D6 !important;}i.fa-times-square, i.fa-trash-alt { color: var(--text-danger) !important;}i.fa-times-square:hover, i.
2024-04-18 19:18:43 UTC	206	IN	Data Raw: 41 41 41 41 41 41 64 45 74 6b 41 51 43 45 70 6f 6b 73 79 6b 79 68 52 52 46 62 41 41 41 35 73 51 55 41 41 41 41 41 41 41 41 41 33 52 46 5a 41 41 43 68 71 53 4b 4c 4d 6c 74 6f 55 63 51 57 41 45 42 4f 62 41 45 41 41 41 41 41 41 41 42 41 4e 30 51 57 41 45 42 6f 75 73 69 69 7a 42 68 61 46 4c 45 46 41 4a 41 54 57 77 41 41 41 41 41 41 41 41 44 51 50 4a 45 46 41 42 43 61 4d 72 49 6f 73 34 59 57 52 57 77 42 41 4f 54 45 46 67 41 41 41 41 41 41 41 41 41 30 53 32 51 42 41 49 53 6d 6a 53 7a 4b 7a 4b 46 46 45 56 73 41 41 44 6d 78 42 51 41 41 41 41 41 41 41 41 44 4e 45 56 6b 41 41 4b 47 70 49 34 73 79 65 32 68 52 78 42 59 41 Data Ascii: AAAAAAdEtkAQCEpoksykyhRRFbAAA5sQUAAAAAAAAA3RFZAAChqSKLMltoUcQWAEBObAEAAAAAAABAN0QWAEBousiizBhaFLEFAJATWwAAAAAAAADQPJEFABCaMrIos4YWRWwBAOTEFgAAAAAAAAA0S2QBAISmjSzKzKFFEVsAADmxBQAAAAAAAADNEVkAAKGpI4sye2hRxBYA
2024-04-18 19:18:43 UTC	12792	IN	Data Raw: 51 45 35 73 41 51 41 41 41 41 41 41 41 45 41 7a 52 42 59 41 51 47 6a 36 79 4b 49 49 4c 66 34 67 74 67 41 41 51 6d 49 4c 41 41 41 41 41 41 41 41 41 48 59 6e 73 67 41 41 51 69 4b 4c 4d 36 48 46 6d 64 67 43 41 41 69 4a 4c 51 41 41 41 41 41 41 41 41 44 59 6a 63 67 43 41 41 69 4a 4c 4c 34 67 74 50 69 43 32 41 49 41 43 49 6b 74 41 41 41 41 41 41 41 41 41 4e 69 63 79 41 49 41 43 49 6b 73 76 69 47 30 2b 49 62 59 41 67 41 49 69 53 30 41 41 41 41 41 41 41 41 41 32 49 7a 49 41 67 41 49 69 53 77 65 49 62 52 34 68 4e 67 43 41 41 69 4a 4c 51 41 41 41 41 41 41 41 41 42 59 6e 63 67 43 41 41 69 4a 4c 4a 34 67 74 48 69 43 32 41 49 41 43 49 6b 74 41 41 41 41 41 41 41 41 41 46 69 4e 79 41 49 41 43 49 6b 73 66 6b 42 6f 38 51 4e 69 43 77 41 67 4a 4c 59 41 41 41 41 41 41 41 41 Data Ascii: QE5sAQAAAAAAAEAzRBYAQGj6yKIILf4gtgAAQmILAAAAAAAAAHYnsgAAQiKLM6HFmdgCAAiJLQAAAAAAAADYjcgCAAiJLL4gtPiC2AIACIktAAAAAAAAANicyAIACIksviG0+IbYAgAIiS0AAAAAAAAA2IzIAgAIiSweIbR4hNgCAAiJLQAAAAAAAABYncgCAAiJLJ4gtHiC2AIACIktAAAAAAAAAFiNyAIACIksfkBo8QNiCwAgJLYAAAAAAAA
2024-04-18 19:18:43 UTC	16384	IN	Data Raw: 42 51 41 51 45 46 73 41 41 41 41 41 77 45 46 65 76 33 6e 37 67 38 67 43 41 48 69 51 79 41 4b 41 59 51 67 74 41 42 69 47 32 41 49 41 43 4c 79 4c 4c 66 35 69 6b 41 41 41 41 41 43 77 6e 30 74 6b 38 5a 32 52 41 77 41 50 45 46 6b 41 4d 4a 52 58 7a 38 2f 50 54 67 53 41 6f 66 67 51 43 77 41 45 66 72 78 45 6e 41 41 41 41 41 44 41 68 74 7a 74 41 51 41 42 6b 51 55 41 77 37 48 52 41 6f 44 68 32 47 77 42 41 41 53 2b 75 31 7a 77 41 67 41 41 41 41 41 62 45 56 6b 41 41 41 47 52 42 51 42 44 45 6c 6f 41 4d 43 53 78 42 51 41 51 45 46 73 41 41 41 41 41 77 45 5a 45 46 67 42 41 51 47 51 42 77 4c 43 45 46 67 41 4d 53 32 77 42 41 41 54 45 46 67 41 41 41 41 41 51 45 31 6b 41 41 41 47 52 42 51 42 44 45 31 6f 41 4d 44 53 78 42 51 41 51 45 46 73 41 41 41 41 41 51 45 52 6b 41 51 41 Data Ascii: BQAQEFsAAAAAwEFev3n7g8gCAHiQyAKAYQgtABiG2AIACLyLLf5ikAAAAACwn0tk8Z2RAwAPEFkAMJRXz8/PTgSAofgQCwAEfrxEnAAAAADAhtztAQABkQUAw7HRAoDh2GwBAAS+u1zwAgAAAAAbEVkAAAGRBQBDEloAMCSxBQAQEFsAAAAAwEZEFgBAQGQBwLCEFgAMS2wBAATEFgAAAAAQE1kAAAGRBQBDE1oAMDSxBQAQEFsAAAAAQERkAQA
2024-04-18 19:18:43 UTC	5106	IN	Data Raw: 59 43 4a 69 43 77 41 67 4a 4c 59 41 65 49 50 49 41 67 41 49 69 53 77 41 41 41 41 6d 49 37 51 41 41 41 43 59 6a 4e 67 43 41 41 69 4a 4c 51 42 65 49 4c 49 41 41 45 49 69 43 77 41 41 67 41 6b 4a 4c 51 41 41 41 43 59 6b 74 67 41 41 51 6d 49 4c 67 43 2b 49 4c 41 43 41 6b 4d 67 43 41 41 42 67 55 6b 49 4c 41 41 43 41 53 59 6b 74 41 49 43 51 32 41 4a 41 5a 41 45 41 74 45 51 57 41 41 41 41 45 78 4e 61 41 41 41 41 54 45 78 73 41 51 43 45 78 43 44 33 31 59 49 41 41 43 41 41 53 55 52 42 56 42 62 41 30 6b 51 57 41 45 42 49 5a 41 45 41 41 44 41 35 6f 51 55 41 41 4d 44 6b 78 42 59 41 51 45 68 73 41 53 78 4a 5a 41 45 41 68 45 51 57 41 41 41 41 4a 79 43 30 41 41 41 41 4f 41 47 78 42 51 41 51 45 6c 73 41 53 78 46 5a 41 41 41 68 6b 51 55 41 41 4d 42 4a 43 43 30 41 41 41 42 Data Ascii: YCJiCwAgJLYAeIPIAgAIiSwAAAAmI7QAAACYjNgCAAiJLQBeILIAAEIiCwAAgAkJLQAAACYktgAAQmILgC+ILACAkMgCAABgUkILAACASYktAICQ2AJAZAEAtEQWAAAAExNaAAAATExsAQCExCD31YIAACAASURBVBbA0kQWAEBIZAEAADA5oQUAAMDkxBYAQEhsASxJZAEAhEQWAAAAJyC0AAAAOAGxBQAQElsASxFZAAAhkQUAAMBJCC0AAAB
2024-04-18 19:18:43 UTC	9594	IN	Data Raw: 58 49 41 67 41 49 4a 72 49 41 41 41 43 41 67 51 6b 74 41 41 41 41 59 47 42 69 43 77 41 67 30 43 46 51 2b 4e 39 6d 75 2b 76 75 51 65 48 30 6d 55 55 57 41 45 41 55 6b 51 55 41 41 41 41 4d 37 74 56 2b 76 33 66 48 41 41 41 41 4d 44 69 2f 34 41 77 41 42 50 76 2b 34 65 37 6d 58 51 39 44 6e 53 4b 4c 74 77 31 38 46 41 42 67 44 43 49 4c 41 41 41 41 53 4d 42 47 43 77 41 41 41 45 6a 41 5a 67 73 41 49 4e 6a 62 48 6a 5a 62 69 43 77 41 67 47 41 69 43 77 41 41 41 45 68 43 61 41 45 41 41 41 42 4a 69 43 30 41 67 47 43 48 32 4f 4b 6e 56 6f 65 36 32 65 35 2b 46 46 6b 41 41 49 46 45 46 67 41 41 41 4a 44 49 71 2f 31 2b 37 37 34 42 41 41 41 67 6b 63 31 32 39 36 61 55 63 6c 39 4b 65 65 33 65 41 59 41 41 7a 54 30 36 33 47 78 33 37 30 6f 70 2f 32 37 67 6f 77 41 41 59 78 42 5a 41 Data Ascii: XIAgAIJrIAAACAgQktAAAAYGBiCwAg0CFQ+N9mu+vuQeH0mUUWAEAUkQUAAAAM7tV+v3fHAAAAMDi/4AwABPv+4e7mXQ9DnSKLtw18FABgDCILAAAASMBGCwAAAEjAZgsAINjbHjZbiCwAgGAiCwAAAEhCaAEAAABJiC0AgGCH2OKnVoe62e5+FFkAAIFEFgAAAJDIq/1+774BAAAgkc1296aUcl9Kee3eAYAAzT063Gx370op/27gowAAYxBZA
2024-04-18 19:18:43 UTC	12792	IN	Data Raw: 41 41 43 71 4a 72 51 41 41 41 41 41 41 4b 6f 6d 74 67 43 41 58 6f 6b 73 41 41 41 41 41 49 44 71 43 53 30 41 41 41 41 41 67 4f 71 4a 4c 51 43 67 46 79 49 4c 41 41 41 41 41 4b 41 4a 51 67 73 41 41 41 41 41 6f 41 6c 69 43 77 41 34 69 63 67 43 41 41 41 41 41 47 69 47 30 41 49 41 41 41 41 41 61 49 62 59 41 67 43 4f 49 72 49 41 41 41 41 41 41 4a 6f 69 74 41 41 41 41 41 41 41 6d 69 4b 32 41 49 43 44 69 43 77 41 41 41 41 41 67 4f 59 49 4c 51 41 41 41 41 43 41 35 6f 67 74 41 47 41 76 49 67 73 41 41 41 41 41 6f 45 6c 43 43 77 41 41 41 41 43 67 53 57 49 4c 41 48 69 55 79 41 49 41 41 41 41 41 61 4a 62 51 41 67 41 41 41 41 42 6f 6c 74 67 43 41 4f 34 6c 73 67 41 41 41 41 41 41 6d 69 61 30 41 41 41 41 41 41 43 61 4a 72 59 41 67 42 2b 49 4c 41 41 41 41 41 43 41 35 67 6b Data Ascii: AACqJrQAAAAAAKomtgCAXoksAAAAAIDqCS0AAAAAgOqJLQCgFyILAAAAAKAJQgsAAAAAoAliCwA4icgCAAAAAGiG0AIAAAAAaIbYAgCOIrIAAAAAAJoitAAAAAAAmiK2AICDiCwAAAAAgOYILQAAAACA5ogtAGAvIgsAAAAAoElCCwAAAACgSWILAHiUyAIAAAAAaJbQAgAAAABoltgCAO4lsgAAAAAAmia0AAAAAACaJrYAgB+ILAAAAACA5gk
2024-04-18 19:18:43 UTC	6396	IN	Data Raw: 69 6f 6e 3a 20 72 6f 77 3b 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 66 6c 65 78 2d 77 72 61 70 3a 20 77 72 61 70 3b 0a 7d 0a 0a 2e 69 62 6f 78 2d 64 61 74 61 74 61 62 6c 65 2d 66 69 6c 74 65 72 20 2e 64 61 74 61 74 61 62 6c 65 2d 66 69 6c 74 65 72 2d 69 74 65 6d 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a Data Ascii: ion: row; justify-content: space-between; align-items: center; flex-wrap: wrap;}.ibox-datatable-filter .datatable-filter-item { border-bottom: 1px solid #ccc; padding-left: 0; padding-right: 0; margin: 0; padding-bottom:
2024-04-18 19:18:43 UTC	2472	IN	Data Raw: 30 3b 0a 7d 0a 0a 2e 69 62 6f 78 2d 74 6f 6f 6c 73 20 61 2e 63 6c 6f 73 65 2d 6c 69 6e 6b 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 35 70 78 20 31 35 70 78 20 30 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 65 39 65 61 66 32 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 76 61 72 28 2d 2d 62 6f 78 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 29 3b 0a 20 20 20 20 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 76 61 72 28 2d 2d 62 6f 78 2d 62 Data Ascii: 0;}.ibox-tools a.close-link { margin-left: 0; display: inline-block; padding: 5px 15px 0; background-color: #ffffff; border: 1px solid #e9eaf2; -webkit-border-radius: var(--box-border-radius); -moz-border-radius: var(--box-b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49719	108.139.16.113	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:43 UTC	573	OUT	GET /css/merchant/auth/auth.min.css HTTP/1.1 Host: d1639lhkj5l89m.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://af.uppromote.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:18:43 UTC	438	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 6845 Connection: close Server: nginx Date: Thu, 18 Apr 2024 19:18:43 GMT Last-Modified: Tue, 16 Apr 2024 03:32:48 GMT ETag: "661df160-1abd" Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 6407b86e5baafe7d37861f17c38bd09c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P2 X-Amz-Cf-Id: KTDGvRbgOUczp2BxZBvb8NEsErSIhjxXq62WGJlQPB_Dt1OSi9x1qA== Vary: Origin
2024-04-18 19:18:43 UTC	6845	IN	Data Raw: 66 6f 72 6d 2e 6d 2d 74 20 2e 62 74 6e 7b 70 61 64 64 69 6e 67 3a 31 35 70 78 20 32 30 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 7b 70 61 64 64 69 6e 67 3a 31 31 70 78 20 31 35 70 78 3b 63 6f 6c 6f 72 3a 23 30 39 32 63 34 63 7d 61 23 6c 6f 67 69 6e 5f 62 79 5f 70 61 73 73 77 6f 72 64 2c 61 23 6c 6f 67 69 6e 5f 62 79 5f 73 68 6f 70 6e 61 6d 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 70 78 7d 61 23 6c 6f 67 69 6e 5f 62 79 5f 70 61 73 73 77 6f 72 64 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 7d 61 23 6c 6f 67 69 6e 5f 62 79 5f 73 68 6f 70 6e 61 6d 65 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 61 23 6c 6f 67 69 6e 5f 62 79 Data Ascii: form.m-t .btn{padding:15px 20px;font-weight:bold}.input-group-addon{padding:11px 15px;color:#092c4c}a#login_by_password,a#login_by_shopname{margin-bottom:20px;margin-left:10px}a#login_by_password{margin-top:20px}a#login_by_shopname{margin-top:0}a#login_by

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49721	108.139.16.113	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:43 UTC	551	OUT	GET /js/jquery-3.1.1.min.js HTTP/1.1 Host: d1639lhkj5l89m.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://af.uppromote.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:18:43 UTC	464	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 86709 Connection: close Server: nginx Last-Modified: Tue, 16 Apr 2024 03:32:49 GMT Accept-Ranges: bytes Date: Thu, 18 Apr 2024 19:18:43 GMT ETag: "661df161-152b5" X-Cache: Hit from cloudfront Via: 1.1 470159401e48708f2988d81a8aaf6824.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P2 X-Amz-Cf-Id: 1DRtfs-1AunshSyVw_snp42a6V08rGU4NJXPpna2XNB2RGczZM2w0A== Age: 9242 Vary: Origin
2024-04-18 19:18:43 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-04-18 19:18:43 UTC	16384	IN	Data Raw: 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 74 26 26 28 73 26 26 28 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6b 5b 61 5d 3d 5b 77 2c 74 5d 29 2c 6d 3d 3d 3d 62 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 74 2d 3d 65 2c 74 3d 3d 3d 64 7c 7c 74 25 64 3d 3d 3d 30 26 26 74 2f 64 3e 3d 30 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 65 3d 64 2e 70 73 65 75 64 6f 73 5b 61 5d 7c 7c 64 2e 73 65 74 46 69 6c 74 65 72 73 5b 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 67 61 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 61 29 3b 72 65 74 Data Ascii: ===m.nodeType)&&++t&&(s&&(l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),k[a]=[w,t]),m===b))break;return t-=e,t===d\|\|t%d===0&&t/d>=0}}},PSEUDO:function(a,b){var c,e=d.pseudos[a]\|\|d.setFilters[a.toLowerCase()]\|\|ga.error("unsupported pseudo: "+a);ret
2024-04-18 19:18:43 UTC	8806	IN	Data Raw: 64 3d 31 2c 55 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 62 7c 7c 28 62 3d 7b 7d 2c 54 28 61 29 26 26 28 61 2e 6e 6f 64 65 54 79 70 65 3f 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 62 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 3a 62 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 29 29 2c 62 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 3d 74 68 69 73 2e 63 61 63 68 65 28 61 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 29 65 5b 72 2e 63 61 6d 65 6c 43 61 73 65 Data Ascii: d=1,U.prototype={cache:function(a){var b=a[this.expando];return b\|\|(b={},T(a)&&(a.nodeType?a[this.expando]=b:Object.defineProperty(a,this.expando,{value:b,configurable:!0}))),b},set:function(a,b,c){var d,e=this.cache(a);if("string"==typeof b)e[r.camelCase
2024-04-18 19:18:43 UTC	16384	IN	Data Raw: 64 65 6c 65 67 61 74 65 43 6f 75 6e 74 2d 2d 2c 6c 2e 72 65 6d 6f 76 65 26 26 6c 2e 72 65 6d 6f 76 65 2e 63 61 6c 6c 28 61 2c 6b 29 29 3b 67 26 26 21 6d 2e 6c 65 6e 67 74 68 26 26 28 6c 2e 74 65 61 72 64 6f 77 6e 26 26 6c 2e 74 65 61 72 64 6f 77 6e 2e 63 61 6c 6c 28 61 2c 6f 2c 71 2e 68 61 6e 64 6c 65 29 21 3d 3d 21 31 7c 7c 72 2e 72 65 6d 6f 76 65 45 76 65 6e 74 28 61 2c 6e 2c 71 2e 68 61 6e 64 6c 65 29 2c 64 65 6c 65 74 65 20 69 5b 6e 5d 29 7d 65 6c 73 65 20 66 6f 72 28 6e 20 69 6e 20 69 29 72 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 61 2c 6e 2b 62 5b 6a 5d 2c 63 2c 64 2c 21 30 29 3b 72 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 69 29 26 26 56 2e 72 65 6d 6f 76 65 28 61 2c 22 68 61 6e 64 6c 65 20 65 76 65 6e 74 73 22 29 7d 7d 2c 64 69 73 70 61 74 63 Data Ascii: delegateCount--,l.remove&&l.remove.call(a,k));g&&!m.length&&(l.teardown&&l.teardown.call(a,o,q.handle)!==!1\|\|r.removeEvent(a,n,q.handle),delete i[n])}else for(n in i)r.event.remove(a,n+b[j],c,d,!0);r.isEmptyObject(i)&&V.remove(a,"handle events")}},dispatc
2024-04-18 19:18:43 UTC	16384	IN	Data Raw: 71 5b 64 5d 29 63 6f 6e 74 69 6e 75 65 3b 70 3d 21 30 7d 6e 5b 64 5d 3d 71 26 26 71 5b 64 5d 7c 7c 72 2e 73 74 79 6c 65 28 61 2c 64 29 7d 69 66 28 69 3d 21 72 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 62 29 2c 69 7c 7c 21 72 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 6e 29 29 7b 6c 26 26 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 26 26 28 63 2e 6f 76 65 72 66 6c 6f 77 3d 5b 6f 2e 6f 76 65 72 66 6c 6f 77 2c 6f 2e 6f 76 65 72 66 6c 6f 77 58 2c 6f 2e 6f 76 65 72 66 6c 6f 77 59 5d 2c 6a 3d 71 26 26 71 2e 64 69 73 70 6c 61 79 2c 6e 75 6c 6c 3d 3d 6a 26 26 28 6a 3d 56 2e 67 65 74 28 61 2c 22 64 69 73 70 6c 61 79 22 29 29 2c 6b 3d 72 2e 63 73 73 28 61 2c 22 64 69 73 70 6c 61 79 22 29 2c 22 6e 6f 6e 65 22 3d 3d 3d 6b 26 26 28 6a 3f 6b 3d 6a 3a 28 68 61 28 5b Data Ascii: q[d])continue;p=!0}n[d]=q&&q[d]\|\|r.style(a,d)}if(i=!r.isEmptyObject(b),i\|\|!r.isEmptyObject(n)){l&&1===a.nodeType&&(c.overflow=[o.overflow,o.overflowX,o.overflowY],j=q&&q.display,null==j&&(j=V.get(a,"display")),k=r.css(a,"display"),"none"===k&&(j?k=j:(ha([
2024-04-18 19:18:43 UTC	12367	IN	Data Raw: 30 5d 5d 7c 7c 6a 5b 22 2a 20 22 2b 68 5b 30 5d 5d 29 29 7b 67 3d 3d 3d 21 30 3f 67 3d 6a 5b 65 5d 3a 6a 5b 65 5d 21 3d 3d 21 30 26 26 28 66 3d 68 5b 30 5d 2c 6b 2e 75 6e 73 68 69 66 74 28 68 5b 31 5d 29 29 3b 62 72 65 61 6b 7d 69 66 28 67 21 3d 3d 21 30 29 69 66 28 67 26 26 61 5b 22 74 68 72 6f 77 73 22 5d 29 62 3d 67 28 62 29 3b 65 6c 73 65 20 74 72 79 7b 62 3d 67 28 62 29 7d 63 61 74 63 68 28 6c 29 7b 72 65 74 75 72 6e 7b 73 74 61 74 65 3a 22 70 61 72 73 65 72 65 72 72 6f 72 22 2c 65 72 72 6f 72 3a 67 3f 6c 3a 22 4e 6f 20 63 6f 6e 76 65 72 73 69 6f 6e 20 66 72 6f 6d 20 22 2b 69 2b 22 20 74 6f 20 22 2b 66 7d 7d 7d 72 65 74 75 72 6e 7b 73 74 61 74 65 3a 22 73 75 63 63 65 73 73 22 2c 64 61 74 61 3a 62 7d 7d 72 2e 65 78 74 65 6e 64 28 7b 61 63 74 69 76 65 Data Ascii: 0]]\|\|j["* "+h[0]])){g===!0?g=j[e]:j[e]!==!0&&(f=h[0],k.unshift(h[1]));break}if(g!==!0)if(g&&a["throws"])b=g(b);else try{b=g(b)}catch(l){return{state:"parsererror",error:g?l:"No conversion from "+i+" to "+f}}}return{state:"success",data:b}}r.extend({active

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49718	108.139.16.113	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:43 UTC	626	OUT	GET /img/merchant/auth/login_left_side.png HTTP/1.1 Host: d1639lhkj5l89m.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://af.uppromote.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:18:43 UTC	453	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 333959 Connection: close Server: nginx Date: Thu, 18 Apr 2024 05:27:28 GMT Last-Modified: Tue, 16 Apr 2024 03:32:49 GMT ETag: "661df161-51887" Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 4b03860b1b9cb623000b474ffbb510b2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P2 X-Amz-Cf-Id: H1nQnhEzlLEsYgo7AdbVRgshkIohs2grM21LQoaJ8YC1bkFIlD2O4Q== Age: 49875 Vary: Origin
2024-04-18 19:18:43 UTC	15990	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 c0 00 00 04 38 08 03 00 00 00 f1 6e 45 53 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 24 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 64 61 62 61 63 62 62 2c 20 32 30 32 31 2f 30 34 2f 31 34 2d 30 30 3a 33 39 3a 34 34 20 Data Ascii: PNGIHDR8nEStEXtSoftwareAdobe ImageReadyqe<$iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.dabacbb, 2021/04/14-00:39:44
2024-04-18 19:18:43 UTC	394	IN	Data Raw: b6 21 74 c6 1a 72 0c 8c 23 c7 98 08 18 a4 58 44 c0 47 11 4f f4 83 82 03 6a 58 dd 65 12 8e 78 69 38 cd 23 86 38 c8 a0 4b 0a 1d ef 62 04 5d 57 1d 87 f4 91 56 29 63 a5 99 e5 a4 14 ae f2 4b 5c ae 60 96 b7 7e 18 45 30 d7 e9 3e b8 8a 05 17 2d cf 00 be 8e 72 21 f9 dd 21 e3 7b 4a 86 ab 48 ba 37 50 9b 2e 10 b4 a1 48 4d 42 2d 3e e0 85 fb 47 75 28 3b da ef d5 a3 16 7c 52 d5 5b 58 9b 06 fe ed 51 45 ba 1e 01 01 03 03 37 52 ab d0 27 02 e1 62 b0 1b 69 f0 37 d4 a1 49 4f 65 aa cd 13 e2 5f 50 54 39 38 c2 3d 38 be bb fb a1 3b 7f ff 0e a7 54 0c 73 00 8d 45 e8 89 0e 33 fc e9 22 68 1c 29 3c 10 4f 1d 24 5d b6 98 3d bd b2 2d 60 9c 03 c6 41 24 71 e0 d8 a4 e8 f9 a9 f0 ad 09 80 67 b6 03 8c f0 f5 9d 60 7c 11 14 b1 46 46 17 3d 83 20 7a cf 4e 24 f1 33 86 d0 f0 6f 7d a4 65 e8 f5 98 17 Data Ascii: !tr#XDGOjXexi8#8Kb]WV)cK\`~E0>-r!!{JH7P.HMB->Gu(;\|R[XQE7R'bi7IOe_PT98=8;TsE3"h)<O$]=-`A$qg`\|FF= zN$3o}e
2024-04-18 19:18:43 UTC	16384	IN	Data Raw: 6f ec b7 a0 68 f8 2e 6a 44 8e 7d a1 30 dd a3 59 c2 77 2d 4a 82 ad 2d 65 a2 86 15 b6 91 06 7f 0f 7e 8b f8 9b e6 8a 01 05 4f a0 ad 0b e8 1d 87 c8 15 d4 c2 fd 3b 3f e7 92 38 76 ff dd 78 22 13 fd 76 1a 49 76 8b aa b5 ce a9 d8 44 b7 65 e5 0a 94 a1 d7 da a6 fd cb 04 bc 49 f1 f3 e6 4a f8 ad 51 c1 4a fa 47 33 79 c9 ed df 50 4d 39 93 6c 78 54 03 8e 45 10 d7 02 d8 8e f6 24 45 ce 66 85 81 8d 2d d6 c6 ba 4a 39 a4 88 e5 72 60 8a a0 e3 0b 2e 3a 7b f0 ba 1b 95 ae 2e 39 86 66 0c df 76 3f 5f dc 6a 1d 3a 63 2c b1 ec 62 86 6d 62 e0 a2 b1 a5 74 ef 90 2b a5 ef 03 63 0a 7c 8b 96 94 b7 8f 29 3b c7 8b 62 0e 84 2d 6f 48 2a d5 4b b8 63 b4 ce 62 68 4f c2 d7 2b 56 ae f2 e9 fd df 7c 30 bf b0 cc 64 12 43 92 e8 d7 68 80 85 3c 87 5f c9 6a ab 37 18 3f 17 e6 40 b3 10 3e 97 e1 9d 6a d5 bd Data Ascii: oh.jD}0Yw-J-e~O;?8vx"vIvDeIJQJG3yPM9lxTE$Ef-J9r`.:{.9fv?_j:c,bmbt+c\|);b-oH*KcbhO+V\|0dCh<_j7?@>j
2024-04-18 19:18:43 UTC	16384	IN	Data Raw: ca eb 0d 04 c0 35 d1 5a f8 51 16 4a a7 e9 6e 98 1c a4 11 c8 63 44 70 29 21 73 29 ba da 07 c2 c5 43 7e 6e 84 4b 1c e0 40 25 7a ad ca 35 f4 3c b5 d1 36 26 bc e4 7d a6 89 c9 e5 82 a2 86 f1 c1 59 9a 66 75 ef ad a6 bb 2b ea e1 91 33 e5 33 c0 17 7d dd 81 83 87 bc 0a f6 5a 0e b5 d6 11 16 36 d4 8b 83 2b d8 33 d9 e9 d5 7a 8a e8 97 f1 eb 00 7c 7b a1 e3 ab 11 da e1 00 48 67 eb 1d aa a1 2d ff d6 01 d8 23 0a 58 20 fe 4d 44 f8 d7 4e b2 82 11 34 df 07 7a fa ad 1e 8a cb 06 7d c6 0b 39 3c 07 f7 ff 22 05 b3 25 07 45 7c 1f 9c 50 be 19 32 b0 3a bb 23 84 51 cb f1 e0 a1 e2 f7 5d b8 45 42 4b 1d c2 6f b4 84 a6 3c c3 07 42 c1 67 86 81 b9 07 ce 7a 0a b6 e9 66 07 76 0c 9d 36 9b e0 8a 09 1a d5 fa 39 6e f8 5c f9 ae 1a 9a eb 68 d0 54 52 c2 8a 25 d6 ef 53 6f b8 e6 f7 e7 ca 0e c2 b7 dd Data Ascii: 5ZQJncDp)!s)C~nK@%z5<6&}Yfu+33}Z6+3z\|{Hg-#X MDN4z}9<"%E\|P2:#Q]EBKo<Bgzfv69n\hTR%So
2024-04-18 19:18:43 UTC	16384	IN	Data Raw: 04 da e1 f7 bd 22 18 f0 0b 99 c4 f0 9e 3e 7c 05 bd 2e 5d f0 e6 66 80 df fa b6 42 d8 7d 80 d1 67 18 3a 4a c3 11 a8 a0 11 bf 32 8f 9e 9b 82 6f 9f 79 18 57 4a 89 be 4d 67 30 ae 94 b1 00 ae 1e f6 99 83 f1 c7 8f 44 04 0b 03 63 b8 0a 5e 33 e0 41 f0 d1 d6 11 9f 23 3d 0a 2c ed fc 3d 30 9d 13 9a 4d f0 d1 bb 23 57 42 57 d4 1c 32 6a 4a 19 1e 33 44 18 38 1b 08 39 68 0c 9d 81 22 5a 5d 39 c4 9e 72 45 10 bd 42 75 f1 9d 0f 13 5f 96 09 32 54 7c fd dc 83 eb d2 51 d1 00 b8 4e 10 e6 16 18 09 78 5d 46 58 ff 7e 8d b7 c0 bd 9e c3 23 c0 37 3b 19 10 77 0d 26 70 15 5b 70 4d 30 dd 23 65 b3 85 41 c1 f4 95 7a e9 23 ec 06 35 74 63 11 75 94 d4 00 cf 2c 7d 30 3d 6d 70 81 74 07 05 1b e2 f5 6a e9 60 0f bc 6b 0f 1a 58 89 e5 10 ec e8 97 af 92 ae 80 82 3f f2 59 b0 38 4d d2 48 9d da 7b 33 86 Data Ascii: ">\|.]fB}g:J2oyWJMg0Dc^3A#=,=0M#WBW2jJ3D89h"Z]9rEBu_2T\|QNx]FX~#7;w&p[pM0#eAz#5tcu,}0=mptj`kX?Y8MH{3
2024-04-18 19:18:43 UTC	14808	IN	Data Raw: 1e bd 0c df 95 2b df ff 9a 9a 39 2e aa e5 e1 d0 99 13 0c a3 8e 76 00 dc c1 8b 7b bf b4 c1 5b 60 49 1a 5e 89 34 d0 57 82 de 35 26 60 02 2e 58 d7 f1 ae 6c a2 84 80 9f 56 14 c0 45 e3 f9 dc 50 45 16 ce 8a 30 81 86 04 0b a1 65 d2 34 7b 16 d6 59 74 51 7d b1 22 fc f6 b4 84 46 b3 81 7d 39 fe 82 ab 04 60 e0 f7 40 46 d0 06 ba 1c 59 f8 ad cf 2d 7c 60 18 dd 9f ec a3 86 6e d5 bc bd ac c1 ef 54 01 cd f8 b5 f4 eb bf 1b 7d e8 d5 cf bb fd 18 be 7d a2 5f 5a 65 9d 07 7b 3b bf 30 12 cf 58 62 de 51 c8 29 a4 02 9a c0 fb 98 73 0c 9f e9 01 b0 aa b0 24 27 18 fd 70 2f 6f 8f 91 7a 02 5d 7d 99 f1 00 03 63 08 bd 4b 2d 30 4a 68 61 60 bb 47 5a 55 0a 06 fd 1a 06 3e 3d 31 42 0e 2c 82 4f 2d 80 f7 5e a9 b5 ec de 27 72 c5 02 03 ff 11 dd 03 9b 6b 24 ea 8d b0 26 2a fd 5b 16 c1 f7 25 19 62 2d Data Ascii: +9.v{[`I^4W5&`.XlVEPE0e4{YtQ}"F}9`@FY-\|`nT}}_Ze{;0XbQ)s$'p/oz]}cK-0Jha`GZU>=1B,O-^'rk$&*[%b-
2024-04-18 19:18:43 UTC	16384	IN	Data Raw: 10 eb f4 25 4a e8 0c 03 bb 16 f8 f3 32 66 58 6d 6f 74 05 a4 d2 bb 81 40 b8 1c 61 d7 01 36 df e0 78 79 f7 92 07 07 ab cd bf 61 e0 0b 7a b9 a0 b7 f8 30 c3 c2 7e 16 5d 6a 81 7f 87 2d 4a f5 06 01 2f 52 0a 03 00 ec 40 bb d8 5c a4 12 b3 8a 7b 06 aa 8e 49 55 79 4f f1 a1 72 7f 54 ce 77 cb 08 bd 65 0c f3 d7 a7 03 f0 6d cc c0 2b 4c c0 eb 5f 82 ef 14 82 b5 3e b6 e0 cd c8 b0 4c 4d bd f6 9a 00 ec 5e 3e 7e 64 37 1f 46 2f a4 99 3b ee cd 59 20 60 c4 26 35 a5 8a 6e 66 00 3c 4b 0f 4d 17 c4 c9 18 f0 c5 b7 48 c3 51 37 1a 4b 93 ad 12 ce 81 15 c1 ec 10 d0 20 19 39 4d f1 2b dc 05 d3 df fe dd 30 cd 97 3b f9 b4 76 b3 7d 33 37 3c 1f e5 47 e9 f9 fe 36 89 29 19 c1 c2 be 00 30 e0 47 b8 e1 9b 77 76 76 17 31 25 21 f8 ae 46 1c 5c 13 87 d9 61 54 3f 4f 33 b0 65 de dd da ac 52 3b 1e 61 f1 Data Ascii: %J2fXmot@a6xyaz0~]j-J/R@\{IUyOrTwem+L_>LM^>~d7F/;Y `&5nf<KMHQ7K 9M+0;v}37<G6)0Gwvv1%!F\aT?O3eR;a
2024-04-18 19:18:43 UTC	16384	IN	Data Raw: 8d ff c1 1e f2 59 88 9f 1f 98 00 c7 6d 60 9a ea 04 67 f7 a7 bb 08 a2 9f a2 88 b5 86 36 b0 de 07 66 00 9d 16 20 be a7 a9 bc b6 8c df 68 90 e3 d9 59 47 e7 5b 3b bc e2 1b 1e d2 c0 ef e0 d4 b3 48 b1 74 6b 12 01 59 00 b1 cb 2b bf a1 97 54 57 82 fb d7 91 52 20 7c 3a 65 3b 0d 99 24 78 53 42 6a f7 31 b1 b4 93 0e 52 07 ab 0b 22 b9 a5 12 9a 47 79 d4 b0 12 bb b9 82 86 b0 4a b0 8b f2 79 61 40 c7 3b c6 44 4b f2 69 4d 24 58 86 39 e6 e3 4d a4 f9 a0 c3 b2 ce f0 09 39 70 ea 90 cd 7f 2a 5d 26 ef 9f 5f 9e 5c 6d d5 ae 3e ba 47 f3 23 c3 e9 9a 39 ec d0 ff 4a e3 68 a8 30 33 e1 13 ca 6f 53 d3 e0 e6 ac a4 c0 3d 9d 89 16 7c 67 35 9e 36 7a 71 fa 6c f6 93 0c 51 76 1b bf 32 13 43 0d e6 fd 74 fc 97 79 7b 76 9d ae 09 39 73 38 a1 14 37 83 bd ed 06 af 12 2a c0 b6 2e ac ee 1c 49 e2 bb e8 Data Ascii: Ym`g6f hYG[;HtkY+TWR \|:e;$xSBj1R"GyJya@;DKiM$X9M9p]&_\m>G#9Jh03oS=\|g56zqlQv2Cty{v9s87.I
2024-04-18 19:18:43 UTC	16384	IN	Data Raw: 28 f6 22 0c 84 b7 b0 00 bc 1c 5c 65 43 d8 cc de cc f9 09 6e 33 e8 89 b3 52 53 af 7f e7 05 e6 a2 f8 6a 00 e0 b4 3c b5 a9 f5 ab cd b0 c6 df 62 21 4b 36 f9 db 70 c0 ca 9d 16 84 61 01 b8 5b c4 a7 bb 7f 37 0e 60 95 f1 fb d2 95 d4 fd f9 d2 9d 74 bc a6 ee fb 4e 91 a3 94 9d 8e e4 bf f9 7d 08 f0 ea 87 6f 3f 7c fb ed ee 97 a5 25 68 b0 c3 77 c7 82 7f d4 a3 b3 95 ac d1 08 61 6d 06 93 5e 8a 70 60 98 08 8b 0c bf 88 18 3e 97 10 ba 29 41 34 66 39 84 df 26 a2 d2 ea ef e0 b7 9e 59 cc af da 9c 05 58 ac d6 6d 3f 48 26 2d 1d c4 a2 98 dd 7c af 97 68 2e 9c 39 0d ec 8f 17 1a a4 a2 9d f5 d8 35 a0 ae 0b fd 24 18 9e 44 04 57 2b 5c d5 48 71 fd 28 4a 23 8e ad 65 22 cb 36 fb c7 ae 41 18 39 b0 1f a7 dc bb 5c 27 be e8 09 ef 9d b9 e7 fa de de 59 38 f1 bd f1 70 d8 43 e9 b5 40 5b 08 ce 3a Data Ascii: ("\eCn3RSj<b!K6pa[7`tN}o?\|%hwam^p`>)A4f9&YXm?H&-\|h.95$DW+\Hq(J#e"6A9\'Y8pC@[:
2024-04-18 19:18:43 UTC	1576	IN	Data Raw: b6 54 f6 55 84 bb 2e 76 7d ee 62 f9 85 fe e2 af 3b 13 7c 06 d5 e5 f7 5b 1c 40 8b 00 1f 53 88 7c c2 cf f0 09 21 0c 86 79 a6 f2 d4 86 b3 10 41 5b 00 fd a9 8c 57 59 18 96 30 fa 90 87 2a 79 33 a9 11 49 71 15 b7 90 20 c0 45 0a 85 07 eb 3b ad 46 75 71 89 fd b0 1a 24 c7 23 7d 53 26 c1 0b 0b 53 f4 a5 96 15 98 9e b9 91 9d 64 74 1b 9e 96 3c a5 35 b7 bd 5d 2a a3 84 9b 94 1b d5 ad a5 21 a7 c1 94 1c 2c 71 0c dd db 3d 44 69 30 02 e9 6e 2b 61 75 07 69 b0 8a af 0a f0 8a bc 93 5a 34 4c a3 03 7f 2c f6 e6 40 fe cb e4 1a c5 5c 96 a6 ff da e1 c8 e3 ce fc ed 5c 53 d6 75 5b fb fb e3 e8 d6 46 2d f2 d1 b2 f7 68 4f dd 98 b2 f3 cd 91 69 0e cd 57 ed cb 05 64 d1 af f0 86 5f 26 6c 5d 02 19 6d 74 66 b4 3f 22 38 55 8f 0f eb 38 27 08 a2 cd 3e 3e 55 70 13 f9 08 73 59 36 89 c7 f7 19 e0 2c Data Ascii: TU.v}b;\|[@S\|!yA[WY0y3Iq E;Fuq$#}S&Sdt<5]!,q=Di0n+auiZ4L,@\\Su[F-hOiWd_&l]mtf?"8U8'>>UpsY6,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49716	108.139.16.113	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:43 UTC	624	OUT	GET /img/merchant/auth/right_side_bg.png HTTP/1.1 Host: d1639lhkj5l89m.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://af.uppromote.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:18:43 UTC	442	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 107082 Connection: close Server: nginx Date: Thu, 18 Apr 2024 19:18:43 GMT Last-Modified: Tue, 16 Apr 2024 03:32:49 GMT ETag: "661df161-1a24a" Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 e529324611aee618447444dc1aa96308.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P2 X-Amz-Cf-Id: YnF1fKQqXxrKbzQRZ_ji-DR4cbZgcCG50UyM9QqRrhRTpaIz43rHew== Vary: Origin
2024-04-18 19:18:43 UTC	15942	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 c0 00 00 04 38 08 06 00 00 00 c6 b0 b5 61 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 01 a1 df 49 44 41 54 78 01 ec 9d 8b b6 e4 b8 6d ae bb 92 b9 d9 4e de ff 39 63 7b 3c f6 78 26 75 c2 ee 83 1e 6c 34 00 02 20 48 91 12 be b5 f6 da 55 12 6f 25 91 20 7e 82 a5 7a fd f2 cb 2f ef 4f 87 f2 7e bf 3f bd 5e af af af 47 cb 9a 91 96 e6 6b ed 1d c9 5f f8 f1 5e f3 91 7b b4 2b 30 4e da ff f6 f7 1f ff f1 1f 5f ff e3 f3 34 0f 5c 07 7a 1e 1f a7 69 68 3f 8f 5c 4f a9 dc 62 0c 7c 0d db 6b f8 c3 c7 b8 be 80 cf 71 ff 25 7a f7 71 87 b1 66 ad 3f 3b 5d 76 de 62 2d da 58 19 05 ca 6d f6 19 db ea 59 f5 59 99 f9 99 af c4 Data Ascii: PNGIHDR8apHYssRGBgAMAaIDATxmN9c{<x&ul4 HUo% ~z/O~?^Gk_^{+0N_4\zih?\Ob\|kq%zqf?;]vb-XmYY
2024-04-18 19:18:43 UTC	15763	IN	Data Raw: 96 3d 9f 31 b6 bd 75 43 fd d2 39 89 ec c5 ba 1d a9 6d d3 f3 81 fe 13 f9 fe f0 6e 58 04 71 af dd 91 3c d1 b4 0d 6e 4b e9 2c 7e fc f1 c7 4f df 7f ff fd a7 a2 a0 70 3e 33 3d 97 49 57 00 6b 70 51 07 7c ee 73 05 1d b5 7e aa e3 b5 52 b4 52 11 e4 c9 17 61 95 f0 3f 11 ce e1 eb 7d 1f 41 9b 5c f0 bd ed 6d b9 c6 e5 49 c2 38 c3 21 ad ad d4 7b 30 c3 19 91 a2 c5 f4 f5 1d c9 74 20 67 3a a3 d1 3c 23 48 76 48 12 c8 77 ef 2b 1a d4 26 56 94 38 1f cd 4e 71 69 77 c4 23 62 bd 9f 6f e6 02 c1 cc 7e 5c db 9f 9f 8d e4 03 37 b8 c0 cf a7 4f 9f 54 fd 38 ca 90 00 96 c0 c6 0b 37 56 72 da bb 8d 3c 40 24 53 07 62 b6 d3 93 21 86 af 12 b8 4f 71 9e 68 7f d0 1c 4c e9 98 f5 5a 49 22 3a f3 5a e3 88 31 7e b2 2a 1c 2b fc bc 27 88 5c 6f d9 d8 5e 3f 49 10 37 3c 8e a4 36 1e 67 3a a4 99 f9 ad 75 f4 Data Ascii: =1uC9mnXq<nK,~Op>3=IWkpQ\|s~RRa?}A\mI8!{0t g:<#HvHw+&V8Nqiw#bo~\7OT87Vr<@$Sb!OqhLZI":Z1~*+'\o^?I7<6g:u
2024-04-18 19:18:43 UTC	827	IN	Data Raw: c0 ac b9 20 fb b3 8e fa 6c 99 f6 bc 37 26 46 7c 01 af 00 a6 79 46 a1 e2 da 9a a7 04 70 51 1c ca 15 c6 d5 eb 40 48 e7 6b 0b f5 7e e0 09 f0 6a 21 87 a1 42 61 85 53 93 b1 12 3e 5b 8c 6a cc ae 77 27 21 0c 65 49 4e 16 88 e1 d5 4f 98 ee 09 11 8f 50 19 a9 53 bb 36 5c 1a f8 8f a3 c3 3b e1 9d 6f b2 44 6f 2f 8f 35 32 bc 42 04 7b 69 22 b8 6d 8b a6 5b e5 69 3b a4 c5 4b ed f3 ac 88 6a 46 ce 67 e7 9b 59 de ea eb 87 cf 8d 08 e3 06 b5 2b f4 1c ae c7 13 bd d5 da 6c 1d 33 9f 05 f0 95 13 75 51 14 b9 8c 0a e3 d1 b4 de 55 73 30 56 dc e3 ef 8b eb c8 58 19 d6 ca ee 6d 5b 7a bf fb 5b 39 2d 0e 98 94 d7 4b b4 5f d3 d7 57 b0 b3 20 5e e1 dc 61 1b 03 11 e2 8c 7b 62 71 cc 32 ca a5 fd 5d 4b 2b e5 ef e5 a5 e2 06 03 5b 60 39 61 74 05 de b1 a8 e5 89 0a 5e 6f fd 91 32 28 33 ed 08 88 60 60 Data Ascii: l7&F\|yFpQ@Hk~j!BaS>[jw'!eINOPS6\;oDo/52B{i"m[i;KjFgY+l3uQUs0VXm[z[9-K_W ^a{bq2]K+[`9at^o2(3``
2024-04-18 19:18:43 UTC	16384	IN	Data Raw: ec 97 a7 3d 25 80 8b a2 70 91 61 a8 33 26 2a af c3 f0 62 b6 4e 97 28 be 06 2a 86 a9 f3 6c 8d 8e 35 38 47 df 33 41 66 8a 63 cf 42 cf 48 99 57 44 89 67 2c 20 ec e8 f0 f5 ca 83 88 30 16 c3 11 81 eb 49 3f b3 6c 2d 2f 37 76 b4 f7 f8 18 1d db 3b 3d 51 da 2b 86 bd f3 cf 88 20 ce 4a 83 81 dd 0c 57 6e 77 b6 30 22 84 69 39 33 d2 ae 2c 2b ab cc ab c6 dc aa 7a 35 7f a1 a1 f5 a7 12 c0 45 51 a4 30 ea d0 8e 4e 5a 96 c9 93 46 41 e0 3f 8d 18 17 eb e1 1c 66 c9 b9 e6 f2 72 69 01 8b 53 95 bd 35 ce 53 9e 27 9d 54 2e ee cf 99 f4 16 10 b2 eb 89 2c 8e 5d b1 88 d1 c0 d1 e1 f6 da fa 74 69 4f 3f b6 9c 8b d4 c7 45 78 f1 31 9a 8e a6 95 ca d6 ea da 45 0c 5b 9c 63 9c 0e bf 97 76 28 59 cb b0 e4 c9 4c 83 b7 3b 7b fb 0f f7 59 33 16 ad 7a ac 16 a5 ab eb f3 94 45 af b7 d7 d6 ad b2 df 16 56 Data Ascii: =%pa3&bN(l58G3AfcBHWDg, 0I?l-/7v;=Q+ JWnw0"i93,+z5EQ0NZFA?friS5S'T.,]tiO?Ex1E[cv(YL;{Y3zEV
2024-04-18 19:18:43 UTC	16384	IN	Data Raw: bd fa 24 bb 52 3f 28 e5 e1 51 35 7c bb 66 97 f7 cf 74 9b 66 df 6b 4b 43 1a 97 3a 5a ff 2e b5 af 0a 2d 7a 68 74 3c bc 65 1c e9 cf a0 ae 7e 2b 71 c4 b6 75 ce a4 6b d2 ca 1b ad 4f 4a 6b 3f 55 b4 13 de 8e 56 ff ee 36 3c 8d 7e 8e fb 75 bb 7b c1 40 eb 2f 77 b7 83 d6 c9 fb e3 dd c7 45 1b 0f a2 d0 b9 79 55 bb e1 01 7e 51 b8 00 bc 81 ca 36 69 9e 5f a9 e3 91 3c 15 55 2b 62 d9 b2 33 75 01 00 40 25 91 c8 9c 99 32 da e2 29 ef 9b e9 67 af 4f b7 fa 4f 6d 7b 36 7d 15 d2 fe 79 f9 4f 60 45 5c 49 1e ce 13 21 8f 95 8b f0 d9 ed ed e7 90 b4 73 53 ed 01 d6 da 41 45 1e 88 01 cf b0 cc ee 36 48 8e a6 19 5b a3 e0 ce 79 28 de 49 e7 13 94 1d 75 7a 65 ac 49 52 66 55 5c f2 ee d2 74 69 72 26 75 7c 3d 6f 64 d2 e7 b5 89 b6 23 9a 9f 73 db 82 05 00 60 0d b3 7d 69 45 fd 52 bf a7 f5 95 5e 19 Data Ascii: $R?(Q5\|ftfkKC:Z.-zht<e~+qukOJk?UV6<~u{@/wEyU~Q6i_<U+b3u@%2)gOOm{6}yO`E\I!sSAE6H[y(IuzeIRfU\tir&u\|=od#s`}iER^
2024-04-18 19:18:43 UTC	16384	IN	Data Raw: 48 6b df 2d 8f 30 00 b7 12 b9 7f ac 7b 6f 55 5b b2 1e e0 86 f6 93 48 f4 de d4 ca ef 0a 85 5e ed 41 a6 fd d9 53 9f 0d 6e 64 3d f3 b3 75 bd ba dd 95 c7 f2 49 c7 ef 97 b1 1b 02 18 00 00 5e 83 6a 21 fa 6e 78 21 d3 0d 4d 34 d3 fc 1a 4f f0 ce 03 e0 31 22 54 47 eb c9 e4 e9 82 4f c3 13 c2 27 84 c5 8c 90 8e e4 79 05 21 4c ff af ac 63 95 dd 9b c2 ae 9f 78 1c 57 d9 7e 64 08 34 00 00 bc 0a d5 cf 8a 3e 81 1d 02 30 33 71 a2 cf 9e f1 f2 1d 7e 6c e9 a4 c6 cb cb eb f1 f8 e5 4d 95 58 d0 00 85 cc 4e 98 f9 7d b2 ea fa 1c 15 a3 d2 bd d8 ff ac 05 c2 d1 fd 98 dd ff d5 f5 b6 7d 6e 61 d1 9f 9f 9f 3f c3 a2 9f b6 f8 46 cf 5f ff be ba 8e 6a bb fc f3 aa 3a 32 f9 9f 74 1c 57 d9 86 00 06 00 80 83 bc 8a c0 c9 4c ac 76 ec b3 36 61 92 da e9 3d 0f cc cb 73 f1 2b 79 c3 a2 13 1f 49 4c 50 db Data Ascii: Hk-0{oU[H^ASnd=uI^j!nx!M4O1"TGO'y!LcxW~d4>03q~lMXN}}na?F_j:2tWLv6a=s+yILP
2024-04-18 19:18:43 UTC	16384	IN	Data Raw: 5a 82 00 06 00 80 09 34 71 eb 6d a3 79 1a 96 68 b6 84 b1 96 d7 6b 8b 26 a8 a9 fd 95 de e0 13 40 e4 03 00 6e a4 5a 04 cf 94 5f 21 82 1b 3b c2 5a 47 39 25 84 ab 6d 9e f4 08 ef 3a 36 3c b2 60 f4 7a 82 00 06 00 4c 11 15 79 56 9e 88 8d 1b f0 bc bf 5a 19 4d b0 46 44 29 df d6 91 3c c7 dc b6 97 8f da 92 56 91 bd ef 00 00 00 6a 58 e1 09 5e f5 c2 a4 d1 76 75 f1 12 f5 e2 ed 1e 73 22 75 ed f2 7a 56 d9 ad ce 6b d9 a8 0e 87 b6 e6 40 8d 99 e7 85 21 80 01 00 57 53 2d 8e 33 f6 a2 79 b3 6d b4 44 b1 95 df 12 c8 dc 86 24 98 b3 22 57 db 66 79 88 b5 7a 00 00 00 d8 f0 3e b3 a2 2f 5d ed 49 1e 0d 8b a6 c2 e5 b6 b1 e2 84 10 3e 6d 73 c5 b8 bd 6a b1 40 a2 7b 85 c3 8b 2b 10 c0 00 80 77 a2 5a 50 57 20 ad 74 6a 22 57 ca d3 b1 04 ab e6 25 8e 0a 5e 2b 64 1a 00 00 40 1d 92 10 ae b4 57 5d Data Ascii: Z4qmyhk&@nZ_!;ZG9%m:6<`zLyVZMFD)<VjX^vus"uzVk@!WS-3ymD$"Wfyz>/]I>msj@{+wZPW tj"W%^+d@W]
2024-04-18 19:18:43 UTC	9014	IN	Data Raw: ab 05 76 e4 b9 d5 58 6d f5 f0 06 16 bb ae 3d 0b fa 48 00 80 79 76 4f 88 5b e3 20 f9 7c f2 26 8b 25 d1 b3 31 9a 90 86 71 10 c0 70 09 d5 c1 38 5c 4f f5 e1 b1 a2 93 ae e4 1d 11 dd bd d7 53 26 a0 bc b4 68 b2 a0 c7 5e 4b b7 3c 9b 52 68 5a c2 b6 f2 60 d5 e2 54 97 ab cc 2c 7b 33 dc d1 43 5c 8b 56 ef b8 2c 0f 6f cb eb 89 79 9d 4f ee 97 65 75 7a 74 6c da 46 a5 6c 64 07 00 00 de 45 34 01 2e 9f 57 fa 53 a7 57 ec c1 3a 10 c0 70 4b 76 cf d8 ed e4 4e 9d d5 aa b6 cc d8 b9 c3 6f 79 56 1b 2a a2 f6 20 f3 82 ae 68 87 27 02 75 3e af 0d 91 b0 f6 bc d3 15 2c 91 6a 79 98 33 8f bb 2e e3 b5 5b d7 63 1d cf 0c 2b 26 3b 00 00 e0 f9 44 7d fd aa e7 3e 82 78 0d ac 01 7e 19 d2 cb f1 26 76 1e d7 5b cf 59 2f fa 3c f4 9e 97 b3 ce e3 1d 7e af 9e 36 cc b4 37 2a eb a5 59 a1 cc 91 07 33 7b 60 Data Ascii: vXm=HyvO[ \|&%1qp8\OS&h^K<RhZ`T,{3C\V,oyOeuztlFldE4.WSW:pKvNoyV* h'u>,jy3.[c+&;D}>x~&v[Y/<~67*Y3{`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49720	108.139.16.113	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:43 UTC	625	OUT	GET /img/merchant/auth/logo_with_text.png HTTP/1.1 Host: d1639lhkj5l89m.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://af.uppromote.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:18:43 UTC	439	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 6351 Connection: close Server: nginx Date: Thu, 18 Apr 2024 19:18:43 GMT Last-Modified: Tue, 16 Apr 2024 03:32:49 GMT ETag: "661df161-18cf" Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 1c2fb26f064af9cfc8090f524b03de02.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P2 X-Amz-Cf-Id: u9G2eg-tfpzlttC0pxmUCqc0jm9dcsSiFZYJeRcwaTIdCGvpAFRD1g== Vary: Origin
2024-04-18 19:18:43 UTC	6351	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 13 00 00 00 4a 08 06 00 00 00 98 5f b0 33 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 24 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 64 61 62 61 63 62 62 2c 20 32 30 32 31 2f 30 34 2f 31 34 2d 30 30 3a 33 39 3a 34 34 20 Data Ascii: PNGIHDRJ_3tEXtSoftwareAdobe ImageReadyqe<$iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.dabacbb, 2021/04/14-00:39:44

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49722	108.139.16.113	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:43 UTC	548	OUT	GET /js/bootstrap.min.js HTTP/1.1 Host: d1639lhkj5l89m.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://af.uppromote.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:18:44 UTC	464	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 37045 Connection: close Server: nginx Last-Modified: Tue, 16 Apr 2024 03:32:49 GMT Accept-Ranges: bytes Date: Wed, 17 Apr 2024 23:46:55 GMT ETag: "661df161-90b5" X-Cache: Hit from cloudfront Via: 1.1 57e3d5d3b005fa4d07716cb3ffc6ecc0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P2 X-Amz-Cf-Id: sLKFWvmRmGljpbcg5EeCUMA5hw9q0NqynmBQZwp4rvK7jaw8ULeg1w== Age: 70309 Vary: Origin
2024-04-18 19:18:44 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 37 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 36 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 22 29 3b 2b 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 62 3d 61 2e 66 6e 2e 6a 71 75 65 72 Data Ascii: /! Bootstrap v3.3.7 (http://getbootstrap.com) * Copyright 2011-2016 Twitter, Inc. * Licensed under the MIT license */if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){"use strict";var b=a.fn.jquer
2024-04-18 19:18:44 UTC	16384	IN	Data Raw: 6d 65 6e 74 3d 3d 3d 61 2e 74 61 72 67 65 74 7c 7c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 5b 30 5d 3d 3d 3d 61 2e 74 61 72 67 65 74 7c 7c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 68 61 73 28 61 2e 74 61 72 67 65 74 29 2e 6c 65 6e 67 74 68 7c 7c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 74 72 69 67 67 65 72 28 22 66 6f 63 75 73 22 29 7d 2c 74 68 69 73 29 29 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 65 73 63 61 70 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 73 53 68 6f 77 6e 26 26 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6b 65 79 62 6f 61 72 64 3f 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 6f 6e 28 22 6b 65 79 64 6f 77 6e 2e 64 69 73 6d 69 73 73 2e 62 73 2e 6d 6f 64 61 6c 22 2c 61 2e 70 72 6f 78 79 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 32 37 3d Data Ascii: ment===a.target\|\|this.$element[0]===a.target\|\|this.$element.has(a.target).length\|\|this.$element.trigger("focus")},this))},c.prototype.escape=function(){this.isShown&&this.options.keyboard?this.$element.on("keydown.dismiss.bs.modal",a.proxy(function(a){27=
2024-04-18 19:18:44 UTC	4277	IN	Data Raw: 76 61 72 20 62 3d 61 28 74 68 69 73 29 3b 63 2e 63 61 6c 6c 28 62 2c 62 2e 64 61 74 61 28 29 29 7d 29 7d 29 7d 28 6a 51 75 65 72 79 29 2c 2b 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 3d 61 28 74 68 69 73 29 2c 65 3d 64 2e 64 61 74 61 28 22 62 73 2e 74 61 62 22 29 3b 65 7c 7c 64 2e 64 61 74 61 28 22 62 73 2e 74 61 62 22 2c 65 3d 6e 65 77 20 63 28 74 68 69 73 29 29 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 65 5b 62 5d 28 29 7d 29 7d 76 61 72 20 63 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 61 28 62 29 7d 3b 63 2e 56 45 52 53 49 4f Data Ascii: var b=a(this);c.call(b,b.data())})})}(jQuery),+function(a){"use strict";function b(b){return this.each(function(){var d=a(this),e=d.data("bs.tab");e\|\|d.data("bs.tab",e=new c(this)),"string"==typeof b&&e[b]()})}var c=function(b){this.element=a(b)};c.VERSIO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49723	108.139.16.113	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:43 UTC	564	OUT	GET /js/plugins/slick/1.8.1/slick.min.js HTTP/1.1 Host: d1639lhkj5l89m.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://af.uppromote.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:18:44 UTC	453	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 42862 Connection: close Server: nginx Date: Thu, 18 Apr 2024 19:18:44 GMT Last-Modified: Tue, 16 Apr 2024 03:32:49 GMT ETag: "661df161-a76e" Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 493e292caca329a2b20dbbc4e33d60f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P2 X-Amz-Cf-Id: _uRsW6uYTt80W_cdCZu6QjdpAQWPre-uw0cQeao3lFjidfv5-1z4Tg== Vary: Origin
2024-04-18 19:18:44 UTC	15704	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 69 29 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 69 28 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 29 3a 69 28 6a 51 75 65 72 79 29 7d 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 53 6c 69 63 6b 7c 7c 7b 7d 3b 28 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 76 61 72 20 Data Ascii: !function(i){"use strict";"function"==typeof define&&define.amd?define(["jquery"],i):"undefined"!=typeof exports?module.exports=i(require("jquery")):i(jQuery)}(function(i){"use strict";var e=window.Slick\|\|{};(e=function(){var e=0;return function(t,o){var
2024-04-18 19:18:44 UTC	16384	IN	Data Raw: 2c 74 2c 6f 2c 73 2c 6e 3d 74 68 69 73 2c 72 3d 30 3b 72 65 74 75 72 6e 20 6e 2e 73 6c 69 64 65 4f 66 66 73 65 74 3d 30 2c 74 3d 6e 2e 24 73 6c 69 64 65 73 2e 66 69 72 73 74 28 29 2e 6f 75 74 65 72 48 65 69 67 68 74 28 21 30 29 2c 21 30 3d 3d 3d 6e 2e 6f 70 74 69 6f 6e 73 2e 69 6e 66 69 6e 69 74 65 3f 28 6e 2e 73 6c 69 64 65 43 6f 75 6e 74 3e 6e 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 26 26 28 6e 2e 73 6c 69 64 65 4f 66 66 73 65 74 3d 6e 2e 73 6c 69 64 65 57 69 64 74 68 2a 6e 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 2a 2d 31 2c 73 3d 2d 31 2c 21 30 3d 3d 3d 6e 2e 6f 70 74 69 6f 6e 73 2e 76 65 72 74 69 63 61 6c 26 26 21 30 3d 3d 3d 6e 2e 6f 70 74 69 6f 6e 73 2e 63 65 6e 74 65 72 4d 6f 64 65 26 26 28 32 3d 3d 3d Data Ascii: ,t,o,s,n=this,r=0;return n.slideOffset=0,t=n.$slides.first().outerHeight(!0),!0===n.options.infinite?(n.slideCount>n.options.slidesToShow&&(n.slideOffset=n.slideWidthn.options.slidesToShow-1,s=-1,!0===n.options.vertical&&!0===n.options.centerMode&&(2===
2024-04-18 19:18:44 UTC	10774	IN	Data Raw: 65 26 26 28 69 2e 61 6e 69 6d 54 79 70 65 3d 21 31 29 29 2c 76 6f 69 64 20 30 21 3d 3d 65 2e 4d 6f 7a 54 72 61 6e 73 66 6f 72 6d 26 26 28 69 2e 61 6e 69 6d 54 79 70 65 3d 22 4d 6f 7a 54 72 61 6e 73 66 6f 72 6d 22 2c 69 2e 74 72 61 6e 73 66 6f 72 6d 54 79 70 65 3d 22 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 22 2c 69 2e 74 72 61 6e 73 69 74 69 6f 6e 54 79 70 65 3d 22 4d 6f 7a 54 72 61 6e 73 69 74 69 6f 6e 22 2c 76 6f 69 64 20 30 3d 3d 3d 65 2e 70 65 72 73 70 65 63 74 69 76 65 50 72 6f 70 65 72 74 79 26 26 76 6f 69 64 20 30 3d 3d 3d 65 2e 4d 6f 7a 50 65 72 73 70 65 63 74 69 76 65 26 26 28 69 2e 61 6e 69 6d 54 79 70 65 3d 21 31 29 29 2c 76 6f 69 64 20 30 21 3d 3d 65 2e 77 65 62 6b 69 74 54 72 61 6e 73 66 6f 72 6d 26 26 28 69 2e 61 6e 69 6d 54 79 70 65 3d 22 Data Ascii: e&&(i.animType=!1)),void 0!==e.MozTransform&&(i.animType="MozTransform",i.transformType="-moz-transform",i.transitionType="MozTransition",void 0===e.perspectiveProperty&&void 0===e.MozPerspective&&(i.animType=!1)),void 0!==e.webkitTransform&&(i.animType="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49726	108.139.16.113	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:43 UTC	567	OUT	GET /js/merchant/auth/login_register.min.js HTTP/1.1 Host: d1639lhkj5l89m.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://af.uppromote.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:18:44 UTC	450	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 309 Connection: close Server: nginx Date: Thu, 18 Apr 2024 19:18:44 GMT Last-Modified: Tue, 16 Apr 2024 03:32:49 GMT ETag: "661df161-135" Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 167aa95f2f064fbc0c7566b3d55cc1ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P2 X-Amz-Cf-Id: 9li5eRedNXCVOxKQiZcmMQGMx9M8UfSaRh4pC16E6FC1dxmx-3POAw== Vary: Origin
2024-04-18 19:18:44 UTC	309	IN	Data Raw: 76 61 72 20 6c 6f 67 69 6e 5f 72 65 67 69 73 74 65 72 5f 75 74 69 6c 73 3d 7b 7d 2c 6c 6f 67 69 6e 5f 72 65 67 69 73 74 65 72 5f 68 61 6e 64 6c 65 3d 7b 69 6e 69 74 3a 28 29 3d 3e 7b 24 28 22 23 71 75 6f 74 65 2d 63 6f 6e 74 65 6e 74 22 29 2e 73 6c 69 63 6b 28 7b 69 6e 66 69 6e 69 74 65 3a 21 30 2c 61 75 74 6f 70 6c 61 79 3a 21 30 2c 61 75 74 6f 70 6c 61 79 53 70 65 65 64 3a 31 65 34 2c 64 6f 74 73 3a 21 30 2c 73 70 65 65 64 3a 35 30 30 2c 66 61 64 65 3a 21 30 2c 63 73 73 45 61 73 65 3a 22 6c 69 6e 65 61 72 22 2c 61 72 72 6f 77 73 3a 21 31 2c 61 64 61 70 74 69 76 65 48 65 69 67 68 74 3a 21 30 2c 64 6f 74 73 43 6c 61 73 73 3a 22 73 6c 69 63 6b 2d 64 6f 74 73 22 2c 61 70 70 65 6e 64 44 6f 74 73 3a 24 28 22 23 71 75 6f 74 65 2d 64 6f 74 2d 63 6f 6e 74 61 69 Data Ascii: var login_register_utils={},login_register_handle={init:()=>{$("#quote-content").slick({infinite:!0,autoplay:!0,autoplaySpeed:1e4,dots:!0,speed:500,fade:!0,cssEase:"linear",arrows:!1,adaptiveHeight:!0,dotsClass:"slick-dots",appendDots:$("#quote-dot-contai

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49725	108.138.82.25	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:43 UTC	389	OUT	GET /img/merchant/auth/logo_with_text.png HTTP/1.1 Host: d1639lhkj5l89m.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:18:44 UTC	446	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 6351 Connection: close Server: nginx Date: Thu, 18 Apr 2024 19:18:43 GMT Last-Modified: Tue, 16 Apr 2024 03:32:49 GMT ETag: "661df161-18cf" Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 7e2fab32e11703f7384de4d8fef36848.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: wx0qvXEfydtu-hN4hJEqYqy3uackSmKlWV0tAuYZgo6tB3WnzKPxbw== Age: 1 Vary: Origin
2024-04-18 19:18:44 UTC	6351	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 13 00 00 00 4a 08 06 00 00 00 98 5f b0 33 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 24 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 64 61 62 61 63 62 62 2c 20 32 30 32 31 2f 30 34 2f 31 34 2d 30 30 3a 33 39 3a 34 34 20 Data Ascii: PNGIHDRJ_3tEXtSoftwareAdobe ImageReadyqe<$iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.dabacbb, 2021/04/14-00:39:44

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49727	108.138.82.25	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:44 UTC	388	OUT	GET /img/merchant/auth/right_side_bg.png HTTP/1.1 Host: d1639lhkj5l89m.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:18:44 UTC	449	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 107082 Connection: close Server: nginx Date: Thu, 18 Apr 2024 19:18:43 GMT Last-Modified: Tue, 16 Apr 2024 03:32:49 GMT ETag: "661df161-1a24a" Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 87bf84f333bc8ae1d8c723bf1e035c1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: 7mMizKqtjon-F0RgbM6gkDf9abdlSYuNqc0-Br1LqTKnAdd940bFTA== Age: 1 Vary: Origin
2024-04-18 19:18:44 UTC	15935	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 c0 00 00 04 38 08 06 00 00 00 c6 b0 b5 61 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 01 a1 df 49 44 41 54 78 01 ec 9d 8b b6 e4 b8 6d ae bb 92 b9 d9 4e de ff 39 63 7b 3c f6 78 26 75 c2 ee 83 1e 6c 34 00 02 20 48 91 12 be b5 f6 da 55 12 6f 25 91 20 7e 82 a5 7a fd f2 cb 2f ef 4f 87 f2 7e bf 3f bd 5e af af af 47 cb 9a 91 96 e6 6b ed 1d c9 5f f8 f1 5e f3 91 7b b4 2b 30 4e da ff f6 f7 1f ff f1 1f 5f ff e3 f3 34 0f 5c 07 7a 1e 1f a7 69 68 3f 8f 5c 4f a9 dc 62 0c 7c 0d db 6b f8 c3 c7 b8 be 80 cf 71 ff 25 7a f7 71 87 b1 66 ad 3f 3b 5d 76 de 62 2d da 58 19 05 ca 6d f6 19 db ea 59 f5 59 99 f9 99 af c4 Data Ascii: PNGIHDR8apHYssRGBgAMAaIDATxmN9c{<x&ul4 HUo% ~z/O~?^Gk_^{+0N_4\zih?\Ob\|kq%zqf?;]vb-XmYY
2024-04-18 19:18:44 UTC	10912	IN	Data Raw: 9d 44 4c 63 46 74 69 96 3d 9f 31 b6 bd 75 43 fd d2 39 89 ec c5 ba 1d a9 6d d3 f3 81 fe 13 f9 fe f0 6e 58 04 71 af dd 91 3c d1 b4 0d 6e 4b e9 2c 7e fc f1 c7 4f df 7f ff fd a7 a2 a0 70 3e 33 3d 97 49 57 00 6b 70 51 07 7c ee 73 05 1d b5 7e aa e3 b5 52 b4 52 11 e4 c9 17 61 95 f0 3f 11 ce e1 eb 7d 1f 41 9b 5c f0 bd ed 6d b9 c6 e5 49 c2 38 c3 21 ad ad d4 7b 30 c3 19 91 a2 c5 f4 f5 1d c9 74 20 67 3a a3 d1 3c 23 48 76 48 12 c8 77 ef 2b 1a d4 26 56 94 38 1f cd 4e 71 69 77 c4 23 62 bd 9f 6f e6 02 c1 cc 7e 5c db 9f 9f 8d e4 03 37 b8 c0 cf a7 4f 9f 54 fd 38 ca 90 00 96 c0 c6 0b 37 56 72 da bb 8d 3c 40 24 53 07 62 b6 d3 93 21 86 af 12 b8 4f 71 9e 68 7f d0 1c 4c e9 98 f5 5a 49 22 3a f3 5a e3 88 31 7e b2 2a 1c 2b fc bc 27 88 5c 6f d9 d8 5e 3f 49 10 37 3c 8e a4 36 1e 67 Data Ascii: DLcFti=1uC9mnXq<nK,~Op>3=IWkpQ\|s~RRa?}A\mI8!{0t g:<#HvHw+&V8Nqiw#bo~\7OT87Vr<@$Sb!OqhLZI":Z1~*+'\o^?I7<6g
2024-04-18 19:18:44 UTC	16384	IN	Data Raw: e5 69 02 b8 28 3c 58 e6 79 cf ee 13 20 73 67 43 8f af 02 78 a4 90 08 99 93 8a e7 02 d2 88 07 3d 5e 9c 07 9e 4c e0 fd 5d 19 71 06 b5 7c 51 a3 c3 2d 30 ad 60 77 91 7c 55 9b b2 eb 85 be 01 7f 9e ef 13 6b 93 5f 76 fb 56 b0 b2 ae 5e 3b 46 6c 5e cf 29 91 84 d1 aa 3e 1d 11 a4 1e 1b 36 5b 50 5b f3 59 cb 1a 11 a8 99 48 ed c0 b6 18 03 df 17 6e 82 98 5b 48 bb f3 3c 6d a5 5d 83 59 4f 92 c6 75 68 c0 a2 45 71 3e ab 6c 81 34 6f e0 d7 dc dc 21 7d c5 82 b2 ca 3e 74 05 b0 c4 0c 47 6b 56 5e cf ca 6b 09 e3 7b f0 84 68 b1 c5 48 8c 7e e6 c8 6a b2 f6 7e 16 57 38 ea 1e ee 22 88 71 b9 58 0c e3 07 e3 8c dc f3 5d 44 e6 28 99 9f c3 52 96 f5 e1 5a 23 8b 12 bb f6 e1 11 71 39 2a 98 ad 65 58 f2 7b ca b9 7a 8c 58 b6 d8 d3 34 10 19 86 ef 9a 96 6f f5 91 6c 31 dc bb 27 70 2c ba fd 19 53 0b Data Ascii: i(<Xy sgCx=^L]q\|Q-0`w\|Uk_vV^;Fl^)>6[P[YHn[H<m]YOuhEq>l4o!}>tGkV^k{hH~j~W8"qX]D(RZ#q9*eX{zX4ol1'p,S
2024-04-18 19:18:44 UTC	16384	IN	Data Raw: e4 b9 79 48 7a 6f a5 ec f5 1c a2 82 36 43 e4 5a d2 68 e7 f0 6f 99 62 07 3a 4a 24 88 a0 f5 f7 9e ef 06 e9 69 19 f0 dd e0 4c e1 63 29 0b b6 9a f7 16 a8 a2 7e 5a 94 cc 72 33 ae 69 46 9a ec 3a 57 97 99 7d 4f 40 0c 37 70 94 18 1f b3 ce 21 a7 ce 15 db 7f 07 38 e2 84 cc ca 13 59 8d d4 8c 7b 43 8a d8 5a 8c 22 7d cd a5 c3 65 73 f9 b5 b2 35 2c e9 ca 81 2a 8a c2 4b c4 7e af 66 b4 8d 96 45 4f 6e 01 d5 5a a6 26 0e 28 51 3b 5d f6 7d 8c 91 c8 56 96 28 88 d6 61 89 0a 67 c0 8d 93 de c2 91 14 28 c0 69 a5 ba e0 2f 03 4b 39 ed f7 7f 5b db 9a 00 ef 05 56 38 81 df f3 15 67 b7 7f 66 fe 68 79 2b ef df ea b2 a4 79 23 ab ec 06 27 8a f1 1f e6 f4 39 60 9a 00 3e c1 89 19 c1 ea a4 58 0c b8 54 a6 a5 7e c0 22 9c b9 f4 f4 75 b4 cc 91 fa 8b a2 28 b2 88 08 c6 48 1a 2e 22 63 29 97 73 60 e9 Data Ascii: yHzo6CZhob:J$iLc)~Zr3iF:W}O@7p!8Y{CZ"}es5,*K~fEOnZ&(Q;]}V(ag(i/K9[V8gfhy+y#'9`>XT~"u(H."c)s`
2024-04-18 19:18:44 UTC	16384	IN	Data Raw: 79 b9 8e 15 46 6d 79 8e 2b 78 55 51 0c b1 0f c0 73 88 2c 1e f2 ef 5a 7f bd c3 0b dc b7 67 3d 9b d5 5e 60 da 96 9b cb f3 ed 10 c2 bf b2 5a 0c 9f 10 c2 8d 13 e3 70 26 32 61 64 31 87 03 01 0c 00 78 7b 2c c1 db b7 f3 01 41 f3 fc 56 ae 52 8e 0e 42 10 91 00 80 1d 54 2e 58 56 79 81 a9 3d 8d 56 7f f3 02 7b 7d bf 64 6b 95 37 f8 44 f9 e8 22 ad 24 84 f1 8c f0 5f f0 63 58 79 7d 9c 1c c7 6f f5 06 57 d9 c1 12 0e 00 e0 27 bc e3 a8 1c f0 ab 3b d2 c8 73 5e 5e 3e ba dd 0a 85 e3 de 5c 4d e0 d2 e7 c9 28 34 3f 7d d3 21 a7 64 45 f3 63 fc 39 63 4c 64 00 88 83 05 26 bb cf 18 ed 83 2a fb 21 ab 4f ef 7f 5a bf 1d b1 55 d5 de 92 70 ce c1 76 44 17 4b b9 fd b6 50 f1 f9 f9 f9 b6 6f 8d ee d0 c5 9c 7e 3d 54 be 49 9a db d9 39 4e f3 ba 56 d6 dd f7 93 ff f5 6d 59 3b a1 bc f0 00 03 f0 9e 68 Data Ascii: yFmy+xUQs,Zg=^`Zp&2ad1x{,AVRBT.XVy=V{}dk7D"$_cXy}oW';s^^>\M(4?}!dEc9cLd&*!OZUpvDKPo~=TI9NVmY;h
2024-04-18 19:18:44 UTC	1514	IN	Data Raw: 98 b1 13 39 96 d9 eb a4 7b c7 57 fe 7e b0 e4 cc b0 e6 99 23 c7 68 57 99 27 db 5e b1 b0 11 01 02 78 31 37 8a de 15 68 fb 20 09 d2 fe b9 33 32 48 68 22 97 e6 e1 b6 e9 77 ab 3d 3c 1f b7 c9 b1 44 2f 04 27 00 00 80 1b f0 c6 58 69 bb 35 6e 9f 18 df a2 75 46 f2 69 79 a4 74 eb 19 55 6d 81 db 9b 13 69 75 9f 10 c1 b3 36 2a cf 0b a5 ea 67 93 78 fd da 39 d0 1c 27 b3 f3 3b 2f af 35 1f 5d c1 6d 42 78 85 08 76 23 5b 20 80 c1 4a bc 01 35 52 be 91 15 c6 d6 f6 8a 41 5c 13 bd 52 be 5e 37 2d c7 3f 6b f6 57 02 81 0e 00 00 ef 4b d6 d3 15 1d bf aa 91 da 99 29 9b dd ae 95 e1 22 d8 f2 1a 72 3b 19 27 47 2f b7 53 08 47 e6 33 5e f9 15 79 3b ed b8 b7 e3 1f 71 98 44 16 72 22 0b 3d da c2 46 df e6 89 64 29 6d f5 71 ca b0 5a 04 ef f4 9a 8f d8 85 00 06 7f 93 11 a6 33 36 2a ea f1 ec 45 bc Data Ascii: 9{W~#hW'^x17h 32Hh"w=<D/'Xi5nuFiytUmiu6gx9';/5]mBxv#[ J5RA\R^7-?kWK)"r;'G/SG3^y;qDr"=Fd)mqZ36E
2024-04-18 19:18:44 UTC	16384	IN	Data Raw: 88 b0 9d 09 d3 81 b0 05 00 80 d7 63 74 8c 92 3e 3f 55 00 8f 94 cd 78 fd 24 da f1 ea cf 05 47 c6 f6 8a 39 48 56 08 f7 32 15 cc da 89 5e 63 55 a2 9d 0a e1 57 5c e4 97 c4 f0 c9 fa 6f a8 03 02 18 bc 24 ab 84 b8 65 77 64 35 57 1b ec 78 1a 4d d7 a0 03 ab 24 ea 3d 46 3a 7a 08 65 00 00 78 3e b3 0b c8 27 19 11 e4 55 c2 30 62 87 8e c7 4d 64 b5 3f cb 4e 75 f8 e8 29 11 5c 61 2f 73 7c 2b ea 68 c7 be 7b ec 69 da ab cc 73 e8 7e ec f6 04 4b 73 d4 55 75 45 80 00 06 8f 63 95 b8 8d d6 31 e3 61 b6 3c bc 91 b2 1d 6d 25 5e f3 0e 7b 1d 4e 75 87 94 11 de b7 00 31 0f 00 78 35 22 0b b3 51 3b 8d 99 c7 72 56 33 da 86 19 2f e3 88 40 6b 9e 60 fa f3 45 d2 dc 80 a3 85 a0 67 3c c3 2b 17 08 56 db 89 da aa 12 c3 3c 34 3a cb ed f3 89 99 05 9d d9 7a 77 1d 1b d7 69 04 01 7c 27 3b 44 1e a8 25 Data Ascii: ct>?Ux$G9HV2^cUW\o$ewd5WxM$=F:zex>'U0bMd?Nu)\a/s\|+h{is~KsUuEc1a<m%^{Nu1x5"Q;rV3/@k`Eg<+V<4:zwi\|';D%
2024-04-18 19:18:44 UTC	13185	IN	Data Raw: 3d 59 1d 23 ed fd 2d d4 4d bd 5c 4a 87 3c b7 3a 64 08 b4 1c e8 56 d6 14 47 21 7c 3a 4d 8b 71 6b c0 bd 23 9c 10 00 72 3c 11 ab fb 07 b9 4f e7 79 da 3d 78 b7 89 d7 86 17 72 de 1b ee 6c a6 e3 01 06 00 00 80 dd cc 86 1e 8e a6 f7 d4 61 79 8b 2d b4 a8 b6 be cb ed 55 9e 21 bc c5 00 d7 93 45 98 3c 8d 33 8f 61 75 78 74 4f ff ca 4b b0 00 00 00 e0 54 46 07 58 de 7a 5d e9 a9 d5 1e 5d 2b bf 67 43 d6 a1 c5 6c fb 8c 3c ca f2 d3 aa a3 12 1a 9d 61 0d b6 01 60 0f 59 1f 15 45 7f 54 22 43 ee 86 d5 e6 15 5e d6 55 65 64 59 ef 7c 57 db db f2 21 80 01 00 00 60 29 bd b3 f1 bd eb ba e4 40 a6 89 42 4b 68 6a 91 5c b1 af f3 6a a1 ac bd 25 5e 1d ba 4d 91 48 ae b4 ab 27 3f 00 8c d3 2b d2 bc 7b f2 a9 f7 6a 24 ea 25 a3 c7 d7 fa 46 4b d0 f6 94 b7 f6 57 cb 23 80 01 00 00 3e 94 5d 03 b4 68 Data Ascii: =Y#-M\J<:dVG!\|:Mqk#r<Oy=xrlay-U!E<3auxtOKTFXz]]+gCl<a`YET"C^UedY\|W!`)@BKhj\j%^MH'?+{j$%FKW#>]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49730	108.138.82.25	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:44 UTC	390	OUT	GET /img/merchant/auth/login_left_side.png HTTP/1.1 Host: d1639lhkj5l89m.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:18:44 UTC	453	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 333959 Connection: close Server: nginx Date: Thu, 18 Apr 2024 05:27:28 GMT Last-Modified: Tue, 16 Apr 2024 03:32:49 GMT ETag: "661df161-51887" Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 e7f87e384798b4a94964cbcf8e4db94c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: 6CTP_TAjwWk-3Y1MsQG2WYTVvpx70BiGBWz3rr1B5op9sNpqKP4JAA== Age: 49876 Vary: Origin
2024-04-18 19:18:44 UTC	15931	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 c0 00 00 04 38 08 03 00 00 00 f1 6e 45 53 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 24 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 64 61 62 61 63 62 62 2c 20 32 30 32 31 2f 30 34 2f 31 34 2d 30 30 3a 33 39 3a 34 34 20 Data Ascii: PNGIHDR8nEStEXtSoftwareAdobe ImageReadyqe<$iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.dabacbb, 2021/04/14-00:39:44
2024-04-18 19:18:44 UTC	16384	IN	Data Raw: aa d1 e4 02 30 af 4d 81 a9 8f 34 52 3d 56 d8 54 da 33 c5 2c 1f 42 6b 12 4c 9e 3a 1c 43 7b 06 06 0a ee 39 fc ae 4b 0a dc 55 06 a6 50 1a c3 e7 4b 60 60 dd c6 fd f9 f3 ed 27 db 0c b6 21 74 c6 1a 72 0c 8c 23 c7 98 08 18 a4 58 44 c0 47 11 4f f4 83 82 03 6a 58 dd 65 12 8e 78 69 38 cd 23 86 38 c8 a0 4b 0a 1d ef 62 04 5d 57 1d 87 f4 91 56 29 63 a5 99 e5 a4 14 ae f2 4b 5c ae 60 96 b7 7e 18 45 30 d7 e9 3e b8 8a 05 17 2d cf 00 be 8e 72 21 f9 dd 21 e3 7b 4a 86 ab 48 ba 37 50 9b 2e 10 b4 a1 48 4d 42 2d 3e e0 85 fb 47 75 28 3b da ef d5 a3 16 7c 52 d5 5b 58 9b 06 fe ed 51 45 ba 1e 01 01 03 03 37 52 ab d0 27 02 e1 62 b0 1b 69 f0 37 d4 a1 49 4f 65 aa cd 13 e2 5f 50 54 39 38 c2 3d 38 be bb fb a1 3b 7f ff 0e a7 54 0c 73 00 8d 45 e8 89 0e 33 fc e9 22 68 1c 29 3c 10 4f 1d 24 Data Ascii: 0M4R=VT3,BkL:C{9KUPK``'!tr#XDGOjXexi8#8Kb]WV)cK\`~E0>-r!!{JH7P.HMB->Gu(;\|R[XQE7R'bi7IOe_PT98=8;TsE3"h)<O$
2024-04-18 19:18:44 UTC	16384	IN	Data Raw: 85 e7 a3 5c cc a5 33 11 2f be 04 fd 6f 9f f9 b7 ff 97 f6 c0 30 86 ce a3 2d a5 ee 81 8f 84 81 1f 79 06 7e 00 0c fc d0 8c a1 fd 35 3f 14 d3 37 ee 53 5b 37 44 86 1b 31 53 e8 a0 07 66 21 c7 86 22 f8 da 4f a1 e9 1b 7a 37 83 c9 0c 07 14 cd 00 08 d6 41 56 e5 44 af 82 2b 27 de da ae f2 bd 45 f4 8b b8 31 16 7e 4b 79 c0 6a 0e 1e 47 ff 20 fd 12 7c 7f fe 19 0f ac e0 ac 06 54 81 ad 5b 59 20 65 e9 8b 1d 95 1c 38 be 02 a4 3a e2 1d d0 87 5c 1e d7 3a da 01 73 52 60 1e ed e8 20 3e 29 cf 86 37 58 2f e3 af b4 11 df 79 b9 3b 84 b8 42 38 0f 06 1f 69 3a 53 1a 73 49 6c dc eb f8 60 a1 c4 14 8c db 24 f2 91 ae 96 aa 8a 60 42 6e d5 cf b4 24 25 9c 1f 45 fa 96 50 c4 dd 18 5d 36 74 7f 8c 7e ed 35 e1 f0 3a 0b be d0 70 74 0f 1c 4c 63 2c e4 e0 b7 42 c2 12 73 a6 b5 b4 62 78 9f 1f 34 bd 82 Data Ascii: \3/o0-y~5?7S[7D1Sf!"Oz7AVD+'E1~KyjG \|T[Y e8:\:sR` >)7X/y;B8i:SsIl`$`Bn$%EP]6t~5:ptLc,Bsbx4
2024-04-18 19:18:44 UTC	16384	IN	Data Raw: 6f 25 8b 89 47 60 c4 e1 18 98 bc dd 0a 10 90 5d 73 9d ad 03 f0 c1 a7 46 83 10 5c e3 34 12 62 5f 0e d0 ae 91 8e 83 1e 78 88 04 d4 88 fc fb 64 29 24 d3 67 91 06 38 c2 c3 06 ba 21 2d 07 fe 94 e1 18 0b 1f 5f cc 20 fa 77 3a ed 47 81 27 1f 06 d6 58 6a c2 7d 3c fc 97 b9 26 b8 84 e0 9c 0f 14 57 a2 c8 62 5d 47 df f4 c1 25 18 63 75 f2 a3 d6 f0 f2 fd db d5 c7 e6 10 f8 71 a4 13 fe cf f0 aa c1 ea 29 b1 09 f6 53 ac 0b fc 1b 93 12 fa 5a 19 18 c5 92 ae 03 56 fc 3a f8 02 82 09 c3 4c c1 66 95 24 14 bc 19 b0 ef 05 9a db c1 0b fc e0 e4 87 7a 9d 18 78 4e 03 83 d1 df 2e a6 1d 66 2a ee 73 14 f8 d8 b3 70 34 32 f8 0e 43 78 ca 28 ac f2 69 43 7f ca 96 e3 5b 08 76 00 2e 66 25 21 58 0e 82 31 21 d8 48 a1 cf a8 86 7e 4a 25 b4 2b a2 01 bb ca c0 47 c7 ae 05 3e da aa 04 e0 bd c7 95 32 d8 Data Ascii: o%G`]sF\4b_xd)$g8!-_ w:G'Xj}<&Wb]G%cuq)SZV:Lf$zxN.f*sp42Cx(iC[v.f%!X1!H~J%+G>2
2024-04-18 19:18:44 UTC	16384	IN	Data Raw: d9 0a 9a 20 bc 2a 06 b3 cc c0 9f 88 74 cf ce 76 cc 1e c9 72 b0 57 72 90 2f e5 89 5e 23 e9 45 7f 66 0f ec 0d 39 da 9e 80 43 38 61 d4 03 57 a3 1e b8 33 f2 2d 30 9d 99 da 0a da bd 84 12 da 30 f0 0c 35 b4 d7 8c 77 ca f8 0a 73 bf 0b 29 c0 2e 16 af 2f c8 87 72 99 e8 97 c6 d1 f7 74 d9 cf 27 85 74 c6 5f a5 bb 1d 28 ff cb 7a 97 c3 4e ab e5 06 e2 0c 5c 05 6d 46 58 4c c0 11 03 a3 52 fe 3b 54 1d 16 c1 d2 02 13 dc e5 66 e9 24 47 2c bc 75 46 c4 eb 40 e8 d0 eb 3e c8 b1 f5 8e 8c b6 57 ae e2 0d 70 8e 4b 68 6e 80 91 68 06 f8 ba 5f 7f e6 f8 77 49 b4 1c 7f fe d2 a8 7b 04 17 eb a2 ca f2 c2 0c f6 be 62 d9 d5 38 b1 00 16 cc f7 f4 17 71 dc 68 cf e0 3b 52 84 78 bf 00 1a 0f 56 da ae 09 4a 5b b5 6d 04 fa 92 6a e3 c9 8b a9 98 86 6f 63 14 c7 08 d6 31 16 fe c1 77 31 c7 2a a8 45 b4 7f Data Ascii: tvrWr/^#Ef9C8aW3-005ws)./rt't_(zN\mFXLR;Tf$G,uF@>WpKhnh_wI{b8qh;RxVJ[mjoc1w1E
2024-04-18 19:18:44 UTC	16384	IN	Data Raw: e1 92 fb fc 43 c2 f0 45 b3 e4 e0 bb dc ac 94 aa 95 65 47 c4 d4 d5 de 2f de 37 ef 41 be 32 f2 69 08 07 e3 c8 c6 eb 15 38 be 9a 3e 0b 00 5e 8a 18 98 db 60 4b bd 04 5d 86 ef af 11 03 0b 58 b3 08 9e 01 e0 15 c3 c0 54 42 7f a4 0e f8 e3 d6 c7 0d f3 80 31 1e ff cf 9c c9 9d 04 e2 83 1d 82 7f 71 2f e4 01 1f 01 b8 6e 6d 73 82 1e 63 dc a3 1f e0 59 74 af fe 30 7e 8b 56 a1 e5 11 5c 34 ad b0 e6 23 b9 e6 c8 fd 48 b5 5d ba 1b 96 86 70 e0 df 2f 5c 6e 17 6a 04 60 f7 d5 3d b7 7d 70 30 b7 1d c3 57 35 58 f3 7c 2a 6b e6 d0 93 49 06 c2 0a df 21 f9 6a f8 9b 85 2c 84 b3 1b e0 2c 84 3d 82 09 b3 f3 b2 3c 82 02 ba cf 73 67 dc 1c b1 dc 99 8f 1a 08 be 20 5d 3e ff c7 3b 71 f2 50 20 67 4d 2b e7 33 3e 78 7a cf 8f e0 a5 4c 1c e1 b4 21 07 ad 81 7d 0b 7c 79 f9 e1 bf 7f 14 00 3b 08 3f 72 28 Data Ascii: CEeG/7A2i8>^`K]XTB1q/nmscYt0~V\4#H]p/\nj`=}p0W5X\|*kI!j,,=<sg ]>;qP gM+3>xzL!}\|y;?r(
2024-04-18 19:18:44 UTC	16384	IN	Data Raw: 2b a5 0a 33 c2 38 c9 4b 54 81 51 84 c9 89 04 d7 64 fb 2f 72 a2 1c cd 28 b0 0b 84 67 4b b9 42 ca 6d fe 8f cd 4f 97 cf 2b cd 77 cd ab fb b5 97 5b 8e e1 ab 2f 2f 6b 0e 61 09 a6 59 9a ae 6d 2f 6f e3 e2 8a d3 f4 89 b0 9a 54 73 7f e5 cc 83 7b c4 17 93 1c a5 d9 9e 2e 16 36 39 19 dd 14 39 d6 0f 7c fa 24 53 5b cf bf 22 c0 f5 68 ac 12 33 d2 1e 43 a7 95 75 33 7e 8e 6f 7a 67 ef 91 ea 72 43 35 18 e9 f0 24 6b 95 6e 59 de 7e 28 da 0e ae fa 8f 49 12 83 6f 87 15 4d 83 81 6f c7 ea 58 bc 60 88 fc 17 1b 87 99 16 f0 fe 33 53 5e 1f 45 33 03 16 4f 1d 55 e0 75 8e 70 64 e7 b0 86 14 b1 1e 44 dd df 7b f1 f6 51 54 7f ee 47 75 e1 70 c1 bd 0c 21 f8 30 10 bc 88 44 f8 89 c6 d1 af bf ce aa 7b 91 e9 ad d7 d9 c7 e3 d7 8f e5 11 7f ba 2e 26 6b 09 2b ee 03 df 82 23 c7 67 55 e0 91 3b 18 c4 5a Data Ascii: +38KTQd/r(gKBmO+w[//kaYm/oTs{.699\|$S["h3Cu3~ozgrC5$knY~(IoMoX`3S^E3OUupdD{QTGup!0D{.&k+#gU;Z
2024-04-18 19:18:44 UTC	1573	IN	Data Raw: 82 70 af 23 0b 85 95 04 7b 0c 79 31 c3 c2 6f 92 16 b0 4e 52 de 27 ba 81 5f 9c 39 2e 48 4b 18 f3 d1 69 94 06 ab ec 4e 2a c2 3e a0 c6 70 47 60 58 b3 61 20 ac 5d 61 56 a2 65 1a ab 27 49 c4 ef d5 df ac 83 4e d8 40 32 14 f5 56 20 96 79 51 71 92 61 8f 5e 2e 2f e3 51 55 f3 70 f7 86 5a fa 27 55 65 25 a2 4e 11 ae f7 99 c4 47 5e 58 1a 2b 07 70 11 43 77 13 ad 51 f7 74 21 32 e1 50 8a d4 ff 61 10 8d 91 2c 20 7c 14 95 a0 43 23 38 a3 c0 42 ed e5 e5 1e 83 e7 cb bd f5 e8 e9 4b 59 19 7e 37 1e 46 b1 f3 de 4d 3c f7 a8 c1 9c e6 78 f5 ea 37 29 30 1d 61 75 14 ba af 67 b4 98 89 8b 4d 30 67 86 2b b0 8f 9d 17 19 3c 47 d7 54 54 80 5f 89 02 87 2a b4 1d 2c 25 ba 73 6a 59 4d 86 51 ca 92 13 2b 36 0c ad 55 e8 1d 4e 19 70 0c 4b db 48 2a c1 0c 9f cb 08 a1 3f 8b 1d 34 10 be 73 e7 be 02 7c Data Ascii: p#{y1oNR'_9.HKiN>pG`Xa ]aVe'IN@2V yQqa^./QUpZ'Ue%NG^X+pCwQt!2Pa, \|C#8BKY~7FM<x7)0augM0g+<GTT_,%sjYMQ+6UNpKH*?4s\|
2024-04-18 19:18:44 UTC	16384	IN	Data Raw: a2 13 58 8f 5e fd fc 4a 8e af 71 27 e9 91 29 b0 fb 0e 20 f4 02 db ff d2 e7 82 21 2c 7f fe c8 67 3a 53 6e ad f0 40 b0 b4 7f 0b 86 b0 bc 18 bb 1a 3c cb 9b 9c 01 fc 39 53 c4 4a 45 2a 41 b0 74 93 ae 42 15 ab 86 0a 96 20 cc 04 98 e9 6f 80 57 f1 f5 32 6c f8 4a 78 dd 6e 4a 51 4c 8b d0 2d 52 5b c6 52 61 2b c8 70 19 71 6f eb 06 00 6e b9 fc 76 e5 e9 53 71 ae 6b 95 f5 13 1c be 4b 4b 0e cd 29 b4 91 56 d7 ee e7 bb f9 74 67 45 96 0a 4b 72 94 1e e3 1e c0 f7 3b 02 fc c1 7d 6a bb b5 e2 82 8b fb 6b 2e 7e 96 42 dc ca 4e 4c 30 2b d1 f8 1b 2a e8 82 43 41 35 78 34 36 b9 f3 83 59 df 78 cb d9 bb 2a c1 a3 a3 77 a9 c0 11 c1 2e 8c 86 00 ff 1f f5 b7 af ce 94 91 60 8e 37 5b ce 3a 9d 91 db 6a 35 be 8a e6 2d 68 ab a5 dc 2c 67 38 62 a3 da 7a bf 0f 7c f8 66 90 60 41 b3 d4 8d 42 69 ba 01 Data Ascii: X^Jq') !,g:Sn@<9SJEAtB oW2lJxnJQL-R[Ra+pqonvSqkKK)VtgEKr;}jk.~BNL0+CA5x46Yx*w.`7[:j5-h,g8bz\|f`ABi
2024-04-18 19:18:44 UTC	16384	IN	Data Raw: 30 0b 7d fd fa d7 15 f8 5f 08 a1 91 03 cf 88 35 e5 05 ad 43 3f 61 8b 68 45 98 eb 57 97 84 5e 2b 42 0b c1 f0 99 bf 37 4f 7f aa 5f 35 88 16 78 ff 5f eb 59 cb 4b b0 e2 4b 00 af af bb 00 7a 7d c8 08 1e 87 04 53 0a 3c 57 f1 f2 7b a8 e9 af 3d 94 06 d3 5f d8 c3 e2 b1 4a 69 f1 58 7a 48 fc b7 76 99 fe d2 32 b9 fb fb cb fb 8a f0 27 87 b0 a8 f0 09 db 46 17 91 2c b6 ea c5 43 dc db 5e 5b 59 5c 59 a5 7f 2d 49 30 11 3c 8e a2 f2 ea f3 43 22 98 0f e8 8d cc cd 4d 71 1a dc 45 00 73 4f 69 62 62 6a 6e 90 24 78 a7 d8 10 7c eb c5 c6 6a 55 ad af 96 b0 b7 bf 84 f0 99 2b d0 3c c3 c1 d9 af 40 ec 14 98 31 1d b3 59 0e c9 78 57 18 e1 b5 31 5b 13 0e 04 78 e0 f0 cb 21 4a 57 7a f8 6c 60 c0 df 3f 3b b6 30 da 26 a4 f3 26 59 f1 dd 42 77 b4 24 55 8f 94 b0 c9 1b cc 3d 05 07 50 02 87 f7 7e 3f Data Ascii: 0}_5C?ahEW^+B7O_5x_YKKz}S<W{=_JiXzHv2'F,C^[Y\Y-I0<C"MqEsOibbjn$x\|jU+<@1YxW1[x!JWzl`?;0&&YBw$U=P~?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49736	151.101.193.229	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:44 UTC	668	OUT	GET /npm/slick-carousel@1.8.1/slick/ajax-loader.gif HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick-theme.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:18:45 UTC	746	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4178 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: image/gif X-JSD-Version: 1.8.1 X-JSD-Version-Type: version ETag: W/"1052-ehqkNhQ5Y4K7FeX95XTZzc0haY8" Accept-Ranges: bytes Age: 1115425 Date: Thu, 18 Apr 2024 19:18:44 GMT X-Served-By: cache-fra-etou8220104-FRA, cache-pdk-kpdk1780144-PDK X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-04-18 19:18:45 UTC	1378	IN	Data Raw: 47 49 46 38 39 61 20 00 20 00 f5 00 00 ff ff ff 00 00 00 fa fa fa c4 c4 c4 e8 e8 e8 f0 f0 f0 d0 d0 d0 7e 7e 7e 9a 9a 9a f6 f6 f6 e6 e6 e6 fc fc fc 92 92 92 86 86 86 e2 e2 e2 b8 b8 b8 a0 a0 a0 ec ec ec ae ae ae dc dc dc 3e 3e 3e 56 56 56 60 60 60 7c 7c 7c a8 a8 a8 ee ee ee 4a 4a 4a 6c 6c 6c 0c 0c 0c 00 00 00 ce ce ce c8 c8 c8 d8 d8 d8 2c 2c 2c 5e 5e 5e 1e 1e 1e 4c 4c 4c b0 b0 b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 f9 04 00 0a 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 Data Ascii: GIF89a ~~~>>>VVV```\|\|\|JJJlll,,,^^^LLL!Created with ajaxload.info!!NETSCAPE2
2024-04-18 19:18:45 UTC	1378	IN	Data Raw: af 14 1b 63 b4 7e 86 09 0d bf 15 61 56 b4 6a 55 17 af 1a 10 7f 55 a6 66 7b 13 14 0d 04 86 00 89 86 b1 4c 0b 91 e3 91 de 7b 5b 48 e9 0e c3 c3 b8 55 03 1d f1 f2 1d 1c ec b4 d3 7b f0 f3 f1 1c e2 e4 e5 dc 1c a4 1b a8 69 89 39 38 07 e1 5c 71 b7 84 0c be 2a 02 e4 80 da 33 ab 0c c3 6e 05 98 25 0c 97 b1 4c 06 5c a3 40 e9 f9 d8 30 83 b7 88 f7 88 a4 1c 32 aa 54 82 04 a5 2a 11 09 39 13 a6 11 99 7d 94 74 04 f9 90 49 c7 2a 44 39 85 78 e4 36 a4 cf b4 a0 00 46 5d 6c 22 b1 a8 c5 21 4d b9 21 05 30 d5 a8 54 2c 44 a6 2a b2 46 54 18 d7 ae 70 10 71 0b 02 00 21 f9 04 00 0a 00 04 00 2c 00 00 00 00 20 00 20 00 00 06 ff 40 80 70 48 2c 2a 14 8b a2 72 49 4c 12 05 47 41 b1 c0 5c 26 14 99 67 94 08 1a 4c aa 45 a8 42 2a 14 93 01 85 c1 00 04 2e 46 8e 43 f3 d0 a3 76 b6 cb c7 04 7e 2c 24 Data Ascii: c~aVjUUf{L{[HU{i98\q3n%L\@02T9}tID9x6F]l"!M!0T,DFTpq!, @pH,rILGA\&gLEB.FCv~,$
2024-04-18 19:18:45 UTC	1378	IN	Data Raw: c1 00 01 08 10 08 14 38 70 a0 04 11 07 f5 88 34 ea e5 80 21 05 00 06 28 50 30 00 a0 04 45 07 4d 1c 28 50 43 81 21 ca 90 23 cf 34 38 80 e0 9b 90 01 0c 0f 08 81 49 12 c0 00 32 8a 3d 7f 8d e8 c0 01 13 cf 21 0c 0e 34 10 a7 04 02 43 08 43 8e 0a 71 40 f1 c3 af 12 1d 42 10 91 2a 04 c2 01 10 36 8b 70 0d cb 24 81 06 0d ef f4 04 01 00 21 f9 04 00 0a 00 08 00 2c 00 00 00 00 20 00 20 00 00 06 ff 40 80 70 48 2c 2a 14 8b a2 72 49 4c 12 05 47 41 51 ca 54 26 14 99 67 94 58 50 24 aa d3 ad 10 aa a0 02 c8 05 70 31 72 1c 92 cd 99 b6 5a eb 1d 8b c9 df 39 f7 98 7c 0b 8f 11 6a 02 66 42 0b 47 69 7e 57 65 45 09 79 00 86 0a 11 84 8a 7d 52 90 69 6e 6c 48 43 71 87 4e 00 05 84 85 19 4e 0b 5d 87 61 47 75 7a a7 91 a2 43 8a 0a 98 60 ad 8e 4c a6 8b 6a 86 05 9f ba 7a 8f b7 83 c2 83 bd 82 Data Ascii: 8p4!(P0EM(PC!#48I2=!4CCq@B6p$!, @pH,rILGAQT&gXP$p1rZ9\|jfBGi~WeEy}RinlHCqNN]aGuzC`Ljz
2024-04-18 19:18:45 UTC	44	IN	Data Raw: 2a 61 c4 b3 8a 27 54 35 55 9b 2a 9d a4 06 cd 47 87 0a 4e 3a 8d 4a 8b 6c d3 b1 23 cf 32 61 d5 2d 08 00 3b 00 00 00 00 00 00 00 00 00 Data Ascii: a'T5UGN:Jl#2a-;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49737	151.101.193.229	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:44 UTC	638	OUT	GET /npm/slick-carousel@1.8.1/slick/fonts/slick.woff HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://af.uppromote.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick-theme.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:18:45 UTC	745	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1380 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: font/woff X-JSD-Version: 1.8.1 X-JSD-Version-Type: version ETag: W/"564-r5HBLw9Aak+AGus7OYdo/kHY+GQ" Accept-Ranges: bytes Date: Thu, 18 Apr 2024 19:18:44 GMT Age: 1347720 X-Served-By: cache-fra-etou8220033-FRA, cache-pdk-kfty2130064-PDK X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-04-18 19:18:45 UTC	1378	IN	Data Raw: 77 4f 46 46 4f 54 54 4f 00 00 05 64 00 0b 00 00 00 00 07 5c 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 43 46 46 20 00 00 01 08 00 00 02 2e 00 00 02 9b 1f fa 56 0e 46 46 54 4d 00 00 03 38 00 00 00 1a 00 00 00 1c 6d d1 c8 af 47 44 45 46 00 00 03 54 00 00 00 1c 00 00 00 20 00 32 00 04 4f 53 2f 32 00 00 03 70 00 00 00 52 00 00 00 60 50 18 ff ae 63 6d 61 70 00 00 03 c4 00 00 00 50 00 00 01 62 22 0b 44 b0 68 65 61 64 00 00 04 14 00 00 00 2e 00 00 00 36 00 01 31 fb 68 68 65 61 00 00 04 44 00 00 00 1c 00 00 00 24 03 e5 02 03 68 6d 74 78 00 00 04 60 00 00 00 0e 00 00 00 0e 04 4a 00 4a 6d 61 78 70 00 00 04 70 00 00 00 06 00 00 00 06 00 05 50 00 6e 61 6d 65 00 00 04 78 00 00 00 dc 00 00 01 6e 05 27 81 c2 70 6f 73 74 00 00 05 54 00 00 00 Data Ascii: wOFFOTTOd\CFF .VFFTM8mGDEFT 2OS/2pR`PcmapPb"Dhead.61hheaD$hmtx`JJmaxppPnamexn'postT
2024-04-18 19:18:45 UTC	2	IN	Data Raw: 00 05 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49738	104.18.70.113	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:44 UTC	546	OUT	GET /embeddable_framework/main.js HTTP/1.1 Host: assets.zendesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://af.uppromote.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:18:45 UTC	689	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 18 Apr 2024 19:18:45 GMT Content-Type: text/html Content-Length: 167 Connection: close Cache-Control: max-age=3600 Expires: Thu, 18 Apr 2024 20:18:45 GMT Location: https://static.zdassets.com/ekr/asset_composer.js Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=860cL1zI2NbVtQ%2FMqk%2B8M9oXt9t%2FYivkqgjWz7RVDswVbthH7JJiv7guuNNlLP9r%2BrOdSD%2FKYTcB6dK4Ziv1S2z8jyM4TiEHDrEvK8KKQ6r62C8EGd8witPmrGbeWnfxYrOWgw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Server: cloudflare CF-RAY: 876700a3a82b1d74-ATL
2024-04-18 19:18:45 UTC	167	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49741	151.101.193.229	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:45 UTC	386	OUT	GET /npm/slick-carousel@1.8.1/slick/ajax-loader.gif HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:18:45 UTC	746	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4178 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: image/gif X-JSD-Version: 1.8.1 X-JSD-Version-Type: version ETag: W/"1052-ehqkNhQ5Y4K7FeX95XTZzc0haY8" Accept-Ranges: bytes Date: Thu, 18 Apr 2024 19:18:45 GMT Age: 1115426 X-Served-By: cache-fra-etou8220104-FRA, cache-pdk-kpdk1780040-PDK X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-04-18 19:18:45 UTC	1378	IN	Data Raw: 47 49 46 38 39 61 20 00 20 00 f5 00 00 ff ff ff 00 00 00 fa fa fa c4 c4 c4 e8 e8 e8 f0 f0 f0 d0 d0 d0 7e 7e 7e 9a 9a 9a f6 f6 f6 e6 e6 e6 fc fc fc 92 92 92 86 86 86 e2 e2 e2 b8 b8 b8 a0 a0 a0 ec ec ec ae ae ae dc dc dc 3e 3e 3e 56 56 56 60 60 60 7c 7c 7c a8 a8 a8 ee ee ee 4a 4a 4a 6c 6c 6c 0c 0c 0c 00 00 00 ce ce ce c8 c8 c8 d8 d8 d8 2c 2c 2c 5e 5e 5e 1e 1e 1e 4c 4c 4c b0 b0 b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 f9 04 00 0a 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 Data Ascii: GIF89a ~~~>>>VVV```\|\|\|JJJlll,,,^^^LLL!Created with ajaxload.info!!NETSCAPE2
2024-04-18 19:18:45 UTC	1378	IN	Data Raw: af 14 1b 63 b4 7e 86 09 0d bf 15 61 56 b4 6a 55 17 af 1a 10 7f 55 a6 66 7b 13 14 0d 04 86 00 89 86 b1 4c 0b 91 e3 91 de 7b 5b 48 e9 0e c3 c3 b8 55 03 1d f1 f2 1d 1c ec b4 d3 7b f0 f3 f1 1c e2 e4 e5 dc 1c a4 1b a8 69 89 39 38 07 e1 5c 71 b7 84 0c be 2a 02 e4 80 da 33 ab 0c c3 6e 05 98 25 0c 97 b1 4c 06 5c a3 40 e9 f9 d8 30 83 b7 88 f7 88 a4 1c 32 aa 54 82 04 a5 2a 11 09 39 13 a6 11 99 7d 94 74 04 f9 90 49 c7 2a 44 39 85 78 e4 36 a4 cf b4 a0 00 46 5d 6c 22 b1 a8 c5 21 4d b9 21 05 30 d5 a8 54 2c 44 a6 2a b2 46 54 18 d7 ae 70 10 71 0b 02 00 21 f9 04 00 0a 00 04 00 2c 00 00 00 00 20 00 20 00 00 06 ff 40 80 70 48 2c 2a 14 8b a2 72 49 4c 12 05 47 41 b1 c0 5c 26 14 99 67 94 08 1a 4c aa 45 a8 42 2a 14 93 01 85 c1 00 04 2e 46 8e 43 f3 d0 a3 76 b6 cb c7 04 7e 2c 24 Data Ascii: c~aVjUUf{L{[HU{i98\q3n%L\@02T9}tID9x6F]l"!M!0T,DFTpq!, @pH,rILGA\&gLEB.FCv~,$
2024-04-18 19:18:45 UTC	1378	IN	Data Raw: c1 00 01 08 10 08 14 38 70 a0 04 11 07 f5 88 34 ea e5 80 21 05 00 06 28 50 30 00 a0 04 45 07 4d 1c 28 50 43 81 21 ca 90 23 cf 34 38 80 e0 9b 90 01 0c 0f 08 81 49 12 c0 00 32 8a 3d 7f 8d e8 c0 01 13 cf 21 0c 0e 34 10 a7 04 02 43 08 43 8e 0a 71 40 f1 c3 af 12 1d 42 10 91 2a 04 c2 01 10 36 8b 70 0d cb 24 81 06 0d ef f4 04 01 00 21 f9 04 00 0a 00 08 00 2c 00 00 00 00 20 00 20 00 00 06 ff 40 80 70 48 2c 2a 14 8b a2 72 49 4c 12 05 47 41 51 ca 54 26 14 99 67 94 58 50 24 aa d3 ad 10 aa a0 02 c8 05 70 31 72 1c 92 cd 99 b6 5a eb 1d 8b c9 df 39 f7 98 7c 0b 8f 11 6a 02 66 42 0b 47 69 7e 57 65 45 09 79 00 86 0a 11 84 8a 7d 52 90 69 6e 6c 48 43 71 87 4e 00 05 84 85 19 4e 0b 5d 87 61 47 75 7a a7 91 a2 43 8a 0a 98 60 ad 8e 4c a6 8b 6a 86 05 9f ba 7a 8f b7 83 c2 83 bd 82 Data Ascii: 8p4!(P0EM(PC!#48I2=!4CCq@B6p$!, @pH,rILGAQT&gXP$p1rZ9\|jfBGi~WeEy}RinlHCqNN]aGuzC`Ljz
2024-04-18 19:18:45 UTC	44	IN	Data Raw: 2a 61 c4 b3 8a 27 54 35 55 9b 2a 9d a4 06 cd 47 87 0a 4e 3a 8d 4a 8b 6c d3 b1 23 cf 32 61 d5 2d 08 00 3b 00 00 00 00 00 00 00 00 00 Data Ascii: a'T5UGN:Jl#2a-;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49742	104.18.70.113	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:45 UTC	540	OUT	GET /ekr/asset_composer.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://af.uppromote.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:18:45 UTC	1130	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 19:18:45 GMT Content-Type: application/javascript Content-Length: 10187 Connection: close x-amz-id-2: HKcklyYw+fLm3AjrUBReIA7ZDi46rsX/93TVee1MAC10WFJ4qUROlDjJ5BFNvV4bfwZbO+a3hk8= x-amz-request-id: FGCSDCAJ1XN7DE44 x-amz-replication-status: COMPLETED Last-Modified: Mon, 15 Jan 2024 02:56:11 GMT ETag: "c0053b411b753138af468db1bd3b19f3" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=3600, s-maxage=60 x-amz-version-id: KdUtYfTvhN3NWk63zbedRawrUoa4O1MG CF-Cache-Status: HIT Age: 42 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KGeZyGS2nGYmtEQ7BZz251s2hN7ShUd3yyQeIaxitJiX3lHuYWBGmmjgbKqJEh9mgREs0Yrjx6jBMBvdt8PzY5W2DNwx%2BA%2B4QNEw00%2BR8aVZwvk5ekZjmVayBV6tRdDVGdp8Gvc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 876700a76b0e451a-ATL
2024-04-18 19:18:45 UTC	239	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 72 3d 7b 32 37 31 3a 65 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 72 65 74 75 72 6e 20 74 2e 68 72 65 66 3d 65 2c 74 2e 73 65 61 72 63 68 2e 73 70 6c 69 74 28 22 3f 22 29 5b 31 5d 7c 7c 22 22 7d 65 2e 65 78 70 6f 72 74 73 3d 7b 67 65 74 51 75 65 72 79 50 61 72 61 6d 73 53 74 72 69 6e 67 3a 74 2c 70 61 72 73 65 55 72 6c 50 61 72 61 6d 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 72 3d 74 28 65 29 3b 72 65 74 75 72 6e 22 22 3d 3d 3d 72 3f 7b 7d 3a 72 2e 73 70 6c 69 74 28 22 26 22 29 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: (()=>{var e,t,r={271:e=>{function t(e){const t=document.createElement("a");return t.href=e,t.search.split("?")[1]\|\|""}e.exports={getQueryParamsString:t,parseUrlParams:function(e){const r=t(e);return""===r?{}:r.split("&").reduce((function(e
2024-04-18 19:18:45 UTC	1369	IN	Data Raw: 2c 74 29 7b 63 6f 6e 73 74 20 72 3d 74 2e 73 70 6c 69 74 28 22 3d 22 29 3b 72 65 74 75 72 6e 20 65 5b 72 5b 30 5d 5d 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 72 5b 31 5d 29 2c 65 7d 29 2c 7b 7d 29 7d 2c 6c 6f 61 64 53 63 72 69 70 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 3d 28 28 29 3d 3e 7b 7d 29 29 7b 63 6f 6e 73 74 20 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 72 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 72 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 6e 65 77 20 45 72 72 6f 72 28 22 53 63 72 69 70 74 20 66 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 22 29 29 7d 2c 72 2e 72 65 61 64 79 53 74 61 74 65 3f 72 2e 6f 6e 72 65 61 64 Data Ascii: ,t){const r=t.split("=");return e[r[0]]=decodeURIComponent(r[1]),e}),{})},loadScript:function(e,t=(()=>{})){const r=document.createElement("script");r.type="text/javascript",r.onerror=function(){t(new Error("Script failed to load"))},r.readyState?r.onread
2024-04-18 19:18:45 UTC	1369	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 29 2e 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2c 61 2e 74 69 6d 65 6f 75 74 3d 31 32 30 2c 73 2e 6e 63 26 26 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 2c 73 2e 6e 63 29 2c 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 65 62 70 61 63 6b 22 2c 74 2b 6f 29 2c 61 2e 73 72 63 3d 72 29 2c 65 5b 72 5d 3d 5b 6e 5d 3b 76 61 72 20 6c 3d 28 74 2c 6e 29 3d 3e 7b 61 2e 6f 6e 65 72 72 6f 72 3d 61 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 68 29 3b 76 61 72 20 73 3d 65 5b 72 5d 3b 69 66 28 64 65 6c 65 74 65 20 65 5b 72 5d 2c 61 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 61 2e 70 61 72 65 6e 74 4e Data Ascii: document.createElement("script")).charset="utf-8",a.timeout=120,s.nc&&a.setAttribute("nonce",s.nc),a.setAttribute("data-webpack",t+o),a.src=r),e[r]=[n];var l=(t,n)=>{a.onerror=a.onload=null,clearTimeout(h);var s=e[r];if(delete e[r],a.parentNode&&a.parentN
2024-04-18 19:18:45 UTC	1369	IN	Data Raw: 75 6c 6c 2c 30 29 29 2c 72 2e 70 75 73 68 3d 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 72 2e 70 75 73 68 2e 62 69 6e 64 28 72 29 29 7d 29 28 29 2c 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6c 61 73 73 20 65 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 3d 22 22 2c 74 3d 7b 7d 2c 72 3d 21 31 29 7b 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 65 2c 74 68 69 73 2e 70 72 6f 70 73 3d 74 2c 74 68 69 73 2e 65 72 72 6f 72 3d 45 72 72 6f 72 28 74 68 69 73 2e 6d 65 73 73 61 67 65 29 2c 74 68 69 73 2e 69 73 55 73 65 72 45 72 72 6f 72 3d 72 2c 74 68 69 73 2e 66 69 6e 67 65 72 70 72 69 6e 74 3d 74 68 69 73 2e 6d 65 73 73 61 67 65 7d 7d 63 6f 6e 73 74 20 74 3d 7b 7d 2c 72 3d 7b 7d 2c 6e 3d 7b 7d 3b 63 6c 61 73 73 20 6f 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 Data Ascii: ull,0)),r.push=t.bind(null,r.push.bind(r))})(),(()=>{"use strict";class e{constructor(e="",t={},r=!1){this.message=e,this.props=t,this.error=Error(this.message),this.isUserError=r,this.fingerprint=this.message}}const t={},r={},n={};class o{constructor(e,t
2024-04-18 19:18:45 UTC	1369	IN	Data Raw: 49 66 72 61 6d 65 45 6c 65 6d 65 6e 74 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 44 6f 63 75 6d 65 6e 74 52 65 61 64 79 28 29 2e 74 68 65 6e 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 64 6f 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 72 65 74 75 72 6e 20 65 2e 64 61 74 61 73 65 74 2e 70 72 6f 64 75 63 74 3d 74 68 69 73 2e 6e 61 6d 65 2c 65 2e 74 69 74 6c 65 3d 22 4e 6f 20 63 6f 6e 74 65 6e 74 22 2c 65 2e 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 2c 65 2e 74 61 62 49 6e 64 65 78 3d 2d 31 2c 65 2e 61 6c 6c 6f 77 3d 22 6d 69 63 72 6f 70 68 6f 6e 65 20 2a 22 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 68 69 64 64 65 6e 22 2c 21 30 29 2c 65 2e 73 74 79 Data Ascii: IframeElement(){return this.parentDocumentReady().then((()=>{const e=this.doc.createElement("iframe");return e.dataset.product=this.name,e.title="No content",e.role="presentation",e.tabIndex=-1,e.allow="microphone *",e.setAttribute("aria-hidden",!0),e.sty
2024-04-18 19:18:45 UTC	1369	IN	Data Raw: 28 65 2c 74 29 7b 74 68 69 73 2e 76 65 72 73 69 6f 6e 3d 74 68 69 73 2e 67 65 74 56 65 72 73 69 6f 6e 28 65 29 2c 74 68 69 73 2e 62 61 73 65 55 72 6c 3d 60 68 74 74 70 73 3a 2f 2f 65 6b 72 2e 7a 64 61 73 73 65 74 73 2e 63 6f 6d 2f 63 6f 6d 70 6f 73 65 2f 24 7b 74 7d 60 2c 74 68 69 73 2e 73 6e 69 70 70 65 74 4b 65 79 3d 74 7d 72 65 73 6f 6c 76 65 43 6f 6d 70 6f 73 65 55 72 6c 28 65 3d 21 31 29 7b 6c 65 74 20 74 3d 74 68 69 73 2e 62 61 73 65 55 72 6c 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 65 72 73 69 6f 6e 26 26 28 74 2b 3d 60 3f 24 7b 74 68 69 73 2e 67 65 74 53 65 72 69 61 6c 69 7a 65 64 56 65 72 73 69 6f 6e 51 75 65 72 79 50 61 72 61 6d 28 29 7d 60 2c 74 68 69 73 2e 64 69 73 70 6c 61 79 57 61 72 6e 69 6e 67 28 29 29 2c 64 65 63 6f 64 65 55 52 49 28 74 Data Ascii: (e,t){this.version=this.getVersion(e),this.baseUrl=`https://ekr.zdassets.com/compose/${t}`,this.snippetKey=t}resolveComposeUrl(e=!1){let t=this.baseUrl;return this.version&&(t+=`?${this.getSerializedVersionQueryParam()}`,this.displayWarning()),decodeURI(t
2024-04-18 19:18:45 UTC	1369	IN	Data Raw: 2c 74 29 3a 6e 65 77 20 69 28 65 2c 74 29 29 29 7d 65 72 72 6f 72 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 22 63 6f 6d 70 6f 73 65 20 72 65 71 75 65 73 74 20 66 61 69 6c 65 64 22 2c 7b 6b 65 79 3a 74 7d 29 7d 7d 63 6c 61 73 73 20 6c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 74 68 69 73 2e 77 69 6e 3d 65 2c 74 68 69 73 2e 64 6f 63 3d 65 2e 64 6f 63 75 6d 65 6e 74 7d 67 65 74 4b 65 79 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 74 2c 72 29 3d 3e 72 28 6e 65 77 20 65 28 22 4b 65 79 20 69 73 20 6d 69 73 73 69 6e 67 20 66 72 6f 6d 20 73 6e 69 70 70 65 74 22 2c 7b 7d 2c 21 30 29 29 29 29 7d 67 65 74 5a 45 51 75 65 75 65 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 67 65 74 50 61 72 65 6e 74 57 69 6e 64 6f 77 28 29 7b Data Ascii: ,t):new i(e,t)))}error(t){return new e("compose request failed",{key:t})}}class l{constructor(e){this.win=e,this.doc=e.document}getKey(){return new Promise(((t,r)=>r(new e("Key is missing from snippet",{},!0))))}getZEQueue(){return null}getParentWindow(){
2024-04-18 19:18:45 UTC	1369	IN	Data Raw: 74 68 69 73 2e 77 69 6e 29 29 7d 60 29 29 29 7d 73 74 61 74 69 63 20 67 65 74 53 63 72 69 70 74 53 72 63 28 65 29 7b 69 66 28 65 2e 24 7a 6f 70 69 6d 26 26 65 2e 24 7a 6f 70 69 6d 2e 73 29 72 65 74 75 72 6e 20 65 2e 24 7a 6f 70 69 6d 2e 73 2e 73 72 63 3b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 2c 72 3d 2f 2e 2a 7a 6f 70 69 6d 2e 28 63 6f 6d 7c 6e 65 74 7c 6f 72 67 29 5c 2f 2f 3b 6c 65 74 20 6e 3b 66 6f 72 28 6c 65 74 20 65 3d 30 2c 73 3d 74 2e 6c 65 6e 67 74 68 3b 65 3c 73 3b 65 2b 2b 29 69 66 28 6e 3d 74 5b 65 5d 2e 73 72 63 7c 7c 22 22 2c 72 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 6e 7d 73 74 61 74 69 63 20 69 73 53 6e 69 70 70 65 74 50 72 65 73 Data Ascii: this.win))}`)))}static getScriptSrc(e){if(e.$zopim&&e.$zopim.s)return e.$zopim.s.src;const t=document.getElementsByTagName("script"),r=/.*zopim.(com\|net\|org)\//;let n;for(let e=0,s=t.length;e<s;e++)if(n=t[e].src\|\|"",r.test(n))return n}static isSnippetPres
2024-04-18 19:18:45 UTC	365	IN	Data Raw: 45 41 43 4c 6f 61 64 65 64 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6d 2e 69 73 53 6e 69 70 70 65 74 50 72 65 73 65 6e 74 28 65 29 3f 6e 65 77 20 6d 28 65 29 3a 65 2e 64 6f 63 75 6d 65 6e 74 2e 7a 65 6e 64 65 73 6b 48 6f 73 74 26 26 65 2e 64 6f 63 75 6d 65 6e 74 2e 7a 45 51 75 65 75 65 3f 6e 65 77 20 68 28 65 29 3a 67 2e 69 73 53 6e 69 70 70 65 74 50 72 65 73 65 6e 74 28 65 29 3f 6e 65 77 20 67 28 65 29 3a 6e 65 77 20 6d 28 65 29 7d 28 77 69 6e 64 6f 77 29 2c 74 3d 6e 65 77 20 70 28 65 29 2c 72 3d 21 31 3b 65 2e 67 65 74 4b 65 79 28 29 2e 74 68 65 6e 28 28 65 3d 3e 74 2e 67 65 74 50 72 6f 64 75 63 74 73 28 65 2c 72 29 29 29 2e 74 68 65 6e 28 28 65 3d 3e 7b 69 66 28 65 26 26 65 2e 6c 65 6e 67 Data Ascii: EACLoaded)return;const e=function(e){return m.isSnippetPresent(e)?new m(e):e.document.zendeskHost&&e.document.zEQueue?new h(e):g.isSnippetPresent(e)?new g(e):new m(e)}(window),t=new p(e),r=!1;e.getKey().then((e=>t.getProducts(e,r))).then((e=>{if(e&&e.leng

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49744	216.239.36.181	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:45 UTC	1143	OUT	POST /g/collect?v=2&tid=G-VWZPYDCSKQ&gtm=45je44f0v894741970za200&_p=1713467923933&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=130039912.1713467925&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=AAAI&_s=1&sid=1713467924&sct=1&seg=0&dl=https%3A%2F%2Faf.uppromote.com%2F&dt=AFFILIATE%20%7C%20Login&en=page_view&_fv=1&_ss=1&tfd=3693 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://af.uppromote.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://af.uppromote.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:18:46 UTC	450	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://af.uppromote.com Date: Thu, 18 Apr 2024 19:18:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49745	172.253.124.154	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:45 UTC	866	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-53113273-27&cid=130039912.1713467925&jid=1329057363&gjid=2076597767&_gid=1443929882.1713467925&_u=YEBAAUAAAAAAACAAI~&z=1669976494 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://af.uppromote.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://af.uppromote.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:18:46 UTC	594	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://af.uppromote.com Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Thu, 18 Apr 2024 19:18:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:18:46 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49746	142.250.105.157	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:45 UTC	921	OUT	GET /td/ga/rul?tid=G-VWZPYDCSKQ&gacid=130039912.1713467925&gtm=45je44f0v894741970za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&z=364272637 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://af.uppromote.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:18:46 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 19:18:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 18-Apr-2024 19:33:46 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 19:18:46 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-18 19:18:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49747	172.253.124.154	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:46 UTC	785	OUT	POST /g/collect?v=2&tid=G-VWZPYDCSKQ&cid=130039912.1713467925&gtm=45je44f0v894741970za200&aip=1&dma=0&gcd=13l3l3l3l1&npa=0 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://af.uppromote.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://af.uppromote.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:18:46 UTC	450	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://af.uppromote.com Date: Thu, 18 Apr 2024 19:18:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49748	104.18.72.113	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:46 UTC	585	OUT	GET /compose/web_widget/secomapp.zendesk.com HTTP/1.1 Host: ekr.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://af.uppromote.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://af.uppromote.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:18:46 UTC	1249	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 19:18:46 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-methods: GET, POST, OPTIONS access-control-expose-headers: access-control-max-age: 7200 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin cdn-cache-control: max-age=60 vary: Accept, Origin cache-control: max-age=300, public, stale-while-revalidate=300, stale-if-error=21600 etag: W/"f7bd410822025f7a263e9a01d11c71e2" x-request-id: 872ac62cfb3707f1-SEA X-Request-ID: 872ac62cfb3707f1-SEA x-runtime: 0.004004 X-Zendesk-Zorg: yes CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M8jseyrys3MRTvl2WNFICaRhedduft%2BQCBAjMudhlU%2BwAappPwlIHzFl77UBJAiQW9M5Ul63PmZLjq2wcY7KrITtiSLoKdLFkrFy3u%2Fp0PEHVHJ6lVNyKdT46HOrVstzHf0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Server: cloudflare CF-RAY: 876700ab294c451f-ATL
2024-04-18 19:18:46 UTC	120	IN	Data Raw: 32 65 36 0d 0a 7b 22 70 72 6f 64 75 63 74 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 77 65 62 5f 77 69 64 67 65 74 22 2c 22 69 64 22 3a 22 73 65 63 6f 6d 61 70 70 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 22 2c 22 62 6f 6f 74 73 74 72 61 70 22 3a 7b 22 63 6f 6e 66 69 67 22 3a 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 66 61 73 74 4c 6f 61 64 22 3a 74 72 75 65 7d 2c 22 Data Ascii: 2e6{"products":[{"name":"web_widget","id":"secomapp.zendesk.com","bootstrap":{"config":{"features":{"fastLoad":true},"
2024-04-18 19:18:46 UTC	629	IN	Data Raw: 63 6f 6c 6f 72 22 3a 22 23 37 38 61 33 30 30 22 2c 22 62 72 61 6e 64 22 3a 22 73 65 63 6f 6d 61 70 70 22 2c 22 65 6d 62 65 64 73 22 3a 7b 22 74 69 63 6b 65 74 53 75 62 6d 69 73 73 69 6f 6e 46 6f 72 6d 22 3a 7b 22 65 6d 62 65 64 22 3a 22 73 75 62 6d 69 74 54 69 63 6b 65 74 22 2c 22 70 72 6f 70 73 22 3a 7b 22 61 74 74 61 63 68 6d 65 6e 74 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 6d 61 78 46 69 6c 65 53 69 7a 65 22 3a 35 32 34 32 38 38 30 30 2e 30 2c 22 63 6f 6c 6f 72 22 3a 22 23 37 38 61 33 30 30 22 2c 22 6e 61 6d 65 46 69 65 6c 64 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 75 73 74 6f 6d 46 69 65 6c 64 73 22 3a 7b 22 69 64 73 22 3a 5b 22 32 31 39 38 37 34 34 39 22 2c 22 32 31 39 36 30 35 37 35 22 5d 7d 7d 7d 2c 22 6c 61 75 6e 63 68 65 72 22 3a Data Ascii: color":"#78a300","brand":"secomapp","embeds":{"ticketSubmissionForm":{"embed":"submitTicket","props":{"attachmentsEnabled":true,"maxFileSize":52428800.0,"color":"#78a300","nameFieldEnabled":true,"customFields":{"ids":["21987449","21960575"]}}},"launcher":
2024-04-18 19:18:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49751	142.251.15.156	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:46 UTC	614	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-53113273-27&cid=130039912.1713467925&jid=1329057363&gjid=2076597767&_gid=1443929882.1713467925&_u=YEBAAUAAAAAAACAAI~&z=1669976494 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:18:46 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Thu, 18 Apr 2024 19:18:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:18:46 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49750	64.233.176.103	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:46 UTC	813	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-53113273-27&cid=130039912.1713467925&jid=1329057363&_u=YEBAAUAAAAAAACAAI~&z=152713507 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://af.uppromote.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:18:46 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 19:18:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:18:46 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49754	104.18.70.113	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:46 UTC	535	OUT	GET /web_widget/classic/latest/web-widget-main-7bc1c0f.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:18:46 UTC	1197	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 19:18:46 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 992059 Connection: close x-amz-id-2: ldH41+NY0+fYAgvbqFIJmvudIE2j/SxzaKSwKqxB3P/vSWpJ08HqoFV2mSP6KWgMbK8lgvcvTvmD4moNqUmffw== x-amz-request-id: 64S1GV9HNQKB0DVA x-amz-replication-status: COMPLETED Last-Modified: Mon, 08 Apr 2024 13:46:13 GMT ETag: "3784cf5e1ddd3a68e335f3bb4a5e2fcd" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Tue, 08 Apr 2025 13:46:12 GMT x-amz-version-id: _IYDenNVju8wHXIpAa8FJzBqmTlghdyK CF-Cache-Status: HIT Age: 632017 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BgdJHQb5M%2BCgEISQIq8F41HbQ81vMIr0aGZaiAJT0inTK8HhZcDXFHivhdLyOXz558QcUyzpquBAc7jffudrSa2kKmBAmTS%2BNzswnF3gCjZN%2Bz6wWxH19Lvddd%2B2q%2FSAY0jIgPY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 876700aee8fe4576-ATL
2024-04-18 19:18:46 UTC	172	IN	Data Raw: 2f 2a 21 20 4f 75 72 20 65 6d 62 65 64 64 61 62 6c 65 20 63 6f 6e 74 61 69 6e 73 20 74 68 69 72 64 2d 70 61 72 74 79 2c 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 73 6f 66 74 77 61 72 65 20 61 6e 64 2f 6f 72 20 6c 69 62 72 61 72 69 65 73 2e 20 54 6f 20 76 69 65 77 20 74 68 65 6d 20 61 6e 64 20 74 68 65 69 72 20 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 2c 20 67 6f 20 74 6f 20 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2f 63 6c 61 73 Data Ascii: /*! Our embeddable contains third-party, open source software and/or libraries. To view them and their license terms, go to https://developer.zendesk.com/documentation/clas
2024-04-18 19:18:46 UTC	1369	IN	Data Raw: 73 69 63 2d 77 65 62 2d 77 69 64 67 65 74 2d 73 64 6b 73 2f 77 65 62 2d 77 69 64 67 65 74 2f 67 65 74 74 69 6e 67 2d 73 74 61 72 74 65 64 2f 6c 65 67 61 6c 2f 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 3d 7b 32 30 39 31 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 2c 6f 3d 6e 28 31 35 38 32 36 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 Data Ascii: sic-web-widget-sdks/web-widget/getting-started/legal/ */(()=>{var e,t,n,r,o={20916:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o=n(15826);function a(){return a=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t
2024-04-18 19:18:46 UTC	1369	IN	Data Raw: 30 20 37 73 33 2e 31 33 20 37 20 37 20 37 20 37 2d 33 2e 31 33 20 37 2d 37 2d 33 2e 31 33 2d 37 2d 37 2d 37 7a 6d 33 2e 30 39 20 35 2e 33 36 33 6c 2d 33 2e 33 20 34 2e 32 61 2e 37 35 2e 37 35 20 30 20 30 20 31 2d 2e 35 34 35 2e 32 38 36 48 36 2e 32 61 2e 37 34 38 2e 37 34 38 20 30 20 30 20 31 2d 2e 35 33 2d 2e 32 32 4c 33 2e 39 37 20 37 2e 39 33 61 2e 37 35 2e 37 35 20 30 20 31 20 31 20 31 2e 30 36 2d 31 2e 30 36 6c 31 2e 31 30 33 20 31 2e 31 30 32 4c 38 2e 39 31 20 34 2e 34 33 37 61 2e 37 35 2e 37 35 20 30 20 30 20 31 20 31 2e 31 38 2e 39 32 36 7a 22 7d 29 29 29 7d 7d 2c 38 38 33 34 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 Data Ascii: 0 7s3.13 7 7 7 7-3.13 7-7-3.13-7-7-7zm3.09 5.363l-3.3 4.2a.75.75 0 0 1-.545.286H6.2a.748.748 0 0 1-.53-.22L3.97 7.93a.75.75 0 1 1 1.06-1.06l1.103 1.102L8.91 4.437a.75.75 0 0 1 1.18.926z"})))}},88343:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var
2024-04-18 19:18:46 UTC	1369	IN	Data Raw: 6e 73 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 77 69 64 74 68 3a 31 34 2c 68 65 69 67 68 74 3a 31 34 2c 66 6f 63 75 73 61 62 6c 65 3a 22 66 61 6c 73 65 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 34 20 31 34 22 2c 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 3a 6e 7d 2c 69 29 2c 74 3f 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 69 74 6c 65 22 2c 7b 69 64 3a 6e 7d 2c 74 29 3a 6e 75 6c 6c 2c 72 7c 7c 28 72 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 73 74 72 6f 6b 65 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 2c 73 74 72 6f 6b 65 4c 69 6e 65 63 61 70 3a 22 72 6f 75 6e 64 22 2c 73 74 72 6f 6b 65 4c 69 6e 65 6a 6f 69 6e 3a Data Ascii: ns:"http://www.w3.org/2000/svg",width:14,height:14,focusable:"false",viewBox:"0 0 14 14","aria-labelledby":n},i),t?o.createElement("title",{id:n},t):null,r\|\|(r=o.createElement("path",{fill:"none",stroke:"currentColor",strokeLinecap:"round",strokeLinejoin:
2024-04-18 19:18:46 UTC	1369	IN	Data Raw: 2c 66 6f 63 75 73 61 62 6c 65 3a 22 66 61 6c 73 65 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 36 20 31 36 22 2c 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 3a 6e 7d 2c 69 29 2c 74 3f 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 69 74 6c 65 22 2c 7b 69 64 3a 6e 7d 2c 74 29 3a 6e 75 6c 6c 2c 72 7c 7c 28 72 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 73 74 72 6f 6b 65 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 2c 73 74 72 6f 6b 65 4c 69 6e 65 63 61 70 3a 22 72 6f 75 6e 64 22 2c 73 74 72 6f 6b 65 57 69 64 74 68 3a 32 2c 64 3a 22 4d 31 31 20 31 2e 35 4c 34 2e 39 20 37 2e 36 63 2d 2e 32 2e 32 2d 2e 32 2e 35 20 30 20 2e 37 6c 36 2e 31 20 36 2e 31 22 7d 29 29 29 7d 7d 2c 35 Data Ascii: ,focusable:"false",viewBox:"0 0 16 16","aria-labelledby":n},i),t?o.createElement("title",{id:n},t):null,r\|\|(r=o.createElement("path",{fill:"none",stroke:"currentColor",strokeLinecap:"round",strokeWidth:2,d:"M11 1.5L4.9 7.6c-.2.2-.2.5 0 .7l6.1 6.1"})))}},5
2024-04-18 19:18:46 UTC	1369	IN	Data Raw: 66 6f 63 75 73 61 62 6c 65 3a 22 66 61 6c 73 65 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 36 20 31 36 22 2c 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 3a 6e 7d 2c 69 29 2c 74 3f 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 69 74 6c 65 22 2c 7b 69 64 3a 6e 7d 2c 74 29 3a 6e 75 6c 6c 2c 72 7c 7c 28 72 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 67 22 2c 7b 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 73 74 72 6f 6b 65 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 7d 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 63 69 72 63 6c 65 22 2c 7b 63 78 3a 38 2c 63 79 3a 38 2c 72 3a 37 2e 35 7d 29 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 73 74 72 6f 6b 65 4c 69 6e 65 63 61 70 3a 22 72 6f 75 6e 64 22 2c Data Ascii: focusable:"false",viewBox:"0 0 16 16","aria-labelledby":n},i),t?o.createElement("title",{id:n},t):null,r\|\|(r=o.createElement("g",{fill:"none",stroke:"currentColor"},o.createElement("circle",{cx:8,cy:8,r:7.5}),o.createElement("path",{strokeLinecap:"round",
2024-04-18 19:18:46 UTC	1369	IN	Data Raw: 73 61 62 6c 65 3a 22 66 61 6c 73 65 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 36 20 31 36 22 2c 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 3a 6e 7d 2c 73 29 2c 74 3f 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 69 74 6c 65 22 2c 7b 69 64 3a 6e 7d 2c 74 29 3a 6e 75 6c 6c 2c 72 7c 7c 28 72 3d 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 67 22 2c 7b 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 73 74 72 6f 6b 65 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 7d 2c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 72 65 63 74 22 2c 7b 77 69 64 74 68 3a 31 35 2c 68 65 69 67 68 74 3a 31 33 2c 78 3a 2e 35 2c 79 3a 31 2e 35 2c 72 78 3a 2e 35 2c 72 79 3a 2e 35 7d 29 2c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 64 3a Data Ascii: sable:"false",viewBox:"0 0 16 16","aria-labelledby":n},s),t?a.createElement("title",{id:n},t):null,r\|\|(r=a.createElement("g",{fill:"none",stroke:"currentColor"},a.createElement("rect",{width:15,height:13,x:.5,y:1.5,rx:.5,ry:.5}),a.createElement("path",{d:
2024-04-18 19:18:46 UTC	1369	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 6e 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 72 29 26 26 28 65 5b 72 5d 3d 6e 5b 72 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 61 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 63 6f 6e 73 74 20 69 3d 65 3d 3e 7b 6c 65 74 7b 74 69 74 6c 65 3a 74 2c 74 69 74 6c 65 49 64 3a 6e 2c 2e 2e 2e 69 Data Ascii: ){return a=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},a.apply(this,arguments)}const i=e=>{let{title:t,titleId:n,...i
2024-04-18 19:18:46 UTC	1369	IN	Data Raw: 4c 69 6e 65 63 61 70 3a 22 72 6f 75 6e 64 22 2c 64 3a 22 4d 33 20 32 2e 35 68 31 30 22 7d 29 29 2c 6f 7c 7c 28 6f 3d 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 66 69 6c 6c 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 2c 64 3a 22 4d 33 20 34 76 31 31 63 30 20 2e 35 35 2e 34 35 20 31 20 31 20 31 68 38 63 2e 35 35 20 30 20 31 2d 2e 34 35 20 31 2d 31 56 34 48 33 7a 6d 34 20 39 2e 35 63 30 20 2e 32 38 2d 2e 32 32 2e 35 2d 2e 35 2e 35 73 2d 2e 35 2d 2e 32 32 2d 2e 35 2d 2e 35 76 2d 37 63 30 2d 2e 32 38 2e 32 32 2d 2e 35 2e 35 2d 2e 35 73 2e 35 2e 32 32 2e 35 2e 35 76 37 7a 6d 33 20 30 63 30 20 2e 32 38 2d 2e 32 32 2e 35 2d 2e 35 2e 35 73 2d 2e 35 2d 2e 32 32 2d 2e 35 2d 2e 35 76 2d 37 63 30 2d 2e 32 38 2e 32 32 2d 2e 35 2e 35 2d 2e Data Ascii: Linecap:"round",d:"M3 2.5h10"})),o\|\|(o=a.createElement("path",{fill:"currentColor",d:"M3 4v11c0 .55.45 1 1 1h8c.55 0 1-.45 1-1V4H3zm4 9.5c0 .28-.22.5-.5.5s-.5-.22-.5-.5v-7c0-.28.22-.5.5-.5s.5.22.5.5v7zm3 0c0 .28-.22.5-.5.5s-.5-.22-.5-.5v-7c0-.28.22-.5.5-.
2024-04-18 19:18:46 UTC	1369	IN	Data Raw: 73 76 67 22 2c 77 69 64 74 68 3a 32 36 2c 68 65 69 67 68 74 3a 32 36 2c 66 6f 63 75 73 61 62 6c 65 3a 22 66 61 6c 73 65 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 32 30 20 32 36 22 2c 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 3a 6e 7d 2c 69 29 2c 74 3f 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 69 74 6c 65 22 2c 7b 69 64 3a 6e 7d 2c 74 29 3a 6e 75 6c 6c 2c 72 7c 7c 28 72 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 66 69 6c 6c 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 2c 64 3a 22 4d 31 33 2e 34 31 20 30 48 32 43 2e 39 20 30 20 30 20 2e 39 20 30 20 32 76 32 32 63 30 20 31 2e 31 2e 39 20 32 20 32 20 32 68 31 36 63 31 2e 31 20 30 20 32 2d 2e 39 20 32 2d 32 56 36 2e 35 38 4c 31 33 2e 34 31 20 30 7a 6d 32 Data Ascii: svg",width:26,height:26,focusable:"false",viewBox:"0 0 20 26","aria-labelledby":n},i),t?o.createElement("title",{id:n},t):null,r\|\|(r=o.createElement("path",{fill:"currentColor",d:"M13.41 0H2C.9 0 0 .9 0 2v22c0 1.1.9 2 2 2h16c1.1 0 2-.9 2-2V6.58L13.41 0zm2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49755	104.18.72.113	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:46 UTC	379	OUT	GET /compose/web_widget/secomapp.zendesk.com HTTP/1.1 Host: ekr.zdassets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:18:47 UTC	1100	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 19:18:47 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin cdn-cache-control: max-age=60 vary: Accept, Origin cache-control: max-age=300, public, stale-while-revalidate=300, stale-if-error=21600 etag: W/"f7bd410822025f7a263e9a01d11c71e2" x-request-id: 872cb43b89112c8e-SEA X-Request-ID: 872cb43b89112c8e-SEA x-runtime: 0.013058 X-Zendesk-Zorg: yes CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y3QbBZ2hdd0b8Pw8WW1bGtAZ1Gd9EaP2McpefQHr9TuW0P75or3hxOyoB4jeWc7IhqNkphKP73BqcUiOqgZN4QYdPc2LyfTI0VPA4g%2BYUht50XCdUJkEJ2o3dY95hBwt08U%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Server: cloudflare CF-RAY: 876700af9869187f-ATL
2024-04-18 19:18:47 UTC	269	IN	Data Raw: 32 65 36 0d 0a 7b 22 70 72 6f 64 75 63 74 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 77 65 62 5f 77 69 64 67 65 74 22 2c 22 69 64 22 3a 22 73 65 63 6f 6d 61 70 70 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 22 2c 22 62 6f 6f 74 73 74 72 61 70 22 3a 7b 22 63 6f 6e 66 69 67 22 3a 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 66 61 73 74 4c 6f 61 64 22 3a 74 72 75 65 7d 2c 22 63 6f 6c 6f 72 22 3a 22 23 37 38 61 33 30 30 22 2c 22 62 72 61 6e 64 22 3a 22 73 65 63 6f 6d 61 70 70 22 2c 22 65 6d 62 65 64 73 22 3a 7b 22 74 69 63 6b 65 74 53 75 62 6d 69 73 73 69 6f 6e 46 6f 72 6d 22 3a 7b 22 65 6d 62 65 64 22 3a 22 73 75 62 6d 69 74 54 69 63 6b 65 74 22 2c 22 70 72 6f 70 73 22 3a 7b 22 61 74 74 61 63 68 6d 65 6e 74 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 6d 61 78 46 69 6c Data Ascii: 2e6{"products":[{"name":"web_widget","id":"secomapp.zendesk.com","bootstrap":{"config":{"features":{"fastLoad":true},"color":"#78a300","brand":"secomapp","embeds":{"ticketSubmissionForm":{"embed":"submitTicket","props":{"attachmentsEnabled":true,"maxFil
2024-04-18 19:18:47 UTC	480	IN	Data Raw: 30 2e 30 2c 22 63 6f 6c 6f 72 22 3a 22 23 37 38 61 33 30 30 22 2c 22 6e 61 6d 65 46 69 65 6c 64 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 75 73 74 6f 6d 46 69 65 6c 64 73 22 3a 7b 22 69 64 73 22 3a 5b 22 32 31 39 38 37 34 34 39 22 2c 22 32 31 39 36 30 35 37 35 22 5d 7d 7d 7d 2c 22 6c 61 75 6e 63 68 65 72 22 3a 7b 22 65 6d 62 65 64 22 3a 22 6c 61 75 6e 63 68 65 72 22 2c 22 70 72 6f 70 73 22 3a 7b 22 63 6f 6c 6f 72 22 3a 22 23 37 38 61 33 30 30 22 2c 22 6c 61 62 65 6c 4b 65 79 22 3a 22 73 75 70 70 6f 72 74 22 7d 7d 7d 2c 22 62 72 61 6e 64 43 6f 75 6e 74 22 3a 31 2e 30 7d 7d 2c 22 66 65 61 74 75 72 65 73 22 3a 5b 22 74 69 63 6b 65 74 5f 73 75 62 6d 69 73 73 69 6f 6e 22 5d 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 6b 72 2e 7a 65 6e 64 65 73 6b Data Ascii: 0.0,"color":"#78a300","nameFieldEnabled":true,"customFields":{"ids":["21987449","21960575"]}}},"launcher":{"embed":"launcher","props":{"color":"#78a300","labelKey":"support"}}},"brandCount":1.0}},"features":["ticket_submission"],"url":"https://ekr.zendesk
2024-04-18 19:18:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49756	206.189.254.86	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:46 UTC	1350	OUT	GET /favicon.ico HTTP/1.1 Host: af.uppromote.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://af.uppromote.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InppOEtYM0hPXC8yWFJzMnRvODZrRGhRPT0iLCJ2YWx1ZSI6IkRsckxwSDRBTGtGU1pNUjVWdldIZjZvbTBiSXFJWVE2TUgzK0pKcXRiTitab0JRZGNHMWZVK2o4R2JDNHo2SkEiLCJtYWMiOiI0NWY1NGFkMWI1NzBhMmZhMjQ1N2JlZjIzMTA1M2Y0YmFiYjc1Njk2Y2FlYmJhOWZiMDRkYTNkOTFmNzQwYzhjIn0%3D; laravel_session=eyJpdiI6ImhseUNxSzk2UWZQRFBLYzhkZTJwUFE9PSIsInZhbHVlIjoiam9OK2RRa2xmSUlqbWZTeEZJc2hLUVZRS2c2S3AwT1FIaU5aZHQ1UU1sYjJIZlMzQWdVWDl3OVRwZU52bWR0QmhvRVgrOW9qeVA0QmtKTVBpdjVwMWdaa3FuWkxCeU1CSEVZaXRYRzM4MTIwMlhxWlwvbVZURk5kYVJxQXZnVmk4IiwibWFjIjoiNzMxYjMyNDVlYjE2NjEwYTFiN2ZiM2ZlZWQ4N2VlNWFkYjE2MzE2ODI2MWEzNDg3YzA3MTNlYWQ1YmRlNWZiOSJ9; _gid=GA1.2.1443929882.1713467925; _gat_gtag_UA_53113273_27=1; _ga=GA1.1.130039912.1713467925; _ga_VWZPYDCSKQ=GS1.1.1713467924.1.0.1713467924.60.0.0
2024-04-18 19:18:47 UTC	410	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:18:47 GMT Content-Type: image/x-icon Content-Length: 15406 Connection: close Last-Modified: Tue, 16 Apr 2024 03:32:49 GMT ETag: "661df161-3c2e" Accept-Ranges: bytes Front-End-Https: on Strict-Transport-Security: max-age=3600; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Forwarded-For: 81.181.57.52
2024-04-18 19:18:47 UTC	15406	IN	Data Raw: 00 00 01 00 03 00 10 10 00 00 01 00 20 00 68 04 00 00 36 00 00 00 20 20 00 00 01 00 20 00 28 11 00 00 9e 04 00 00 30 30 00 00 01 00 20 00 68 26 00 00 c6 15 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 4d ff bf 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 40 4d ff bf 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 4c 58 ff ff 61 Data Ascii: h6 (00 h&( @MANANANANANANANANANANANANANAN@MANANANANANANANANANANANANANANANANANANANANANANANLXa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49757	74.125.138.105	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:46 UTC	577	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-53113273-27&cid=130039912.1713467925&jid=1329057363&_u=YEBAAUAAAAAAACAAI~&z=152713507 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:18:47 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 19:18:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:18:47 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49759	206.189.254.86	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:47 UTC	1113	OUT	GET /favicon.ico HTTP/1.1 Host: af.uppromote.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InppOEtYM0hPXC8yWFJzMnRvODZrRGhRPT0iLCJ2YWx1ZSI6IkRsckxwSDRBTGtGU1pNUjVWdldIZjZvbTBiSXFJWVE2TUgzK0pKcXRiTitab0JRZGNHMWZVK2o4R2JDNHo2SkEiLCJtYWMiOiI0NWY1NGFkMWI1NzBhMmZhMjQ1N2JlZjIzMTA1M2Y0YmFiYjc1Njk2Y2FlYmJhOWZiMDRkYTNkOTFmNzQwYzhjIn0%3D; laravel_session=eyJpdiI6ImhseUNxSzk2UWZQRFBLYzhkZTJwUFE9PSIsInZhbHVlIjoiam9OK2RRa2xmSUlqbWZTeEZJc2hLUVZRS2c2S3AwT1FIaU5aZHQ1UU1sYjJIZlMzQWdVWDl3OVRwZU52bWR0QmhvRVgrOW9qeVA0QmtKTVBpdjVwMWdaa3FuWkxCeU1CSEVZaXRYRzM4MTIwMlhxWlwvbVZURk5kYVJxQXZnVmk4IiwibWFjIjoiNzMxYjMyNDVlYjE2NjEwYTFiN2ZiM2ZlZWQ4N2VlNWFkYjE2MzE2ODI2MWEzNDg3YzA3MTNlYWQ1YmRlNWZiOSJ9; _gid=GA1.2.1443929882.1713467925; _gat_gtag_UA_53113273_27=1; _ga=GA1.1.130039912.1713467925; _ga_VWZPYDCSKQ=GS1.1.1713467924.1.0.1713467924.60.0.0
2024-04-18 19:18:48 UTC	410	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 19:18:47 GMT Content-Type: image/x-icon Content-Length: 15406 Connection: close Last-Modified: Tue, 16 Apr 2024 03:32:49 GMT ETag: "661df161-3c2e" Accept-Ranges: bytes Front-End-Https: on Strict-Transport-Security: max-age=3600; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Forwarded-For: 81.181.57.52
2024-04-18 19:18:48 UTC	15406	IN	Data Raw: 00 00 01 00 03 00 10 10 00 00 01 00 20 00 68 04 00 00 36 00 00 00 20 20 00 00 01 00 20 00 28 11 00 00 9e 04 00 00 30 30 00 00 01 00 20 00 68 26 00 00 c6 15 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 4d ff bf 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 40 4d ff bf 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 41 4e ff ff 4c 58 ff ff 61 Data Ascii: h6 (00 h&( @MANANANANANANANANANANANANANAN@MANANANANANANANANANANANANANANANANANANANANANANANLXa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49760	104.18.70.113	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:47 UTC	557	OUT	GET /web_widget/classic/latest/web-widget-locales/classic/en-us-json-7bc1c0f.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:18:47 UTC	1184	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 19:18:47 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 25711 Connection: close x-amz-id-2: W9B1SBtAeKjZ8kR3+2GgpY7yqrRwEUd74ifS+fdKkR32Prbx0bEwMeNV6dGVRlF6Cg02ybWPMLk= x-amz-request-id: DKWT4SJ3NP0VX855 x-amz-replication-status: COMPLETED Last-Modified: Mon, 08 Apr 2024 13:46:15 GMT ETag: "6eb45e96a7cbb4b8ca10897f3cf09981" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Tue, 08 Apr 2025 13:46:13 GMT x-amz-version-id: LLNIVxZ_bojnmbOmqAvI_43_VNrKfel_ CF-Cache-Status: HIT Age: 632018 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vZcfcYrO4STY89y8RqbGFryC1oTBzLUKCu0j5NakC1TCfbN8jnomZM0U5WOnWgGvFFjHvucAS%2F2aGGWGnIe5GxTqGG0UOF%2B3u4HPp%2BXRQTXX2ZrSgx%2BQ57tMnuz4C1%2FZy6dQalo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 876700b54987135d-ATL
2024-04-18 19:18:47 UTC	185	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 69 63 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 69 63 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 39 35 30 5d 2c 7b 34 33 32 35 35 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 27 7b 22 6c 6f 63 61 6c 65 22 3a 7b 22 6c 6f 63 61 6c 65 Data Ascii: "use strict";(globalThis.webpackChunk_zendesk_web_widget_classic=globalThis.webpackChunk_zendesk_web_widget_classic\|\|[]).push([[6950],{43255:e=>{e.exports=JSON.parse('{"locale":{"locale
2024-04-18 19:18:47 UTC	1369	IN	Data Raw: 22 3a 22 65 6e 2d 75 73 22 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 3a 7b 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 61 72 74 69 63 6c 65 2e 66 65 65 64 62 61 63 6b 2e 6e 6f 2e 6e 65 65 64 5f 68 65 6c 70 22 3a 22 4e 6f 2c 20 49 20 6e 65 65 64 20 68 65 6c 70 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 61 72 74 69 63 6c 65 2e 66 65 65 64 62 61 63 6b 2e 6e 6f 2e 72 65 61 73 6f 6e 2e 72 65 6c 61 74 65 64 22 3a 22 49 74 5c 27 73 20 72 65 6c 61 74 65 64 2c 20 62 75 74 20 69 74 20 64 69 64 6e 5c 27 74 20 61 6e 73 77 65 72 20 6d 79 20 71 75 65 73 74 69 6f 6e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 Data Ascii: ":"en-us","rtl":false,"translations":{"embeddable_framework.answerBot.article.feedback.no.need_help":"No, I need help","embeddable_framework.answerBot.article.feedback.no.reason.related":"It\'s related, but it didn\'t answer my question","embeddable_frame
2024-04-18 19:18:47 UTC	1369	IN	Data Raw: 65 2e 67 65 74 5f 69 6e 5f 74 6f 75 63 68 22 3a 22 48 6f 77 20 64 6f 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 67 65 74 20 69 6e 20 74 6f 75 63 68 3f 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 6d 73 67 2e 63 68 61 6e 6e 65 6c 5f 63 68 6f 69 63 65 2e 72 65 71 75 65 73 74 5f 63 61 6c 6c 62 61 63 6b 5f 6f 6e 6c 79 2e 74 69 74 6c 65 22 3a 22 57 6f 75 6c 64 20 79 6f 75 20 6c 69 6b 65 20 74 68 65 20 74 65 61 6d 20 74 6f 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 72 65 67 61 72 64 69 6e 67 20 79 6f 75 72 20 71 75 65 73 74 69 6f 6e 3f 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 6d 73 67 2e 63 68 61 6e 6e 65 6c 5f 63 68 6f 69 63 65 2e 73 75 62 6d 69 74 5f Data Ascii: e.get_in_touch":"How do you want to get in touch?","embeddable_framework.answerBot.msg.channel_choice.request_callback_only.title":"Would you like the team to contact you regarding your question?","embeddable_framework.answerBot.msg.channel_choice.submit_
2024-04-18 19:18:47 UTC	1369	IN	Data Raw: 65 72 20 71 75 65 73 74 69 6f 6e 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 6d 73 67 2e 70 72 6f 6d 70 74 5f 61 67 61 69 6e 5f 6e 6f 5f 63 68 61 6e 6e 65 6c 73 5f 61 76 61 69 6c 61 62 6c 65 22 3a 22 59 6f 75 20 63 61 6e 20 61 73 6b 20 61 6e 6f 74 68 65 72 20 71 75 65 73 74 69 6f 6e 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 6d 73 67 2e 79 65 73 5f 61 63 6b 6e 6f 77 6c 65 64 67 65 6d 65 6e 74 22 3a 22 4e 69 63 65 2e 20 4b 6e 6f 77 6c 65 64 67 65 20 69 73 20 70 6f 77 65 72 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 72 65 73 75 6c 74 73 2e 6d 61 6e 79 5f 61 72 74 69 63 6c 65 Data Ascii: er question.","embeddable_framework.answerBot.msg.prompt_again_no_channels_available":"You can ask another question.","embeddable_framework.answerBot.msg.yes_acknowledgement":"Nice. Knowledge is power.","embeddable_framework.answerBot.results.many_article
2024-04-18 19:18:47 UTC	1369	IN	Data Raw: 69 73 61 62 6c 65 20 43 68 61 74 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 67 72 65 65 6d 65 6e 74 2e 63 6f 6f 6b 69 65 73 2e 64 69 73 61 62 6c 65 5f 63 68 61 74 5f 6e 6f 74 65 22 3a 22 59 6f 75 20 6d 61 79 20 64 69 73 61 62 6c 65 20 74 68 65 20 63 68 61 74 20 61 6e 79 74 69 6d 65 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 67 72 65 65 6d 65 6e 74 2e 63 6f 6f 6b 69 65 73 2e 65 6e 61 62 6c 65 22 3a 22 45 6e 61 62 6c 65 20 43 6f 6f 6b 69 65 73 20 61 6e 64 20 43 68 61 74 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 67 72 65 65 6d 65 6e 74 2e 63 6f 6f 6b 69 65 73 2e 72 65 65 6e 61 62 6c 65 5f 63 68 61 74 5f 6e 6f 74 65 Data Ascii: isable Chat","embeddable_framework.chat.agreement.cookies.disable_chat_note":"You may disable the chat anytime.","embeddable_framework.chat.agreement.cookies.enable":"Enable Cookies and Chat","embeddable_framework.chat.agreement.cookies.reenable_chat_note
2024-04-18 19:18:47 UTC	1369	IN	Data Raw: 64 2e 20 46 69 6c 65 20 73 65 6e 64 69 6e 67 20 69 73 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 74 74 61 63 68 6d 65 6e 74 73 2e 65 72 72 6f 72 2e 6e 6f 74 5f 73 75 70 70 6f 72 74 65 64 22 3a 22 55 70 6c 6f 61 64 20 66 61 69 6c 65 64 2e 20 46 69 6c 65 20 73 65 6e 64 69 6e 67 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 6f 6e 20 74 68 69 73 20 62 72 6f 77 73 65 72 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 74 74 61 63 68 6d 65 6e 74 73 2e 65 72 72 6f 72 2e 75 6e 6b 6e 6f 77 6e 5f 65 72 72 6f 72 22 3a 22 55 70 6c 6f 61 64 20 66 61 69 6c 65 64 2e 20 53 6f 6d 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 6f 6e 67 2e 20 Data Ascii: d. File sending is not allowed.","embeddable_framework.chat.attachments.error.not_supported":"Upload failed. File sending is not supported on this browser.","embeddable_framework.chat.attachments.error.unknown_error":"Upload failed. Something went wrong.
2024-04-18 19:18:47 UTC	1369	IN	Data Raw: 74 32 29 73 20 61 72 65 20 74 79 70 69 6e 67 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 63 68 61 74 4c 6f 67 2e 6c 6f 61 64 69 6e 67 49 6d 61 67 65 22 3a 22 4c 6f 61 64 69 6e 67 20 69 6d 61 67 65 20 28 25 28 61 74 74 61 63 68 6d 65 6e 74 53 69 7a 65 29 73 29 2e 2e 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 63 68 61 74 4c 6f 67 2e 6c 6f 67 69 6e 2e 75 70 64 61 74 65 49 6e 66 6f 22 3a 22 50 6c 65 61 73 65 20 75 70 64 61 74 65 20 79 6f 75 72 20 69 6e 66 6f 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 63 68 61 74 4c 6f 67 2e 71 75 65 75 65 50 6f 73 69 74 69 6f 6e 22 3a 22 51 75 65 75 65 20 70 6f 73 69 74 69 6f 6e 3a 20 25 28 76 Data Ascii: t2)s are typing","embeddable_framework.chat.chatLog.loadingImage":"Loading image (%(attachmentSize)s)...","embeddable_framework.chat.chatLog.login.updateInfo":"Please update your info","embeddable_framework.chat.chatLog.queuePosition":"Queue position: %(v
2024-04-18 19:18:47 UTC	1369	IN	Data Raw: 6c 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 74 6f 20 25 28 65 6d 61 69 6c 29 73 20 77 68 65 6e 20 74 68 65 20 63 68 61 74 20 65 6e 64 73 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 65 6d 61 69 6c 74 72 61 6e 73 63 72 69 70 74 2e 74 69 74 6c 65 22 3a 22 45 6d 61 69 6c 20 63 68 61 74 20 74 72 61 6e 73 63 72 69 70 74 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 65 6d 61 69 6c 74 72 61 6e 73 63 72 69 70 74 2e 74 72 79 5f 61 67 61 69 6e 22 3a 22 54 72 79 20 61 67 61 69 6e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 66 65 74 63 68 69 6e 67 5f 68 69 73 74 6f 72 79 22 3a 22 4c 6f 61 64 69 6e 67 20 6d 65 73 73 61 67 65 73 2e 2e 2e 22 Data Ascii: l will be sent to %(email)s when the chat ends.","embeddable_framework.chat.emailtranscript.title":"Email chat transcript","embeddable_framework.chat.emailtranscript.try_again":"Try again","embeddable_framework.chat.fetching_history":"Loading messages..."
2024-04-18 19:18:47 UTC	1369	IN	Data Raw: 76 65 72 2e 6c 61 62 65 6c 22 3a 22 41 74 74 61 63 68 20 66 69 6c 65 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 69 63 6f 6e 2e 65 6e 64 43 68 61 74 2e 68 6f 76 65 72 2e 6c 61 62 65 6c 22 3a 22 45 6e 64 20 63 68 61 74 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 69 63 6f 6e 2e 6d 65 6e 75 2e 68 6f 76 65 72 2e 6c 61 62 65 6c 22 3a 22 4f 70 74 69 6f 6e 73 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6d 65 73 73 61 67 65 66 61 69 6c 65 64 2e 66 61 69 6c 65 64 5f 74 77 69 63 65 22 3a 22 46 61 69 6c 65 64 20 74 6f 20 73 65 6e 64 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6d 65 73 73 61 67 65 Data Ascii: ver.label":"Attach file","embeddable_framework.chat.icon.endChat.hover.label":"End chat","embeddable_framework.chat.icon.menu.hover.label":"Options","embeddable_framework.chat.messagefailed.failed_twice":"Failed to send","embeddable_framework.chat.message
2024-04-18 19:18:47 UTC	1369	IN	Data Raw: 68 61 74 2e 6f 70 65 72 61 74 69 6e 67 48 6f 75 72 73 2e 6c 61 62 65 6c 2e 73 65 70 61 72 61 74 6f 72 2e 72 61 6e 67 65 22 3a 22 20 e2 80 94 20 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6f 70 65 72 61 74 69 6e 67 48 6f 75 72 73 2e 6c 61 62 65 6c 2e 73 75 6e 64 61 79 22 3a 22 53 75 6e 64 61 79 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6f 70 65 72 61 74 69 6e 67 48 6f 75 72 73 2e 6c 61 62 65 6c 2e 74 68 75 72 73 64 61 79 22 3a 22 54 68 75 72 73 64 61 79 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6f 70 65 72 61 74 69 6e 67 48 6f 75 72 73 2e 6c 61 62 65 6c 2e 74 69 6d 65 52 61 6e 67 65 22 3a 22 25 28 6f 70 65 6e 69 6e 67 54 69 Data Ascii: hat.operatingHours.label.separator.range":" ","embeddable_framework.chat.operatingHours.label.sunday":"Sunday","embeddable_framework.chat.operatingHours.label.thursday":"Thursday","embeddable_framework.chat.operatingHours.label.timeRange":"%(openingTi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49761	104.16.51.111	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:47 UTC	531	OUT	GET /embeddable/config HTTP/1.1 Host: secomapp.zendesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://af.uppromote.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:18:48 UTC	1076	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 19:18:48 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-methods: GET access-control-expose-headers: access-control-max-age: 7200 cache-control: public, max-age=60, stale-while-revalidate=600, stale-if-error=3600 x-zendesk-origin-server: embeddable-app-server-988d488b4-zsgs9 x-runtime: 0.001872 vary: Origin X-Cached: MISS CF-Cache-Status: EXPIRED Last-Modified: Thu, 18 Apr 2024 17:56:19 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TOAP0RN818befjUWx556a0GtOPNDX200AIHlWZ6LH4%2BrhvlUYZvMvJIW3CPd%2FUlur43kUBFyb5cewgVRupMbGutsPZMocV6k8rkfW9Ik0XkH4POa0PmR2ZsidsdAkhG9kR8o%2Faxv"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=90af49a70c381b9199e3ff667502fb2c4ae9c618-1713467928; path=/; domain=.secomapp.zendesk.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 876700b5fd5badc9-ATL
2024-04-18 19:18:48 UTC	293	IN	Data Raw: 31 37 32 0d 0a 7b 22 62 72 61 6e 64 22 3a 22 73 65 63 6f 6d 61 70 70 22 2c 22 62 72 61 6e 64 43 6f 75 6e 74 22 3a 31 2c 22 63 6f 6c 6f 72 22 3a 22 23 37 38 61 33 30 30 22 2c 22 65 6d 62 65 64 73 22 3a 7b 22 74 69 63 6b 65 74 53 75 62 6d 69 73 73 69 6f 6e 46 6f 72 6d 22 3a 7b 22 65 6d 62 65 64 22 3a 22 73 75 62 6d 69 74 54 69 63 6b 65 74 22 2c 22 70 72 6f 70 73 22 3a 7b 22 63 6f 6c 6f 72 22 3a 22 23 37 38 61 33 30 30 22 2c 22 63 75 73 74 6f 6d 46 69 65 6c 64 73 22 3a 7b 22 69 64 73 22 3a 5b 22 32 31 39 38 37 34 34 39 22 2c 22 32 31 39 36 30 35 37 35 22 5d 7d 2c 22 61 74 74 61 63 68 6d 65 6e 74 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 6d 61 78 46 69 6c 65 53 69 7a 65 22 3a 35 32 34 32 38 38 30 30 2c 22 6e 61 6d 65 46 69 65 6c 64 45 6e 61 62 6c 65 64 Data Ascii: 172{"brand":"secomapp","brandCount":1,"color":"#78a300","embeds":{"ticketSubmissionForm":{"embed":"submitTicket","props":{"color":"#78a300","customFields":{"ids":["21987449","21960575"]},"attachmentsEnabled":true,"maxFileSize":52428800,"nameFieldEnabled
2024-04-18 19:18:48 UTC	84	IN	Data Raw: 22 2c 22 70 72 6f 70 73 22 3a 7b 22 63 6f 6c 6f 72 22 3a 22 23 37 38 61 33 30 30 22 2c 22 6c 61 62 65 6c 4b 65 79 22 3a 22 73 75 70 70 6f 72 74 22 7d 7d 7d 2c 22 66 65 61 74 75 72 65 73 22 3a 7b 22 66 61 73 74 4c 6f 61 64 22 3a 74 72 75 65 7d 7d 0d 0a Data Ascii: ","props":{"color":"#78a300","labelKey":"support"}}},"features":{"fastLoad":true}}
2024-04-18 19:18:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49763	104.16.53.111	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:48 UTC	361	OUT	GET /embeddable/config HTTP/1.1 Host: secomapp.zendesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:18:48 UTC	1088	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 19:18:48 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-methods: GET access-control-expose-headers: access-control-max-age: 7200 cache-control: public, max-age=60, stale-while-revalidate=600, stale-if-error=3600 x-zendesk-origin-server: embeddable-app-server-988d488b4-zsgs9 x-runtime: 0.001872 vary: Origin X-Cached: MISS CF-Cache-Status: HIT Age: 0 Last-Modified: Thu, 18 Apr 2024 19:18:48 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dRhuDThtQ25WSLouWXHpKmB2FlKwTvkfYlagC%2BCHQwxh7d%2BN0%2Fos%2Fn4kFZVyxeGTorpSkvLS%2BDoBnwvIUC3ng5LRusCBApTUIvdsfrXl3%2FcL5qhssuvb5vrX%2Fj2wKFeTXDBuAGfv"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=90af49a70c381b9199e3ff667502fb2c4ae9c618-1713467928; path=/; domain=.secomapp.zendesk.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 876700bb1f4c674b-ATL
2024-04-18 19:18:48 UTC	281	IN	Data Raw: 31 37 32 0d 0a 7b 22 62 72 61 6e 64 22 3a 22 73 65 63 6f 6d 61 70 70 22 2c 22 62 72 61 6e 64 43 6f 75 6e 74 22 3a 31 2c 22 63 6f 6c 6f 72 22 3a 22 23 37 38 61 33 30 30 22 2c 22 65 6d 62 65 64 73 22 3a 7b 22 74 69 63 6b 65 74 53 75 62 6d 69 73 73 69 6f 6e 46 6f 72 6d 22 3a 7b 22 65 6d 62 65 64 22 3a 22 73 75 62 6d 69 74 54 69 63 6b 65 74 22 2c 22 70 72 6f 70 73 22 3a 7b 22 63 6f 6c 6f 72 22 3a 22 23 37 38 61 33 30 30 22 2c 22 63 75 73 74 6f 6d 46 69 65 6c 64 73 22 3a 7b 22 69 64 73 22 3a 5b 22 32 31 39 38 37 34 34 39 22 2c 22 32 31 39 36 30 35 37 35 22 5d 7d 2c 22 61 74 74 61 63 68 6d 65 6e 74 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 6d 61 78 46 69 6c 65 53 69 7a 65 22 3a 35 32 34 32 38 38 30 30 2c 22 6e 61 6d 65 46 69 65 6c 64 45 6e 61 62 6c 65 64 Data Ascii: 172{"brand":"secomapp","brandCount":1,"color":"#78a300","embeds":{"ticketSubmissionForm":{"embed":"submitTicket","props":{"color":"#78a300","customFields":{"ids":["21987449","21960575"]},"attachmentsEnabled":true,"maxFileSize":52428800,"nameFieldEnabled
2024-04-18 19:18:48 UTC	96	IN	Data Raw: 64 22 3a 22 6c 61 75 6e 63 68 65 72 22 2c 22 70 72 6f 70 73 22 3a 7b 22 63 6f 6c 6f 72 22 3a 22 23 37 38 61 33 30 30 22 2c 22 6c 61 62 65 6c 4b 65 79 22 3a 22 73 75 70 70 6f 72 74 22 7d 7d 7d 2c 22 66 65 61 74 75 72 65 73 22 3a 7b 22 66 61 73 74 4c 6f 61 64 22 3a 74 72 75 65 7d 7d 0d 0a Data Ascii: d":"launcher","props":{"color":"#78a300","labelKey":"support"}}},"features":{"fastLoad":true}}
2024-04-18 19:18:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49765	216.239.36.181	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:50 UTC	1152	OUT	POST /g/collect?v=2&tid=G-VWZPYDCSKQ&gtm=45je44f0v894741970za200&_p=1713467923933&gcd=13l3l3l3l1&npa=0&dma=0&cid=130039912.1713467925&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=AEAI&_s=2&sid=1713467924&sct=1&seg=0&dl=https%3A%2F%2Faf.uppromote.com%2F&dt=AFFILIATE%20%7C%20Login&en=scroll&epn.percent_scrolled=90&_et=12&tfd=8717 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://af.uppromote.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://af.uppromote.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:18:51 UTC	450	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://af.uppromote.com Date: Thu, 18 Apr 2024 19:18:50 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49766	23.220.189.216	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:50 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-18 19:18:51 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=215061 Date: Thu, 18 Apr 2024 19:18:51 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49767	23.220.189.216	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:51 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-18 19:18:51 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 01uvbYwAAAACkqWtaEMjWQL/4cpisZkorTUVNMzBFREdFMDgxMQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=215038 Date: Thu, 18 Apr 2024 19:18:51 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-18 19:18:51 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49768	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:53 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=4azP9xWtRUeNfXy&MD=XhVKEk1h HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-18 19:18:54 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: b35f0b41-00b6-4a98-ae45-e3f4ef7d8f57 MS-RequestId: a4375da5-ea8d-4b64-85a9-9df43c8b6ee4 MS-CV: 0+SvSrQt+UG2NBkN.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 18 Apr 2024 19:18:53 GMT Connection: close Content-Length: 24490
2024-04-18 19:18:54 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-04-18 19:18:54 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49769	108.177.122.106	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:18:59 UTC	613	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:19:00 UTC	2171	IN	HTTP/1.1 302 Found Location: https://www.google.com/sorry/index?continue=https://www.google.com/complete/search%3Fclient%3Dchrome-omni%26gs_ri%3Dchrome-ext-ansg%26xssi%3Dt%26q%3D%26oit%3D0%26gs_rn%3D42%26sugkey%3DAIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw&q=EgRRtTk0GKPkhbEGIjDXNNgTxoHfWVKTTBihP5c2kHUHsukbzZky06WzqUC1whYr2AOgh-8SrTqeGy3xSDYyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM x-hallmonitor-challenge: CgsIpOSFsQYQp8uATRIEUbU5NA Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-VT3g5IySSEm86zG8WS1DBw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Thu, 18 Apr 2024 19:19:00 GMT Server: gws Content-Length: 554 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-04-18-19; expires=Sat, 18-May-2024 19:19:00 GMT; path=/; domain=.google.com; Secure; SameSite=none Set-Cookie: NID=513=B6nPQo_QZrlC3oKt2WlwftaIf830p73W27OJVHtgnKCHHjNXhMqNm7DPbh2uG_Xu-h65qbxUwYpIbIyFlFjm4HMKZD0png9SwqRXjMtC1ApiD6cT59WdUNmXefcnbUR_RY1NKmA6I9UJXVYiTdP4t790OwgkWgA6bvdfhl_Ae9M; expires=Fri, 18-Oct-2024 19:18:59 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:19:00 UTC	554	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 6f 72 72 79 2f 69 6e 64 65 78 3f 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 6f 6d 70 6c 65 74 65 2f 73 65 61 72 63 68 25 33 46 63 6c Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/sorry/index?continue=https://www.google.com/complete/search%3Fcl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49770	108.177.122.106	443	1472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:19:00 UTC	815	OUT	GET /sorry/index?continue=https://www.google.com/complete/search%3Fclient%3Dchrome-omni%26gs_ri%3Dchrome-ext-ansg%26xssi%3Dt%26q%3D%26oit%3D0%26gs_rn%3D42%26sugkey%3DAIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw&q=EgRRtTk0GKPkhbEGIjDXNNgTxoHfWVKTTBihP5c2kHUHsukbzZky06WzqUC1whYr2AOgh-8SrTqeGy3xSDYyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 19:19:00 UTC	356	IN	HTTP/1.1 429 Too Many Requests Date: Thu, 18 Apr 2024 19:19:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html Server: HTTP server (unknown) Content-Length: 3510 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 19:19:00 UTC	899	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 6f 6d 70 6c 65 74 65 2f 73 65 61 72 63 68 3f 63 6c 69 65 6e 74 3d 63 68 72 6f 6d 65 2d 6f 6d 6e Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><meta name="viewport" content="initial-scale=1"><title>https://www.google.com/complete/search?client=chrome-omn
2024-04-18 19:19:00 UTC	1255	IN	Data Raw: 72 20 77 65 62 20 62 72 6f 77 73 65 72 2e 0a 3c 2f 64 69 76 3e 0a 3c 2f 6e 6f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 2e 6a 73 22 20 61 73 79 6e 63 20 64 65 66 65 72 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 76 61 72 20 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 72 65 73 70 6f 6e 73 65 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 61 70 74 63 68 61 2d 66 6f 72 6d 27 29 2e 73 75 62 6d 69 74 28 29 3b 7d 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 64 69 76 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 22 20 63 6c 61 73 73 3d 22 67 2d 72 65 63 61 70 74 Data Ascii: r web browser.</div></noscript><script src="https://www.google.com/recaptcha/api.js" async defer></script><script>var submitCallback = function(response) {document.getElementById('captcha-form').submit();};</script><div id="recaptcha" class="g-recapt
2024-04-18 19:19:00 UTC	1255	IN	Data Raw: 76 69 6f 72 2e 20 54 68 69 73 20 70 61 67 65 20 63 68 65 63 6b 73 20 74 6f 20 73 65 65 20 69 66 20 69 74 27 73 20 72 65 61 6c 6c 79 20 61 20 68 75 6d 61 6e 20 73 65 6e 64 69 6e 67 20 74 68 65 20 72 65 71 75 65 73 74 73 20 61 6e 64 20 6e 6f 74 20 61 20 72 6f 62 6f 74 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 74 68 69 73 20 6e 65 74 77 6f 72 6b 2e 20 3c 62 72 3e 3c 62 72 3e 0a 3c 64 69 76 20 69 64 3d 22 69 6e 66 6f 44 69 76 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 65 65 3b 20 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 20 6d 61 72 67 69 6e 3a 30 20 30 20 31 35 70 78 20 30 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 65 6d 3b 22 3e 0a 54 68 69 73 20 70 61 67 65 20 61 70 70 65 Data Ascii: vior. This page checks to see if it's really a human sending the requests and not a robot coming from this network. <br><br><div id="infoDiv" style="display:none; background-color:#eee; padding:10px; margin:0 0 15px 0; line-height:1.4em;">This page appe
2024-04-18 19:19:00 UTC	101	IN	Data Raw: 3d 30 26 61 6d 70 3b 67 73 5f 72 6e 3d 34 32 26 61 6d 70 3b 73 75 67 6b 65 79 3d 41 49 7a 61 53 79 42 4f 74 69 34 6d 4d 2d 36 78 39 57 44 6e 5a 49 6a 49 65 79 45 55 32 31 4f 70 42 58 71 57 42 67 77 3c 62 72 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: =0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw<br></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49771	40.127.169.103	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 19:19:31 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=4azP9xWtRUeNfXy&MD=XhVKEk1h HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-18 19:19:31 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: 423967a3-3d89-4bc0-af76-b1b812b0dffb MS-RequestId: 9a041245-2326-4392-ba9b-7612bbf60f45 MS-CV: De3gr+Lpz0WurQLB.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 18 Apr 2024 19:19:30 GMT Connection: close Content-Length: 25457
2024-04-18 19:19:31 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-04-18 19:19:31 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Target ID:	0
Start time:	21:18:40
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://af.uppromote.com/
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	21:18:41
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1956,i,5459667013927682966,7205913079346083900,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://af.uppromote.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Windows Analysis Report
http://af.uppromote.com